# Flog Txt Version 1 # Analyzer Version: 2.3.1 # Analyzer Build Date: Jul 30 2018 18:01:18 # Log Creation Date: 11.09.2018 15:34:47.429 Process: id = "1" image_name = "p.exe" filename = "c:\\users\\nd9e1fyi\\desktop\\p.exe" page_root = "0x32edf000" os_pid = "0xad4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\Nd9E1FYi\\Desktop\\p.exe\" " cur_dir = "C:\\Users\\Nd9E1FYi\\Desktop\\" os_username = "X2VS1CUM\\Nd9E1FYi" os_groups = "X2VS1CUM\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e439" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x54fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4 start_va = 0x60000 end_va = 0x9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5 start_va = 0xa0000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 6 start_va = 0x1a0000 end_va = 0x1a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 7 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 8 start_va = 0x200000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 9 start_va = 0x400000 end_va = 0x415fff entry_point = 0x400000 region_type = mapped_file name = "p.exe" filename = "\\Users\\Nd9E1FYi\\Desktop\\p.exe" (normalized: "c:\\users\\nd9e1fyi\\desktop\\p.exe") Region: id = 10 start_va = 0x77e10000 end_va = 0x77f8afff entry_point = 0x77e10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 11 start_va = 0x7ffb0000 end_va = 0x7ffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 12 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 13 start_va = 0x7fff0000 end_va = 0x7ff91873ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 14 start_va = 0x7ff918740000 end_va = 0x7ff918900fff entry_point = 0x7ff918740000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 15 start_va = 0x7ff918901000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ff918901000" filename = "" Region: id = 161 start_va = 0x4c0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 162 start_va = 0x6e320000 end_va = 0x6e36ffff entry_point = 0x6e320000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 163 start_va = 0x6e370000 end_va = 0x6e3e9fff entry_point = 0x6e370000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 164 start_va = 0x6e310000 end_va = 0x6e317fff entry_point = 0x6e310000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 165 start_va = 0x640000 end_va = 0x73ffff entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 166 start_va = 0x75310000 end_va = 0x7548dfff entry_point = 0x75310000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 167 start_va = 0x77ad0000 end_va = 0x77baffff entry_point = 0x77ad0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 168 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 169 start_va = 0x4d0000 end_va = 0x58dfff entry_point = 0x4d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 170 start_va = 0x74a90000 end_va = 0x74b21fff entry_point = 0x74a90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 171 start_va = 0x7feb0000 end_va = 0x7ffaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 172 start_va = 0x20000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 173 start_va = 0x1c0000 end_va = 0x1fffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 174 start_va = 0x420000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 175 start_va = 0x740000 end_va = 0x83ffff entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 176 start_va = 0x840000 end_va = 0x93ffff entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 177 start_va = 0x704c0000 end_va = 0x704c7fff entry_point = 0x704c0000 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 178 start_va = 0x70b60000 end_va = 0x70b78fff entry_point = 0x70b60000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 179 start_va = 0x70d50000 end_va = 0x70f5cfff entry_point = 0x70d50000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 180 start_va = 0x74b30000 end_va = 0x74b39fff entry_point = 0x74b30000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 181 start_va = 0x74b40000 end_va = 0x74b5dfff entry_point = 0x74b40000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 182 start_va = 0x75070000 end_va = 0x750eafff entry_point = 0x75070000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 183 start_va = 0x75540000 end_va = 0x75584fff entry_point = 0x75540000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 184 start_va = 0x76c60000 end_va = 0x76ca3fff entry_point = 0x76c60000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 185 start_va = 0x76d10000 end_va = 0x76dfafff entry_point = 0x76d10000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 186 start_va = 0x76f80000 end_va = 0x7702cfff entry_point = 0x76f80000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 187 start_va = 0x77040000 end_va = 0x7718efff entry_point = 0x77040000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 188 start_va = 0x77230000 end_va = 0x773ecfff entry_point = 0x77230000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 189 start_va = 0x77930000 end_va = 0x7798efff entry_point = 0x77930000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 190 start_va = 0x77a70000 end_va = 0x77ac7fff entry_point = 0x77a70000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 191 start_va = 0x77bb0000 end_va = 0x77cf6fff entry_point = 0x77bb0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 192 start_va = 0x77d50000 end_va = 0x77e0dfff entry_point = 0x77d50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 193 start_va = 0x77030000 end_va = 0x7703efff entry_point = 0x77030000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 194 start_va = 0x620000 end_va = 0x62ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 195 start_va = 0x940000 end_va = 0xac7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 196 start_va = 0x75500000 end_va = 0x7552afff entry_point = 0x75500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 197 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 198 start_va = 0x460000 end_va = 0x460fff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 199 start_va = 0xad0000 end_va = 0xc50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ad0000" filename = "" Region: id = 200 start_va = 0xc60000 end_va = 0x205ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c60000" filename = "" Region: id = 201 start_va = 0x754f0000 end_va = 0x754fbfff entry_point = 0x754f0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 202 start_va = 0x70bf0000 end_va = 0x70c64fff entry_point = 0x70bf0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 203 start_va = 0x2060000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 204 start_va = 0x76e00000 end_va = 0x76f77fff entry_point = 0x76e00000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 205 start_va = 0x756d0000 end_va = 0x756ddfff entry_point = 0x756d0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 206 start_va = 0x756f0000 end_va = 0x76aeefff entry_point = 0x756f0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 207 start_va = 0x773f0000 end_va = 0x77426fff entry_point = 0x773f0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 208 start_va = 0x74b60000 end_va = 0x75058fff entry_point = 0x74b60000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 209 start_va = 0x779e0000 end_va = 0x77a6cfff entry_point = 0x779e0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 210 start_va = 0x77d00000 end_va = 0x77d43fff entry_point = 0x77d00000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 211 start_va = 0x756b0000 end_va = 0x756c2fff entry_point = 0x756b0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 212 start_va = 0x704b0000 end_va = 0x704b9fff entry_point = 0x704b0000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 213 start_va = 0x70490000 end_va = 0x704a4fff entry_point = 0x70490000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 214 start_va = 0x70100000 end_va = 0x70488fff entry_point = 0x70100000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll") Region: id = 215 start_va = 0x470000 end_va = 0x471fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 216 start_va = 0x747e0000 end_va = 0x747fafff entry_point = 0x747e0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 217 start_va = 0x700f0000 end_va = 0x700f7fff entry_point = 0x700f0000 region_type = mapped_file name = "pstorec.dll" filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll") Region: id = 218 start_va = 0x2100000 end_va = 0x2436fff entry_point = 0x2100000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 219 start_va = 0x590000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 220 start_va = 0x480000 end_va = 0x480fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 221 start_va = 0x2440000 end_va = 0x2540fff entry_point = 0x0 region_type = private name = "private_0x0000000002440000" filename = "" Region: id = 222 start_va = 0x2440000 end_va = 0x2540fff entry_point = 0x0 region_type = private name = "private_0x0000000002440000" filename = "" Region: id = 223 start_va = 0x490000 end_va = 0x490fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 224 start_va = 0x77840000 end_va = 0x778c3fff entry_point = 0x77840000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 225 start_va = 0x4a0000 end_va = 0x4a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 226 start_va = 0x6f550000 end_va = 0x700e8fff entry_point = 0x6f550000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 227 start_va = 0x75210000 end_va = 0x752a1fff entry_point = 0x75210000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 228 start_va = 0x726a0000 end_va = 0x7296afff entry_point = 0x726a0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 229 start_va = 0x4b0000 end_va = 0x4b3fff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 230 start_va = 0x610000 end_va = 0x611fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 231 start_va = 0x6f340000 end_va = 0x6f54efff entry_point = 0x6f340000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 232 start_va = 0x630000 end_va = 0x630fff entry_point = 0x630000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 233 start_va = 0x2060000 end_va = 0x2061fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002060000" filename = "" Region: id = 234 start_va = 0x20f0000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 235 start_va = 0x630000 end_va = 0x630fff entry_point = 0x630000 region_type = mapped_file name = "counters.dat" filename = "\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 236 start_va = 0x2070000 end_va = 0x20affff entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 237 start_va = 0x20b0000 end_va = 0x20effff entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 238 start_va = 0x2440000 end_va = 0x253ffff entry_point = 0x0 region_type = private name = "private_0x0000000002440000" filename = "" Region: id = 239 start_va = 0x2540000 end_va = 0x263ffff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 240 start_va = 0x2640000 end_va = 0x267ffff entry_point = 0x0 region_type = private name = "private_0x0000000002640000" filename = "" Region: id = 241 start_va = 0x2680000 end_va = 0x277ffff entry_point = 0x0 region_type = private name = "private_0x0000000002680000" filename = "" Region: id = 242 start_va = 0x2780000 end_va = 0x27bffff entry_point = 0x0 region_type = private name = "private_0x0000000002780000" filename = "" Region: id = 243 start_va = 0x27c0000 end_va = 0x28bffff entry_point = 0x0 region_type = private name = "private_0x00000000027c0000" filename = "" Region: id = 244 start_va = 0x28c0000 end_va = 0x28fffff entry_point = 0x0 region_type = private name = "private_0x00000000028c0000" filename = "" Region: id = 245 start_va = 0x2900000 end_va = 0x29fffff entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 246 start_va = 0x2a00000 end_va = 0x2a3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 247 start_va = 0x2a40000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 248 start_va = 0x2b40000 end_va = 0x2b4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b40000" filename = "" Region: id = 249 start_va = 0x6f330000 end_va = 0x6f339fff entry_point = 0x6f330000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 250 start_va = 0x6f2f0000 end_va = 0x6f322fff entry_point = 0x6f2f0000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\SysWOW64\\mlang.dll" (normalized: "c:\\windows\\syswow64\\mlang.dll") Region: id = 251 start_va = 0x72ad0000 end_va = 0x72c1afff entry_point = 0x72ad0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 252 start_va = 0x2b50000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 253 start_va = 0x2b90000 end_va = 0x2c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 254 start_va = 0x6f2d0000 end_va = 0x6f2e2fff entry_point = 0x6f2d0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\SysWOW64\\samlib.dll" (normalized: "c:\\windows\\syswow64\\samlib.dll") Thread: id = 1 os_tid = 0xc58 [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.268] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.269] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.270] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.271] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.272] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.273] GetTickCount () returned 0x2071a [0025.389] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40fd99) returned 0x0 [0025.390] OleInitialize (pvReserved=0x0) returned 0x0 [0025.943] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76d10000 [0025.944] GetProcAddress (hModule=0x76d10000, lpProcName="StgOpenStorage") returned 0x76d41b90 [0025.944] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x76e00000 [0026.290] GetProcAddress (hModule=0x76e00000, lpProcName="CryptUnprotectData") returned 0x76e23140 [0026.290] GetProcAddress (hModule=0x76e00000, lpProcName="CertOpenSystemStoreA") returned 0x76e7e4f0 [0026.290] GetProcAddress (hModule=0x76e00000, lpProcName="CertEnumCertificatesInStore") returned 0x76e548f0 [0026.290] GetProcAddress (hModule=0x76e00000, lpProcName="CertCloseStore") returned 0x76e41d20 [0026.290] GetProcAddress (hModule=0x76e00000, lpProcName="CryptAcquireCertificatePrivateKey") returned 0x76e57190 [0026.290] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x75070000 [0026.290] GetProcAddress (hModule=0x75070000, lpProcName="AllocateAndInitializeSid") returned 0x7508f660 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CheckTokenMembership") returned 0x7508fb50 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="FreeSid") returned 0x75090440 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CredEnumerateA") returned 0x750a6670 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CredFree") returned 0x75093930 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CryptGetUserKey") returned 0x750a6c30 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CryptExportKey") returned 0x7508fb30 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CryptDestroyKey") returned 0x75090400 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="CryptReleaseContext") returned 0x75090650 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="RevertToSelf") returned 0x7508fc20 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="OpenProcessToken") returned 0x7508f520 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="ImpersonateLoggedOnUser") returned 0x75090ff0 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="GetTokenInformation") returned 0x7508f370 [0026.291] GetProcAddress (hModule=0x75070000, lpProcName="ConvertSidToStringSidA") returned 0x7508f160 [0026.292] GetProcAddress (hModule=0x75070000, lpProcName="LogonUserA") returned 0x750a5270 [0026.292] GetProcAddress (hModule=0x75070000, lpProcName="LookupPrivilegeValueA") returned 0x750a4dc0 [0026.292] GetProcAddress (hModule=0x75070000, lpProcName="AdjustTokenPrivileges") returned 0x75090980 [0026.292] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x756f0000 [0030.014] GetProcAddress (hModule=0x756f0000, lpProcName="SHGetFolderPathA") returned 0x758a9b10 [0030.014] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x756b0000 [0030.089] GetProcAddress (hModule=0x756b0000, lpProcName="NetApiBufferFree") returned 0x704b16d0 [0030.151] GetProcAddress (hModule=0x756b0000, lpProcName="NetUserEnum") returned 0x7049c010 [0030.214] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77ad0000 [0030.214] GetProcAddress (hModule=0x77ad0000, lpProcName="WTSGetActiveConsoleSessionId") returned 0x77aee5e0 [0030.214] GetProcAddress (hModule=0x77ad0000, lpProcName="ProcessIdToSessionId") returned 0x77ae8fa0 [0030.214] LoadLibraryA (lpLibFileName="msi.dll") returned 0x70100000 [0030.928] GetProcAddress (hModule=0x70100000, lpProcName="MsiGetComponentPathA") returned 0x702419d0 [0030.928] LoadLibraryA (lpLibFileName="pstorec.dll") returned 0x700f0000 [0031.033] GetProcAddress (hModule=0x700f0000, lpProcName="PStoreCreateInstance") returned 0x700f1290 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.033] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.034] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.035] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.036] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.037] GetTickCount () returned 0x21da0 [0031.402] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x1d, HighPart=0)) returned 1 [0031.407] GetCurrentProcess () returned 0xffffffff [0031.407] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.407] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.407] CloseHandle (hObject=0x204) returned 1 [0031.407] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x7, HighPart=0)) returned 1 [0031.408] GetCurrentProcess () returned 0xffffffff [0031.408] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.408] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.408] CloseHandle (hObject=0x204) returned 1 [0031.408] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x17, HighPart=0)) returned 1 [0031.408] GetCurrentProcess () returned 0xffffffff [0031.408] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.408] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.408] CloseHandle (hObject=0x204) returned 1 [0031.408] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x2, HighPart=0)) returned 1 [0031.409] GetCurrentProcess () returned 0xffffffff [0031.409] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.409] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.409] CloseHandle (hObject=0x204) returned 1 [0031.409] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x11, HighPart=0)) returned 1 [0031.409] GetCurrentProcess () returned 0xffffffff [0031.409] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.409] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.409] CloseHandle (hObject=0x204) returned 1 [0031.410] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x12, HighPart=0)) returned 1 [0031.410] GetCurrentProcess () returned 0xffffffff [0031.410] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.410] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.410] CloseHandle (hObject=0x204) returned 1 [0031.410] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x5, HighPart=0)) returned 1 [0031.411] GetCurrentProcess () returned 0xffffffff [0031.411] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.411] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.411] CloseHandle (hObject=0x204) returned 1 [0031.411] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x19ff50 | out: lpLuid=0x19ff50*(LowPart=0x3, HighPart=0)) returned 1 [0031.411] GetCurrentProcess () returned 0xffffffff [0031.411] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff4c | out: TokenHandle=0x19ff4c*=0x204) returned 1 [0031.411] AdjustTokenPrivileges (in: TokenHandle=0x204, DisableAllPrivileges=0, NewState=0x19ff3c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0031.411] CloseHandle (hObject=0x204) returned 1 [0031.411] GetCurrentProcess () returned 0xffffffff [0031.411] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19ff68 | out: TokenHandle=0x19ff68*=0x204) returned 1 [0031.411] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x19ff64 | out: TokenInformation=0x0, ReturnLength=0x19ff64) returned 0 [0031.411] GetLastError () returned 0x7a [0031.412] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x6503a8 [0031.412] GetTokenInformation (in: TokenHandle=0x204, TokenInformationClass=0x1, TokenInformation=0x6503a8, TokenInformationLength=0x24, ReturnLength=0x19ff64 | out: TokenInformation=0x6503a8, ReturnLength=0x19ff64) returned 1 [0031.412] ConvertSidToStringSidA () returned 0x1 [0031.412] lstrcmpA (lpString1="S-1-5-21-2172869166-1497266965-2109836178-1000", lpString2="S-1-5-18") returned 1 [0031.415] LocalFree (hMem=0x6575a0) returned 0x0 [0031.415] LocalFree (hMem=0x6503a8) returned 0x0 [0031.415] CloseHandle (hObject=0x204) returned 1 [0031.415] LocalAlloc (uFlags=0x40, uBytes=0x181) returned 0x6617f8 [0031.415] GetUserNameA (in: lpBuffer=0x6617f8, pcbBuffer=0x19ff74 | out: lpBuffer="Nd9E1FYi", pcbBuffer=0x19ff74) returned 1 [0031.416] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19ef5c | out: ppstm=0x19ef5c*=0x65fca0) returned 0x0 [0031.418] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19ef58 | out: ppstm=0x19ef58*=0x6600b0) returned 0x0 [0031.419] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", phkResult=0x19ff68 | out: phkResult=0x19ff68*=0x20c) returned 0x0 [0031.419] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x0, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.419] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.419] lstrlenA (lpString="\\") returned 1 [0031.419] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.419] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.419] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.419] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.419] lstrlenA (lpString="AddressBook") returned 11 [0031.419] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x661da8 [0031.419] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.419] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="AddressBook" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook" [0031.419] LocalFree (hMem=0x660530) returned 0x0 [0031.419] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.419] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.420] RegCloseKey (hKey=0x210) returned 0x0 [0031.420] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.420] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.420] RegCloseKey (hKey=0x210) returned 0x0 [0031.420] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.420] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.420] RegCloseKey (hKey=0x210) returned 0x0 [0031.420] LocalFree (hMem=0x661da8) returned 0x0 [0031.420] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.420] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.420] lstrlenA (lpString="\\") returned 1 [0031.420] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.420] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.420] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.420] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.420] lstrlenA (lpString="Connection Manager") returned 18 [0031.420] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x65e158 [0031.420] lstrcpyA (in: lpString1=0x65e158, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.420] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Connection Manager" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager" [0031.420] LocalFree (hMem=0x660530) returned 0x0 [0031.420] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.420] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.420] RegCloseKey (hKey=0x210) returned 0x0 [0031.420] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.420] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.420] RegCloseKey (hKey=0x210) returned 0x0 [0031.420] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.421] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.421] RegCloseKey (hKey=0x210) returned 0x0 [0031.421] LocalFree (hMem=0x65e158) returned 0x0 [0031.421] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.421] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.421] lstrlenA (lpString="\\") returned 1 [0031.421] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.421] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.421] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.421] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.421] lstrlenA (lpString="DirectDrawEx") returned 12 [0031.421] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x65e158 [0031.421] lstrcpyA (in: lpString1=0x65e158, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.421] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="DirectDrawEx" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx" [0031.421] LocalFree (hMem=0x660530) returned 0x0 [0031.421] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.421] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.421] RegCloseKey (hKey=0x210) returned 0x0 [0031.421] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.421] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.421] RegCloseKey (hKey=0x210) returned 0x0 [0031.421] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.421] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.421] RegCloseKey (hKey=0x210) returned 0x0 [0031.421] LocalFree (hMem=0x65e158) returned 0x0 [0031.421] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x3, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.421] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.421] lstrlenA (lpString="\\") returned 1 [0031.422] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.422] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.422] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.422] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.422] lstrlenA (lpString="DXM_Runtime") returned 11 [0031.422] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x661da8 [0031.422] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.422] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="DXM_Runtime" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime" [0031.422] LocalFree (hMem=0x660530) returned 0x0 [0031.422] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.422] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.422] RegCloseKey (hKey=0x210) returned 0x0 [0031.422] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.422] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.422] RegCloseKey (hKey=0x210) returned 0x0 [0031.422] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.422] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.422] RegCloseKey (hKey=0x210) returned 0x0 [0031.422] LocalFree (hMem=0x661da8) returned 0x0 [0031.422] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x4, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.422] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.422] lstrlenA (lpString="\\") returned 1 [0031.422] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.422] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.422] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.422] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.422] lstrlenA (lpString="Fontcore") returned 8 [0031.422] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x661da8 [0031.422] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.422] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Fontcore" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore" [0031.422] LocalFree (hMem=0x660530) returned 0x0 [0031.422] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.423] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.423] RegCloseKey (hKey=0x210) returned 0x0 [0031.423] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.423] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.423] RegCloseKey (hKey=0x210) returned 0x0 [0031.423] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.423] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.423] RegCloseKey (hKey=0x210) returned 0x0 [0031.423] LocalFree (hMem=0x661da8) returned 0x0 [0031.423] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x5, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Google Chrome", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.423] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.423] lstrlenA (lpString="\\") returned 1 [0031.423] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.423] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.423] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.423] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.423] lstrlenA (lpString="Google Chrome") returned 13 [0031.423] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x65eb18 [0031.423] lstrcpyA (in: lpString1=0x65eb18, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.423] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="Google Chrome" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome" [0031.423] LocalFree (hMem=0x660530) returned 0x0 [0031.423] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.423] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x82) returned 0x0 [0031.423] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x660530 [0031.423] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x82 | out: lpType=0x0, lpData=0x660530*=0x22, lpcbData=0x19ef08*=0x82) returned 0x0 [0031.423] RegCloseKey (hKey=0x210) returned 0x0 [0031.424] CMemStm::Write () returned 0x0 [0031.424] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.424] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0xe) returned 0x0 [0031.424] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x650040 [0031.424] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x650040, lpcbData=0x19ef04*=0xe | out: lpType=0x0, lpData=0x650040*=0x47, lpcbData=0x19ef04*=0xe) returned 0x0 [0031.424] RegCloseKey (hKey=0x210) returned 0x0 [0031.424] lstrlenA (lpString="Google Chrome") returned 13 [0031.424] CMemStm::Write () returned 0x0 [0031.424] CMemStm::Write () returned 0x0 [0031.424] LocalFree (hMem=0x650040) returned 0x0 [0031.424] LocalFree (hMem=0x660530) returned 0x0 [0031.424] LocalFree (hMem=0x65eb18) returned 0x0 [0031.424] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x6, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.424] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.424] lstrlenA (lpString="\\") returned 1 [0031.424] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.424] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.424] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.424] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.424] lstrlenA (lpString="IE40") returned 4 [0031.424] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x661da8 [0031.424] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.425] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE40" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40" [0031.425] LocalFree (hMem=0x660530) returned 0x0 [0031.425] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.425] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.425] RegCloseKey (hKey=0x210) returned 0x0 [0031.425] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.425] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.425] RegCloseKey (hKey=0x210) returned 0x0 [0031.425] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.425] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.425] RegCloseKey (hKey=0x210) returned 0x0 [0031.425] LocalFree (hMem=0x661da8) returned 0x0 [0031.425] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x7, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.425] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.425] lstrlenA (lpString="\\") returned 1 [0031.425] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.425] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.425] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.425] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.425] lstrlenA (lpString="IE4Data") returned 7 [0031.425] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x661da8 [0031.425] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.425] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE4Data" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data" [0031.425] LocalFree (hMem=0x660530) returned 0x0 [0031.425] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.425] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.425] RegCloseKey (hKey=0x210) returned 0x0 [0031.425] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.426] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.426] RegCloseKey (hKey=0x210) returned 0x0 [0031.426] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.426] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.426] RegCloseKey (hKey=0x210) returned 0x0 [0031.426] LocalFree (hMem=0x661da8) returned 0x0 [0031.426] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x8, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.426] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.426] lstrlenA (lpString="\\") returned 1 [0031.426] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.426] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.426] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.426] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.426] lstrlenA (lpString="IE5BAKEX") returned 8 [0031.426] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x661da8 [0031.426] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.426] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IE5BAKEX" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX" [0031.426] LocalFree (hMem=0x660530) returned 0x0 [0031.426] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.426] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.426] RegCloseKey (hKey=0x210) returned 0x0 [0031.426] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.426] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.426] RegCloseKey (hKey=0x210) returned 0x0 [0031.426] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.426] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.426] RegCloseKey (hKey=0x210) returned 0x0 [0031.426] LocalFree (hMem=0x661da8) returned 0x0 [0031.426] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x9, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.426] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.426] lstrlenA (lpString="\\") returned 1 [0031.427] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.427] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.427] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.427] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.427] lstrlenA (lpString="IEData") returned 6 [0031.427] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x661da8 [0031.427] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.427] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="IEData" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData" [0031.427] LocalFree (hMem=0x660530) returned 0x0 [0031.427] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.427] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.427] RegCloseKey (hKey=0x210) returned 0x0 [0031.427] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.427] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.427] RegCloseKey (hKey=0x210) returned 0x0 [0031.427] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.427] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.427] RegCloseKey (hKey=0x210) returned 0x0 [0031.427] LocalFree (hMem=0x661da8) returned 0x0 [0031.427] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xa, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.427] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.427] lstrlenA (lpString="\\") returned 1 [0031.427] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.427] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.427] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.427] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.427] lstrlenA (lpString="MobileOptionPack") returned 16 [0031.427] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x65e158 [0031.427] lstrcpyA (in: lpString1=0x65e158, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.427] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="MobileOptionPack" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack" [0031.427] LocalFree (hMem=0x660530) returned 0x0 [0031.427] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.427] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.427] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.428] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.428] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.428] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.428] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] LocalFree (hMem=0x65e158) returned 0x0 [0031.428] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xb, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.428] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.428] lstrlenA (lpString="\\") returned 1 [0031.428] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.428] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.428] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.428] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.428] lstrlenA (lpString="MPlayer2") returned 8 [0031.428] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x661da8 [0031.428] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.428] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="MPlayer2" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2" [0031.428] LocalFree (hMem=0x660530) returned 0x0 [0031.428] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.428] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.428] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.428] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.428] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.428] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.428] RegCloseKey (hKey=0x210) returned 0x0 [0031.428] LocalFree (hMem=0x661da8) returned 0x0 [0031.428] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xc, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.428] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.429] lstrlenA (lpString="\\") returned 1 [0031.429] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.429] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.429] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.429] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.429] lstrlenA (lpString="SchedulingAgent") returned 15 [0031.429] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x65e158 [0031.429] lstrcpyA (in: lpString1=0x65e158, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.429] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="SchedulingAgent" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent" [0031.429] LocalFree (hMem=0x660530) returned 0x0 [0031.429] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.429] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.429] RegCloseKey (hKey=0x210) returned 0x0 [0031.429] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.429] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.429] RegCloseKey (hKey=0x210) returned 0x0 [0031.429] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.429] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.429] RegCloseKey (hKey=0x210) returned 0x0 [0031.429] LocalFree (hMem=0x65e158) returned 0x0 [0031.429] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xd, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.429] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.429] lstrlenA (lpString="\\") returned 1 [0031.429] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.429] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.429] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.430] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.430] lstrlenA (lpString="WIC") returned 3 [0031.430] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x661da8 [0031.430] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.430] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="WIC" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC" [0031.430] LocalFree (hMem=0x660530) returned 0x0 [0031.430] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.430] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.430] RegCloseKey (hKey=0x210) returned 0x0 [0031.430] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.430] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.430] RegCloseKey (hKey=0x210) returned 0x0 [0031.430] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x210) returned 0x0 [0031.430] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eeac, lpData=0x0, lpcbData=0x19eeb0*=0x19ee88 | out: lpType=0x19eeac*=0x0, lpData=0x0, lpcbData=0x19eeb0*=0x0) returned 0x2 [0031.430] RegCloseKey (hKey=0x210) returned 0x0 [0031.430] LocalFree (hMem=0x661da8) returned 0x0 [0031.430] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xe, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.430] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.430] lstrlenA (lpString="\\") returned 1 [0031.430] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.430] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.430] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.430] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.430] lstrlenA (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 38 [0031.430] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.430] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.430] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" [0031.431] LocalFree (hMem=0x660530) returned 0x0 [0031.431] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.431] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.431] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.431] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.431] RegCloseKey (hKey=0x210) returned 0x0 [0031.431] CMemStm::Write () returned 0x0 [0031.431] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.431] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3b) returned 0x0 [0031.431] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x661a50 [0031.431] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x661a50, lpcbData=0x19ef04*=0x3b | out: lpType=0x0, lpData=0x661a50*=0x4d, lpcbData=0x19ef04*=0x3b) returned 0x0 [0031.431] RegCloseKey (hKey=0x210) returned 0x0 [0031.431] lstrlenA (lpString="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 38 [0031.431] CMemStm::Write () returned 0x0 [0031.431] CMemStm::Write () returned 0x0 [0031.431] LocalFree (hMem=0x661a50) returned 0x0 [0031.431] LocalFree (hMem=0x660530) returned 0x0 [0031.431] LocalFree (hMem=0x661da8) returned 0x0 [0031.431] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0xf, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.431] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.431] lstrlenA (lpString="\\") returned 1 [0031.431] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.431] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.431] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.431] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.431] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757") returned 48 [0031.431] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.431] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.431] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757" [0031.432] LocalFree (hMem=0x660530) returned 0x0 [0031.432] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.432] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.432] RegCloseKey (hKey=0x210) returned 0x0 [0031.432] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.432] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.432] RegCloseKey (hKey=0x210) returned 0x0 [0031.432] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.432] LocalFree (hMem=0x661a50) returned 0x0 [0031.432] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x10, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.432] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.432] lstrlenA (lpString="\\") returned 1 [0031.432] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.432] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.432] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.432] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.432] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173") returned 48 [0031.432] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.432] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.432] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173" [0031.432] LocalFree (hMem=0x660530) returned 0x0 [0031.432] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.432] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.432] RegCloseKey (hKey=0x210) returned 0x0 [0031.432] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.432] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.432] RegCloseKey (hKey=0x210) returned 0x0 [0031.433] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.433] LocalFree (hMem=0x661a50) returned 0x0 [0031.433] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x11, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.433] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.433] lstrlenA (lpString="\\") returned 1 [0031.433] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.433] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.433] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.433] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.433] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860") returned 48 [0031.433] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.433] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.433] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860" [0031.433] LocalFree (hMem=0x660530) returned 0x0 [0031.433] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.433] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.433] RegCloseKey (hKey=0x210) returned 0x0 [0031.433] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.433] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.433] RegCloseKey (hKey=0x210) returned 0x0 [0031.433] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.433] LocalFree (hMem=0x661a50) returned 0x0 [0031.433] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x12, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.433] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.433] lstrlenA (lpString="\\") returned 1 [0031.433] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.433] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.433] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.434] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.434] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655") returned 48 [0031.434] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.434] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.434] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655" [0031.434] LocalFree (hMem=0x660530) returned 0x0 [0031.434] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.434] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.434] RegCloseKey (hKey=0x210) returned 0x0 [0031.434] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.434] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.434] RegCloseKey (hKey=0x210) returned 0x0 [0031.434] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.434] LocalFree (hMem=0x661a50) returned 0x0 [0031.434] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x13, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.434] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.434] lstrlenA (lpString="\\") returned 1 [0031.434] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.434] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.434] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.434] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.434] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743") returned 48 [0031.434] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.434] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.434] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743" [0031.434] LocalFree (hMem=0x660530) returned 0x0 [0031.434] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.434] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.434] RegCloseKey (hKey=0x210) returned 0x0 [0031.435] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.435] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.435] RegCloseKey (hKey=0x210) returned 0x0 [0031.435] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.435] LocalFree (hMem=0x661a50) returned 0x0 [0031.435] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x14, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.435] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.435] lstrlenA (lpString="\\") returned 1 [0031.435] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.435] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.435] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.435] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.435] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063") returned 48 [0031.435] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x661a50 [0031.435] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.435] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063" [0031.435] LocalFree (hMem=0x660530) returned 0x0 [0031.435] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.435] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.435] RegCloseKey (hKey=0x210) returned 0x0 [0031.435] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.435] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.435] RegCloseKey (hKey=0x210) returned 0x0 [0031.435] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.435] LocalFree (hMem=0x661a50) returned 0x0 [0031.435] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x15, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.435] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.436] lstrlenA (lpString="\\") returned 1 [0031.436] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.436] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.436] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.436] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.436] lstrlenA (lpString="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573") returned 47 [0031.436] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x661a50 [0031.436] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.436] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573" [0031.436] LocalFree (hMem=0x660530) returned 0x0 [0031.436] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.436] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.436] RegCloseKey (hKey=0x210) returned 0x0 [0031.436] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.436] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.436] RegCloseKey (hKey=0x210) returned 0x0 [0031.436] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.436] LocalFree (hMem=0x661a50) returned 0x0 [0031.436] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x16, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.436] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.436] lstrlenA (lpString="\\") returned 1 [0031.436] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.436] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.436] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.436] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.436] lstrlenA (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0031.436] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661a50 [0031.436] lstrcpyA (in: lpString1=0x661a50, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.436] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0031.436] LocalFree (hMem=0x660530) returned 0x0 [0031.436] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.437] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.437] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x660530 [0031.437] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x63 | out: lpType=0x0, lpData=0x660530*=0x22, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.437] RegCloseKey (hKey=0x210) returned 0x0 [0031.437] CMemStm::Write () returned 0x0 [0031.437] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.437] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.437] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x661988 [0031.437] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x661988, lpcbData=0x19ef04*=0x3d | out: lpType=0x0, lpData=0x661988*=0x4d, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.437] RegCloseKey (hKey=0x210) returned 0x0 [0031.437] lstrlenA (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0031.437] CMemStm::Write () returned 0x0 [0031.437] CMemStm::Write () returned 0x0 [0031.437] LocalFree (hMem=0x661988) returned 0x0 [0031.437] LocalFree (hMem=0x660530) returned 0x0 [0031.437] LocalFree (hMem=0x661a50) returned 0x0 [0031.437] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x17, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.437] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.437] lstrlenA (lpString="\\") returned 1 [0031.437] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.437] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.437] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.437] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.437] lstrlenA (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0031.437] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661988 [0031.437] lstrcpyA (in: lpString1=0x661988, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.437] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" [0031.437] LocalFree (hMem=0x660530) returned 0x0 [0031.438] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.438] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.438] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x660530 [0031.438] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x63 | out: lpType=0x0, lpData=0x660530*=0x22, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.438] RegCloseKey (hKey=0x210) returned 0x0 [0031.438] CMemStm::Write () returned 0x0 [0031.438] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.438] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.438] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x663500 [0031.438] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x663500, lpcbData=0x19ef04*=0x3d | out: lpType=0x0, lpData=0x663500*=0x4d, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.438] RegCloseKey (hKey=0x210) returned 0x0 [0031.438] lstrlenA (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0031.438] CMemStm::Write () returned 0x0 [0031.438] CMemStm::Write () returned 0x0 [0031.438] LocalFree (hMem=0x663500) returned 0x0 [0031.438] LocalFree (hMem=0x660530) returned 0x0 [0031.439] LocalFree (hMem=0x661988) returned 0x0 [0031.439] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x18, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.439] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.439] lstrlenA (lpString="\\") returned 1 [0031.439] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x6629c0 [0031.439] lstrcpyA (in: lpString1=0x6629c0, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.439] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.439] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.439] lstrlenA (lpString="{3D82C954-2957-418B-908F-FE78BF3A8BEB}") returned 38 [0031.439] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x660530 [0031.439] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.439] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{3D82C954-2957-418B-908F-FE78BF3A8BEB}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3D82C954-2957-418B-908F-FE78BF3A8BEB}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3D82C954-2957-418B-908F-FE78BF3A8BEB}" [0031.439] LocalFree (hMem=0x6629c0) returned 0x0 [0031.439] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3D82C954-2957-418B-908F-FE78BF3A8BEB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.439] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.439] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x6629c0 [0031.439] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x6629c0, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x6629c0*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.439] RegCloseKey (hKey=0x210) returned 0x0 [0031.439] CMemStm::Write () returned 0x0 [0031.439] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3D82C954-2957-418B-908F-FE78BF3A8BEB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.439] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x6629c0 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x1c) returned 0x0 [0031.439] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x664850 [0031.439] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x664850, lpcbData=0x19ef04*=0x1c | out: lpType=0x0, lpData=0x664850*=0x41, lpcbData=0x19ef04*=0x1c) returned 0x0 [0031.439] RegCloseKey (hKey=0x210) returned 0x0 [0031.439] lstrlenA (lpString="{3D82C954-2957-418B-908F-FE78BF3A8BEB}") returned 38 [0031.439] CMemStm::Write () returned 0x0 [0031.440] CMemStm::Write () returned 0x0 [0031.440] LocalFree (hMem=0x664850) returned 0x0 [0031.440] LocalFree (hMem=0x6629c0) returned 0x0 [0031.440] LocalFree (hMem=0x660530) returned 0x0 [0031.440] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x19, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{4A03706F-666A-4037-7777-5F2748764D10}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.440] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.440] lstrlenA (lpString="\\") returned 1 [0031.440] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x6629c0 [0031.440] lstrcpyA (in: lpString1=0x6629c0, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.440] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.440] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.440] lstrlenA (lpString="{4A03706F-666A-4037-7777-5F2748764D10}") returned 38 [0031.440] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x660530 [0031.440] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.467] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{4A03706F-666A-4037-7777-5F2748764D10}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}" [0031.469] LocalFree (hMem=0x6629c0) returned 0x0 [0031.469] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.469] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.469] RegCloseKey (hKey=0x210) returned 0x0 [0031.469] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.469] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.469] RegCloseKey (hKey=0x210) returned 0x0 [0031.469] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.469] LocalFree (hMem=0x660530) returned 0x0 [0031.470] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1a, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{582EA838-9199-3518-A05C-DB09462F68EC}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.470] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.470] lstrlenA (lpString="\\") returned 1 [0031.470] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x6629c0 [0031.470] lstrcpyA (in: lpString1=0x6629c0, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.470] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.470] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.470] lstrlenA (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}") returned 38 [0031.470] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x660530 [0031.470] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.470] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{582EA838-9199-3518-A05C-DB09462F68EC}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}" [0031.470] LocalFree (hMem=0x6629c0) returned 0x0 [0031.470] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.470] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.470] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x6629c0 [0031.470] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x6629c0, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x6629c0*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.470] RegCloseKey (hKey=0x210) returned 0x0 [0031.470] CMemStm::Write () returned 0x0 [0031.470] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.470] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x6629c0 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3c) returned 0x0 [0031.470] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x662c68 [0031.470] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662c68, lpcbData=0x19ef04*=0x3c | out: lpType=0x0, lpData=0x662c68*=0x4d, lpcbData=0x19ef04*=0x3c) returned 0x0 [0031.470] RegCloseKey (hKey=0x210) returned 0x0 [0031.470] lstrlenA (lpString="{582EA838-9199-3518-A05C-DB09462F68EC}") returned 38 [0031.470] CMemStm::Write () returned 0x0 [0031.470] CMemStm::Write () returned 0x0 [0031.470] LocalFree (hMem=0x662c68) returned 0x0 [0031.470] LocalFree (hMem=0x6629c0) returned 0x0 [0031.470] LocalFree (hMem=0x660530) returned 0x0 [0031.471] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1b, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{68306422-7C57-373F-8860-D26CE4BA2A15}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.471] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.471] lstrlenA (lpString="\\") returned 1 [0031.471] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.471] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.471] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.471] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.471] lstrlenA (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 38 [0031.471] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.471] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.471] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{68306422-7C57-373F-8860-D26CE4BA2A15}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}" [0031.471] LocalFree (hMem=0x660530) returned 0x0 [0031.471] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.471] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.471] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.471] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.471] RegCloseKey (hKey=0x210) returned 0x0 [0031.471] CMemStm::Write () returned 0x0 [0031.471] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.471] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3f) returned 0x0 [0031.471] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x662ec0 [0031.471] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662ec0, lpcbData=0x19ef04*=0x3f | out: lpType=0x0, lpData=0x662ec0*=0x4d, lpcbData=0x19ef04*=0x3f) returned 0x0 [0031.471] RegCloseKey (hKey=0x210) returned 0x0 [0031.471] lstrlenA (lpString="{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 38 [0031.471] CMemStm::Write () returned 0x0 [0031.471] CMemStm::Write () returned 0x0 [0031.472] LocalFree (hMem=0x662ec0) returned 0x0 [0031.472] LocalFree (hMem=0x660530) returned 0x0 [0031.472] LocalFree (hMem=0x661da8) returned 0x0 [0031.472] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1c, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.472] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.472] lstrlenA (lpString="\\") returned 1 [0031.472] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.472] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.472] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.472] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.472] lstrlenA (lpString="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 38 [0031.472] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.472] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.472] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" [0031.472] LocalFree (hMem=0x660530) returned 0x0 [0031.472] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.472] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.472] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.472] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.472] RegCloseKey (hKey=0x210) returned 0x0 [0031.472] CMemStm::Write () returned 0x0 [0031.472] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.472] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x2a) returned 0x0 [0031.472] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x64f650 [0031.472] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x64f650, lpcbData=0x19ef04*=0x2a | out: lpType=0x0, lpData=0x64f650*=0x4d, lpcbData=0x19ef04*=0x2a) returned 0x0 [0031.472] RegCloseKey (hKey=0x210) returned 0x0 [0031.472] lstrlenA (lpString="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 38 [0031.472] CMemStm::Write () returned 0x0 [0031.473] CMemStm::Write () returned 0x0 [0031.473] LocalFree (hMem=0x64f650) returned 0x0 [0031.473] LocalFree (hMem=0x660530) returned 0x0 [0031.473] LocalFree (hMem=0x661da8) returned 0x0 [0031.473] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1d, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.473] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.473] lstrlenA (lpString="\\") returned 1 [0031.473] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.473] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.473] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.473] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.473] lstrlenA (lpString="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 38 [0031.473] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.473] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.473] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{9BE518E6-ECC6-35A9-88E4-87755C07200F}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}" [0031.473] LocalFree (hMem=0x660530) returned 0x0 [0031.473] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.473] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.473] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.473] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.473] RegCloseKey (hKey=0x210) returned 0x0 [0031.473] CMemStm::Write () returned 0x0 [0031.473] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.473] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3f) returned 0x0 [0031.473] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x663820 [0031.473] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x663820, lpcbData=0x19ef04*=0x3f | out: lpType=0x0, lpData=0x663820*=0x4d, lpcbData=0x19ef04*=0x3f) returned 0x0 [0031.473] RegCloseKey (hKey=0x210) returned 0x0 [0031.474] lstrlenA (lpString="{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 38 [0031.474] CMemStm::Write () returned 0x0 [0031.474] CMemStm::Write () returned 0x0 [0031.474] LocalFree (hMem=0x663820) returned 0x0 [0031.474] LocalFree (hMem=0x660530) returned 0x0 [0031.474] LocalFree (hMem=0x661da8) returned 0x0 [0031.474] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1e, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-0804-1033-1959-001824214663}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.474] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.474] lstrlenA (lpString="\\") returned 1 [0031.474] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.474] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.474] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.474] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.474] lstrlenA (lpString="{AC76BA86-0804-1033-1959-001824214663}") returned 38 [0031.474] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.474] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.474] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{AC76BA86-0804-1033-1959-001824214663}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824214663}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824214663}" [0031.474] LocalFree (hMem=0x660530) returned 0x0 [0031.474] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824214663}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.474] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.474] RegCloseKey (hKey=0x210) returned 0x0 [0031.474] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824214663}", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.474] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.474] RegCloseKey (hKey=0x210) returned 0x0 [0031.474] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824214663}", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.474] LocalFree (hMem=0x661da8) returned 0x0 [0031.474] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x1f, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-0804-1033-1959-001824237067}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.474] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.474] lstrlenA (lpString="\\") returned 1 [0031.474] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.474] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.475] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.475] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.475] lstrlenA (lpString="{AC76BA86-0804-1033-1959-001824237067}") returned 38 [0031.475] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.475] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.475] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{AC76BA86-0804-1033-1959-001824237067}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824237067}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824237067}" [0031.475] LocalFree (hMem=0x660530) returned 0x0 [0031.475] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824237067}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.475] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.475] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.475] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.475] RegCloseKey (hKey=0x210) returned 0x0 [0031.475] CMemStm::Write () returned 0x0 [0031.475] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-0804-1033-1959-001824237067}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.475] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x16) returned 0x0 [0031.475] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x650040 [0031.475] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x650040, lpcbData=0x19ef04*=0x16 | out: lpType=0x0, lpData=0x650040*=0x41, lpcbData=0x19ef04*=0x16) returned 0x0 [0031.475] RegCloseKey (hKey=0x210) returned 0x0 [0031.475] lstrlenA (lpString="{AC76BA86-0804-1033-1959-001824237067}") returned 38 [0031.475] CMemStm::Write () returned 0x0 [0031.475] CMemStm::Write () returned 0x0 [0031.475] LocalFree (hMem=0x650040) returned 0x0 [0031.475] LocalFree (hMem=0x660530) returned 0x0 [0031.475] LocalFree (hMem=0x661da8) returned 0x0 [0031.475] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x20, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.475] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.475] lstrlenA (lpString="\\") returned 1 [0031.475] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.475] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.475] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.475] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.475] lstrlenA (lpString="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}") returned 38 [0031.476] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.476] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.476] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}" [0031.476] LocalFree (hMem=0x660530) returned 0x0 [0031.476] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.476] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.476] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.476] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.476] RegCloseKey (hKey=0x210) returned 0x0 [0031.476] CMemStm::Write () returned 0x0 [0031.476] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.476] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x18) returned 0x0 [0031.476] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x664f88 [0031.476] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x664f88, lpcbData=0x19ef04*=0x18 | out: lpType=0x0, lpData=0x664f88*=0x41, lpcbData=0x19ef04*=0x18) returned 0x0 [0031.476] RegCloseKey (hKey=0x210) returned 0x0 [0031.476] lstrlenA (lpString="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}") returned 38 [0031.476] CMemStm::Write () returned 0x0 [0031.476] CMemStm::Write () returned 0x0 [0031.476] LocalFree (hMem=0x664f88) returned 0x0 [0031.476] LocalFree (hMem=0x660530) returned 0x0 [0031.476] LocalFree (hMem=0x661da8) returned 0x0 [0031.476] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x21, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.476] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.476] lstrlenA (lpString="\\") returned 1 [0031.476] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x6664f8 [0031.476] lstrcpyA (in: lpString1=0x6664f8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.476] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.476] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.476] lstrlenA (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 38 [0031.477] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x660530 [0031.477] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.477] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{B175520C-86A2-35A7-8619-86DC379688B9}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}" [0031.477] LocalFree (hMem=0x6664f8) returned 0x0 [0031.477] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.477] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.477] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x6664f8 [0031.477] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x6664f8, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x6664f8*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.477] RegCloseKey (hKey=0x210) returned 0x0 [0031.477] CMemStm::Write () returned 0x0 [0031.477] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.477] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x6664f8 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.477] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x663370 [0031.477] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x663370, lpcbData=0x19ef04*=0x3e | out: lpType=0x0, lpData=0x663370*=0x4d, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.477] RegCloseKey (hKey=0x210) returned 0x0 [0031.477] lstrlenA (lpString="{B175520C-86A2-35A7-8619-86DC379688B9}") returned 38 [0031.477] CMemStm::Write () returned 0x0 [0031.477] CMemStm::Write () returned 0x0 [0031.477] LocalFree (hMem=0x663370) returned 0x0 [0031.477] LocalFree (hMem=0x6664f8) returned 0x0 [0031.477] LocalFree (hMem=0x660530) returned 0x0 [0031.477] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x22, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.477] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.477] lstrlenA (lpString="\\") returned 1 [0031.477] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.477] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.477] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.477] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.477] lstrlenA (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 38 [0031.477] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.478] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.478] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" [0031.478] LocalFree (hMem=0x660530) returned 0x0 [0031.478] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.478] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.478] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.478] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.478] RegCloseKey (hKey=0x210) returned 0x0 [0031.478] CMemStm::Write () returned 0x0 [0031.478] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.478] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3b) returned 0x0 [0031.478] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663500 [0031.478] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x663500, lpcbData=0x19ef04*=0x3b | out: lpType=0x0, lpData=0x663500*=0x4d, lpcbData=0x19ef04*=0x3b) returned 0x0 [0031.478] RegCloseKey (hKey=0x210) returned 0x0 [0031.478] lstrlenA (lpString="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 38 [0031.478] CMemStm::Write () returned 0x0 [0031.478] CMemStm::Write () returned 0x0 [0031.478] LocalFree (hMem=0x663500) returned 0x0 [0031.478] LocalFree (hMem=0x660530) returned 0x0 [0031.478] LocalFree (hMem=0x661da8) returned 0x0 [0031.478] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x23, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.478] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.478] lstrlenA (lpString="\\") returned 1 [0031.478] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.478] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.478] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.478] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.478] lstrlenA (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0031.478] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.478] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.479] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" [0031.479] LocalFree (hMem=0x660530) returned 0x0 [0031.479] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.479] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.479] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x660530 [0031.479] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x63 | out: lpType=0x0, lpData=0x660530*=0x22, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.479] RegCloseKey (hKey=0x210) returned 0x0 [0031.479] CMemStm::Write () returned 0x0 [0031.479] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.479] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.479] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662ec0 [0031.479] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662ec0, lpcbData=0x19ef04*=0x3d | out: lpType=0x0, lpData=0x662ec0*=0x4d, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.479] RegCloseKey (hKey=0x210) returned 0x0 [0031.479] lstrlenA (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0031.479] CMemStm::Write () returned 0x0 [0031.479] CMemStm::Write () returned 0x0 [0031.479] LocalFree (hMem=0x662ec0) returned 0x0 [0031.479] LocalFree (hMem=0x660530) returned 0x0 [0031.479] LocalFree (hMem=0x661da8) returned 0x0 [0031.479] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x24, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.479] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.479] lstrlenA (lpString="\\") returned 1 [0031.479] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.479] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.480] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.480] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.480] lstrlenA (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0031.480] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.480] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.480] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}" [0031.480] LocalFree (hMem=0x660530) returned 0x0 [0031.480] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.480] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x64) returned 0x0 [0031.480] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667290 [0031.480] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x667290, lpcbData=0x19ef08*=0x64 | out: lpType=0x0, lpData=0x667290*=0x22, lpcbData=0x19ef08*=0x64) returned 0x0 [0031.480] RegCloseKey (hKey=0x210) returned 0x0 [0031.480] CMemStm::Write () returned 0x0 [0031.480] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.480] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x667290 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.480] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x662d30 [0031.480] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662d30, lpcbData=0x19ef04*=0x3e | out: lpType=0x0, lpData=0x662d30*=0x4d, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.480] RegCloseKey (hKey=0x210) returned 0x0 [0031.480] lstrlenA (lpString="{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 38 [0031.480] CMemStm::Write () returned 0x0 [0031.480] CMemStm::Write () returned 0x0 [0031.480] LocalFree (hMem=0x662d30) returned 0x0 [0031.480] LocalFree (hMem=0x667290) returned 0x0 [0031.480] LocalFree (hMem=0x661da8) returned 0x0 [0031.480] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x25, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.481] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.481] lstrlenA (lpString="\\") returned 1 [0031.481] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.481] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.481] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.481] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.481] lstrlenA (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0031.481] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.481] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.481] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0031.481] LocalFree (hMem=0x660530) returned 0x0 [0031.481] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.481] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.481] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x667830 [0031.481] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x667830, lpcbData=0x19ef08*=0x63 | out: lpType=0x0, lpData=0x667830*=0x22, lpcbData=0x19ef08*=0x63) returned 0x0 [0031.481] RegCloseKey (hKey=0x210) returned 0x0 [0031.481] CMemStm::Write () returned 0x0 [0031.481] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.481] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x667830 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.481] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x6635c8 [0031.481] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x6635c8, lpcbData=0x19ef04*=0x3d | out: lpType=0x0, lpData=0x6635c8*=0x4d, lpcbData=0x19ef04*=0x3d) returned 0x0 [0031.482] RegCloseKey (hKey=0x210) returned 0x0 [0031.482] lstrlenA (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0031.482] CMemStm::Write () returned 0x0 [0031.482] CMemStm::Write () returned 0x0 [0031.482] LocalFree (hMem=0x6635c8) returned 0x0 [0031.482] LocalFree (hMem=0x667830) returned 0x0 [0031.482] LocalFree (hMem=0x661da8) returned 0x0 [0031.482] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x26, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.482] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.482] lstrlenA (lpString="\\") returned 1 [0031.482] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.482] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.482] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.482] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.482] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 38 [0031.482] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.482] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.482] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" [0031.482] LocalFree (hMem=0x660530) returned 0x0 [0031.482] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.482] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.482] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.482] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.482] RegCloseKey (hKey=0x210) returned 0x0 [0031.482] CMemStm::Write () returned 0x0 [0031.482] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.482] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3c) returned 0x0 [0031.482] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x663820 [0031.482] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x663820, lpcbData=0x19ef04*=0x3c | out: lpType=0x0, lpData=0x663820*=0x4d, lpcbData=0x19ef04*=0x3c) returned 0x0 [0031.483] RegCloseKey (hKey=0x210) returned 0x0 [0031.483] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 38 [0031.483] CMemStm::Write () returned 0x0 [0031.483] CMemStm::Write () returned 0x0 [0031.483] LocalFree (hMem=0x663820) returned 0x0 [0031.483] LocalFree (hMem=0x660530) returned 0x0 [0031.483] LocalFree (hMem=0x661da8) returned 0x0 [0031.483] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x27, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.483] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.483] lstrlenA (lpString="\\") returned 1 [0031.483] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.483] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.483] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.483] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.483] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757") returned 48 [0031.483] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x6671a0 [0031.483] lstrcpyA (in: lpString1=0x6671a0, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.483] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757" [0031.483] LocalFree (hMem=0x660530) returned 0x0 [0031.483] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.483] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.483] RegCloseKey (hKey=0x210) returned 0x0 [0031.483] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.483] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.483] RegCloseKey (hKey=0x210) returned 0x0 [0031.483] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.483] LocalFree (hMem=0x6671a0) returned 0x0 [0031.483] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x28, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.483] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.483] lstrlenA (lpString="\\") returned 1 [0031.483] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.484] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.484] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.484] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.484] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173") returned 48 [0031.484] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667b00 [0031.484] lstrcpyA (in: lpString1=0x667b00, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.484] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173" [0031.484] LocalFree (hMem=0x660530) returned 0x0 [0031.484] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.484] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.484] RegCloseKey (hKey=0x210) returned 0x0 [0031.484] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.484] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.484] RegCloseKey (hKey=0x210) returned 0x0 [0031.484] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.484] LocalFree (hMem=0x667b00) returned 0x0 [0031.484] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x29, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.484] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.484] lstrlenA (lpString="\\") returned 1 [0031.484] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.484] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.484] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.484] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.484] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860") returned 48 [0031.484] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667920 [0031.484] lstrcpyA (in: lpString1=0x667920, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.484] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860" [0031.484] LocalFree (hMem=0x660530) returned 0x0 [0031.484] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.485] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.485] RegCloseKey (hKey=0x210) returned 0x0 [0031.485] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.485] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.485] RegCloseKey (hKey=0x210) returned 0x0 [0031.485] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.485] LocalFree (hMem=0x667920) returned 0x0 [0031.485] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2a, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.485] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.485] lstrlenA (lpString="\\") returned 1 [0031.485] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.485] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.485] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.485] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.485] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655") returned 48 [0031.485] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667920 [0031.485] lstrcpyA (in: lpString1=0x667920, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.485] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655" [0031.485] LocalFree (hMem=0x660530) returned 0x0 [0031.485] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.485] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.485] RegCloseKey (hKey=0x210) returned 0x0 [0031.485] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.486] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.486] RegCloseKey (hKey=0x210) returned 0x0 [0031.486] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.486] LocalFree (hMem=0x667920) returned 0x0 [0031.486] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2b, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.486] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.486] lstrlenA (lpString="\\") returned 1 [0031.486] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.486] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.486] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.486] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.486] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743") returned 48 [0031.486] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x6670b0 [0031.486] lstrcpyA (in: lpString1=0x6670b0, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.486] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743" [0031.486] LocalFree (hMem=0x660530) returned 0x0 [0031.486] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.486] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.486] RegCloseKey (hKey=0x210) returned 0x0 [0031.486] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.486] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.486] RegCloseKey (hKey=0x210) returned 0x0 [0031.486] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.486] LocalFree (hMem=0x6670b0) returned 0x0 [0031.486] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2c, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.486] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.486] lstrlenA (lpString="\\") returned 1 [0031.486] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.486] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.486] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.487] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.487] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063") returned 48 [0031.487] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667830 [0031.487] lstrcpyA (in: lpString1=0x667830, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.487] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063" [0031.487] LocalFree (hMem=0x660530) returned 0x0 [0031.487] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.487] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.487] RegCloseKey (hKey=0x210) returned 0x0 [0031.487] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.487] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.487] RegCloseKey (hKey=0x210) returned 0x0 [0031.487] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.487] LocalFree (hMem=0x667830) returned 0x0 [0031.487] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2d, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.487] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.487] lstrlenA (lpString="\\") returned 1 [0031.487] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.487] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.487] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.487] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.487] lstrlenA (lpString="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573") returned 47 [0031.487] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x667560 [0031.487] lstrcpyA (in: lpString1=0x667560, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.487] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573" [0031.487] LocalFree (hMem=0x660530) returned 0x0 [0031.487] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.487] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x0, lpData=0x0, lpcbData=0x19ef08*=0x0) returned 0x2 [0031.488] RegCloseKey (hKey=0x210) returned 0x0 [0031.488] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20219, phkResult=0x19eee0 | out: phkResult=0x19eee0*=0x210) returned 0x0 [0031.488] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19eed8, lpData=0x0, lpcbData=0x19eedc*=0x19eeb4 | out: lpType=0x19eed8*=0x0, lpData=0x0, lpcbData=0x19eedc*=0x0) returned 0x2 [0031.488] RegCloseKey (hKey=0x210) returned 0x0 [0031.488] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20119, phkResult=0x19eeb4 | out: phkResult=0x19eeb4*=0x0) returned 0x2 [0031.488] LocalFree (hMem=0x667560) returned 0x0 [0031.488] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2e, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.488] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.488] lstrlenA (lpString="\\") returned 1 [0031.488] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.488] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.488] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.488] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.488] lstrlenA (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0031.488] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.488] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.488] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0031.488] LocalFree (hMem=0x660530) returned 0x0 [0031.488] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.488] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x1, lpData=0x0, lpcbData=0x19ef08*=0x64) returned 0x0 [0031.488] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x667830 [0031.488] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x667830, lpcbData=0x19ef08*=0x64 | out: lpType=0x0, lpData=0x667830*=0x22, lpcbData=0x19ef08*=0x64) returned 0x0 [0031.488] RegCloseKey (hKey=0x210) returned 0x0 [0031.488] CMemStm::Write () returned 0x0 [0031.488] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.488] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x667830 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.489] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x662c68 [0031.489] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662c68, lpcbData=0x19ef04*=0x3e | out: lpType=0x0, lpData=0x662c68*=0x4d, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.489] RegCloseKey (hKey=0x210) returned 0x0 [0031.489] lstrlenA (lpString="{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 38 [0031.489] CMemStm::Write () returned 0x0 [0031.489] CMemStm::Write () returned 0x0 [0031.489] LocalFree (hMem=0x662c68) returned 0x0 [0031.489] LocalFree (hMem=0x667830) returned 0x0 [0031.489] LocalFree (hMem=0x661da8) returned 0x0 [0031.489] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x2f, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.489] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0031.489] lstrlenA (lpString="\\") returned 1 [0031.489] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.489] lstrcpyA (in: lpString1=0x660530, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0031.489] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", lpString2="\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.489] lstrlenA (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned 52 [0031.489] lstrlenA (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 38 [0031.489] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x661da8 [0031.489] lstrcpyA (in: lpString1=0x661da8, lpString2="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" [0031.489] lstrcatA (in: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\", lpString2="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" | out: lpString1="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" [0031.489] LocalFree (hMem=0x660530) returned 0x0 [0031.489] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef0c | out: phkResult=0x19ef0c*=0x210) returned 0x0 [0031.489] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x19ef04, lpData=0x0, lpcbData=0x19ef08*=0x19ffcc | out: lpType=0x19ef04*=0x2, lpData=0x0, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.489] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.489] RegQueryValueExA (in: hKey=0x210, lpValueName="UninstallString", lpReserved=0x0, lpType=0x0, lpData=0x660530, lpcbData=0x19ef08*=0x35 | out: lpType=0x0, lpData=0x660530*=0x4d, lpcbData=0x19ef08*=0x35) returned 0x0 [0031.489] RegCloseKey (hKey=0x210) returned 0x0 [0031.489] CMemStm::Write () returned 0x0 [0031.489] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ef08 | out: phkResult=0x19ef08*=0x210) returned 0x0 [0031.490] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x19ef00, lpData=0x0, lpcbData=0x19ef04*=0x660530 | out: lpType=0x19ef00*=0x1, lpData=0x0, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.490] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x662c68 [0031.490] RegQueryValueExA (in: hKey=0x210, lpValueName="DisplayName", lpReserved=0x0, lpType=0x0, lpData=0x662c68, lpcbData=0x19ef04*=0x3e | out: lpType=0x0, lpData=0x662c68*=0x4d, lpcbData=0x19ef04*=0x3e) returned 0x0 [0031.490] RegCloseKey (hKey=0x210) returned 0x0 [0031.490] lstrlenA (lpString="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 38 [0031.490] CMemStm::Write () returned 0x0 [0031.490] CMemStm::Write () returned 0x0 [0031.490] LocalFree (hMem=0x662c68) returned 0x0 [0031.490] LocalFree (hMem=0x660530) returned 0x0 [0031.490] LocalFree (hMem=0x661da8) returned 0x0 [0031.490] RegEnumKeyExA (in: hKey=0x20c, dwIndex=0x30, lpName=0x19ef68, lpcchName=0x19ef64, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x19ef64, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.490] RegCloseKey (hKey=0x20c) returned 0x0 [0031.490] CMemStm::Write () returned 0x0 [0031.490] CMemStm::Write () returned 0x0 [0031.490] GetHGlobalFromStream (in: pstm=0x65fca0, phglobal=0x19ef50 | out: phglobal=0x19ef50) returned 0x0 [0031.490] IStream:RemoteSeek (in: This=0x65fca0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.490] LocalAlloc (uFlags=0x40, uBytes=0x5d6) returned 0x667dc0 [0031.490] GlobalLock (hMem=0x590004) returned 0x6664f8 [0031.490] GlobalUnlock (hMem=0x590004) returned 0 [0031.491] GetHGlobalFromStream (in: pstm=0x6600b0, phglobal=0x19ef50 | out: phglobal=0x19ef50) returned 0x0 [0031.491] IStream:RemoteSeek (in: This=0x6600b0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.491] LocalAlloc (uFlags=0x40, uBytes=0x717) returned 0x669dc0 [0031.491] GlobalLock (hMem=0x590014) returned 0x669718 [0031.491] GlobalUnlock (hMem=0x590014) returned 0 [0031.491] IUnknown:Release (This=0x65fca0) returned 0x0 [0031.491] IUnknown:Release (This=0x6600b0) returned 0x0 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.531] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.532] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.533] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.534] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.535] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.536] GetTickCount () returned 0x21f94 [0031.701] WSAStartup (in: wVersionRequired=0x101, lpWSAData=0x19fdbe | out: lpWSAData=0x19fdbe) returned 0 [0031.706] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19ff64 | out: ppstm=0x19ff64*=0x65fed0) returned 0x0 [0031.707] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.707] IStream:SetSize (This=0x65fed0, libNewSize=0x0) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x411779*=0x50, cb=0x8, pcbWritten=0x19fef8 | out: pcbWritten=0x19fef8*=0x8) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x41179a*=0x31, cb=0x8, pcbWritten=0x19fef8 | out: pcbWritten=0x19fef8*=0x8) returned 0x0 [0031.707] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.707] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fdc8 | out: pcbWritten=0x19fdc8*=0x8) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf0*=0x0, cb=0x4, pcbWritten=0x19fdcc | out: pcbWritten=0x19fdcc*=0x4) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe04*=0x0, cb=0x2, pcbWritten=0x19fdc8 | out: pcbWritten=0x19fdc8*=0x2) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0x0, cb=0x2, pcbWritten=0x19fdc8 | out: pcbWritten=0x19fdc8*=0x2) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0x1, cb=0x4, pcbWritten=0x19fde4 | out: pcbWritten=0x19fde4*=0x4) returned 0x0 [0031.707] GetVersionExA (in: lpVersionInformation=0x19fe48*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x19fe48*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf4*=0x9c, cb=0x4, pcbWritten=0x19fdd0 | out: pcbWritten=0x19fdd0*=0x4) returned 0x0 [0031.707] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe48*=0x9c, cb=0x9c, pcbWritten=0x19fdcc | out: pcbWritten=0x19fdcc*=0x9c) returned 0x0 [0031.708] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x77ad0000 [0031.708] GetProcAddress (hModule=0x77ad0000, lpProcName="GetNativeSystemInfo") returned 0x77aeac70 [0031.708] GetProcAddress (hModule=0x77ad0000, lpProcName="IsWow64Process") returned 0x77ae9f10 [0031.708] GetCurrentProcess () returned 0xffffffff [0031.708] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19fe00 | out: Wow64Process=0x19fe00) returned 1 [0031.708] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0x1, cb=0x4, pcbWritten=0x19fde4 | out: pcbWritten=0x19fde4*=0x4) returned 0x0 [0031.708] LocalAlloc (uFlags=0x40, uBytes=0x480) returned 0x66d320 [0031.708] GetLocaleInfoA (in: Locale=0x400, LCType=0x1002, lpLCData=0x66d320, cchData=1023 | out: lpLCData="United States") returned 14 [0031.709] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf4*=0xe, cb=0x4, pcbWritten=0x19fdd0 | out: pcbWritten=0x19fdd0*=0x4) returned 0x0 [0031.709] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x66d320*=0x55, cb=0xe, pcbWritten=0x19fdcc | out: pcbWritten=0x19fdcc*=0xe) returned 0x0 [0031.709] GetLocaleInfoA (in: Locale=0x400, LCType=0x1001, lpLCData=0x66d320, cchData=1023 | out: lpLCData="English") returned 8 [0031.709] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf4*=0x8, cb=0x4, pcbWritten=0x19fdd0 | out: pcbWritten=0x19fdd0*=0x4) returned 0x0 [0031.709] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x66d320*=0x45, cb=0x8, pcbWritten=0x19fdcc | out: pcbWritten=0x19fdcc*=0x8) returned 0x0 [0031.709] AllocateAndInitializeSid (in: pIdentifierAuthority=0x19fdfe, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x19fdf8 | out: pSid=0x19fdf8*=0x658c28*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0031.709] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x658c28*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x19fdf4 | out: IsMember=0x19fdf4) returned 1 [0031.709] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0x1, cb=0x4, pcbWritten=0x19fde4 | out: pcbWritten=0x19fde4*=0x4) returned 0x0 [0031.709] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fc2c | out: phkResult=0x19fc2c*=0x0) returned 0x2 [0031.709] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fc00 | out: phkResult=0x19fc00*=0x0) returned 0x2 [0031.710] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fbd4 | out: phkResult=0x19fbd4*=0x0) returned 0x2 [0031.710] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0x19fc6b | out: lpBuffer="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\") returned 0x25 [0031.710] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19fd78 | out: ppstm=0x19fd78*=0x660088) returned 0x0 [0031.710] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\") returned 37 [0031.710] lstrlenA (lpString="HWID") returned 4 [0031.710] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x6685f0 [0031.710] lstrcpyA (in: lpString1=0x6685f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\" [0031.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\", lpString2="HWID" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\HWID") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\HWID" [0031.710] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp\\HWID" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\temp\\hwid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.710] LocalFree (hMem=0x6685f0) returned 0x0 [0031.710] IUnknown:Release (This=0x660088) returned 0x0 [0031.710] CoCreateGuid (in: pguid=0x19fdf4 | out: pguid=0x19fdf4*(Data1=0x5c5144d0, Data2=0x4128, Data3=0x4c8b, Data4=([0]=0xb9, [1]=0x8b, [2]=0x6d, [3]=0x75, [4]=0x8a, [5]=0x87, [6]=0x5e, [7]=0xd3))) returned 0x0 [0031.710] wsprintfA (in: param_1=0x19fd90, param_2="{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}" | out: param_1="{5C5144D0-4128-4C8B-B98B-6D758A875ED3}") returned 38 [0031.710] lstrlenA (lpString="{5C5144D0-4128-4C8B-B98B-6D758A875ED3}") returned 38 [0031.710] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", phkResult=0x19fd70 | out: phkResult=0x19fd70*=0x220) returned 0x0 [0031.710] RegSetValueExA (in: hKey=0x220, lpValueName="HWID", Reserved=0x0, dwType=0x3, lpData=0x19fd90*, cbData=0x26 | out: lpData=0x19fd90*) returned 0x0 [0031.711] RegCloseKey (hKey=0x220) returned 0x0 [0031.711] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fcac | out: phkResult=0x19fcac*=0x220) returned 0x0 [0031.711] RegQueryValueExA (in: hKey=0x220, lpValueName="HWID", lpReserved=0x0, lpType=0x19fca4, lpData=0x0, lpcbData=0x19fca8*=0x0 | out: lpType=0x19fca4*=0x3, lpData=0x0, lpcbData=0x19fca8*=0x26) returned 0x0 [0031.711] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6685f0 [0031.711] RegQueryValueExA (in: hKey=0x220, lpValueName="HWID", lpReserved=0x0, lpType=0x0, lpData=0x6685f0, lpcbData=0x19fca8*=0x26 | out: lpType=0x0, lpData=0x6685f0*=0x7b, lpcbData=0x19fca8*=0x26) returned 0x0 [0031.711] RegCloseKey (hKey=0x220) returned 0x0 [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0x2a, cb=0x4, pcbWritten=0x19fde4 | out: pcbWritten=0x19fde4*=0x4) returned 0x0 [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe08*=0xff, cb=0x4, pcbWritten=0x19fde4 | out: pcbWritten=0x19fde4*=0x4) returned 0x0 [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x6685f0*=0x7b, cb=0x26, pcbWritten=0x19fde0 | out: pcbWritten=0x19fde0*=0x26) returned 0x0 [0031.711] LocalFree (hMem=0x6685f0) returned 0x0 [0031.711] LocalFree (hMem=0x66d320) returned 0x0 [0031.711] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x77ad0000 [0031.711] GetProcAddress (hModule=0x77ad0000, lpProcName="GetNativeSystemInfo") returned 0x77aeac70 [0031.711] GetNativeSystemInfo (in: lpSystemInfo=0x19fe18 | out: lpSystemInfo=0x19fe18*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x4f01)) [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf4*=0x24, cb=0x4, pcbWritten=0x19fdd0 | out: pcbWritten=0x19fdd0*=0x4) returned 0x0 [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fe18*=0x9, cb=0x24, pcbWritten=0x19fdcc | out: pcbWritten=0x19fdcc*=0x24) returned 0x0 [0031.711] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.711] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.711] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdf4*=0x30, cb=0x4, pcbWritten=0x19fdd0 | out: pcbWritten=0x19fdd0*=0x4) returned 0x0 [0031.711] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.711] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.712] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.712] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.712] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x1, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.712] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far\\Plugins\\FTP\\Hosts", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far2\\Plugins\\FTP\\Hosts", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far Manager\\Plugins\\FTP\\Hosts", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far\\SavedDialogHistory\\FTPHost", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far2\\SavedDialogHistory\\FTPHost", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Far Manager\\SavedDialogHistory\\FTPHost", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.712] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.712] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.712] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.713] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.713] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.713] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.713] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x2, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.713] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.713] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66d320 [0031.713] GetWindowsDirectoryA (in: lpBuffer=0x66d320, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0031.713] lstrlenA (lpString="C:\\Windows") returned 10 [0031.713] lstrlenA (lpString="\\") returned 1 [0031.713] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x666060 [0031.713] lstrcpyA (in: lpString1=0x666060, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0031.713] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0031.713] LocalFree (hMem=0x66d320) returned 0x0 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.713] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.713] lstrlenA (lpString="C:\\Windows\\") returned 11 [0031.714] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0031.714] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ea50 [0031.714] lstrcpyA (in: lpString1=0x66ea50, lpString2="C:\\Windows\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0031.714] lstrcatA (in: lpString1="C:\\Windows\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Windows\\wcx_ftp.ini") returned="C:\\Windows\\wcx_ftp.ini" [0031.714] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x18 [0031.714] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e870 [0031.714] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\wcx_ftp.ini", lpDst=0x66e870, nSize=0x18 | out: lpDst="C:\\Windows\\wcx_ftp.ini") returned 0x17 [0031.714] CreateFileA (lpFileName="C:\\Windows\\wcx_ftp.ini" (normalized: "c:\\windows\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.714] LocalFree (hMem=0x66e870) returned 0x0 [0031.714] LocalFree (hMem=0x66ea50) returned 0x0 [0031.714] LocalFree (hMem=0x666060) returned 0x0 [0031.714] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.714] SHGetFolderPathA (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi") returned 0x0 [0031.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi") returned 17 [0031.717] lstrlenA (lpString="\\") returned 1 [0031.717] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e230 [0031.717] lstrcpyA (in: lpString1=0x66e230, lpString2="C:\\Users\\Nd9E1FYi" | out: lpString1="C:\\Users\\Nd9E1FYi") returned="C:\\Users\\Nd9E1FYi" [0031.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\") returned="C:\\Users\\Nd9E1FYi\\" [0031.717] LocalFree (hMem=0x66eb30) returned 0x0 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.717] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.718] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\") returned 18 [0031.718] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0031.718] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x664e38 [0031.718] lstrcpyA (in: lpString1=0x664e38, lpString2="C:\\Users\\Nd9E1FYi\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\") returned="C:\\Users\\Nd9E1FYi\\" [0031.718] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini") returned="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini" [0031.718] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x1f [0031.718] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6643b8 [0031.718] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini", lpDst=0x6643b8, nSize=0x1f | out: lpDst="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini") returned 0x1e [0031.718] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\wcx_ftp.ini" (normalized: "c:\\users\\nd9e1fyi\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.718] LocalFree (hMem=0x6643b8) returned 0x0 [0031.718] LocalFree (hMem=0x664e38) returned 0x0 [0031.718] LocalFree (hMem=0x66e230) returned 0x0 [0031.718] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.718] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.719] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.719] lstrlenA (lpString="\\GHISLER") returned 8 [0031.719] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x660530 [0031.719] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.719] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER" [0031.719] LocalFree (hMem=0x66eb30) returned 0x0 [0031.719] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER") returned 41 [0031.719] lstrlenA (lpString="\\") returned 1 [0031.719] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6685f0 [0031.719] lstrcpyA (in: lpString1=0x6685f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER" [0031.719] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\" [0031.719] LocalFree (hMem=0x660530) returned 0x0 [0031.719] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.719] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.720] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.720] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.720] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.720] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.720] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\") returned 42 [0031.720] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0031.720] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.720] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\" [0031.720] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" [0031.720] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x37 [0031.720] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.720] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini", lpDst=0x661da8, nSize=0x37 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini") returned 0x36 [0031.720] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.720] LocalFree (hMem=0x661da8) returned 0x0 [0031.720] LocalFree (hMem=0x660530) returned 0x0 [0031.720] LocalFree (hMem=0x6685f0) returned 0x0 [0031.720] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.720] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.721] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.721] lstrlenA (lpString="\\GHISLER") returned 8 [0031.721] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ddd0 [0031.721] lstrcpyA (in: lpString1=0x66ddd0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.721] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0031.721] LocalFree (hMem=0x66eb30) returned 0x0 [0031.721] lstrlenA (lpString="C:\\ProgramData\\GHISLER") returned 22 [0031.721] lstrlenA (lpString="\\") returned 1 [0031.721] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e730 [0031.721] lstrcpyA (in: lpString1=0x66e730, lpString2="C:\\ProgramData\\GHISLER" | out: lpString1="C:\\ProgramData\\GHISLER") returned="C:\\ProgramData\\GHISLER" [0031.721] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER", lpString2="\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0031.721] LocalFree (hMem=0x66ddd0) returned 0x0 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.721] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.722] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.722] lstrlenA (lpString="C:\\ProgramData\\GHISLER\\") returned 23 [0031.722] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0031.722] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x660530 [0031.722] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GHISLER\\" | out: lpString1="C:\\ProgramData\\GHISLER\\") returned="C:\\ProgramData\\GHISLER\\" [0031.722] lstrcatA (in: lpString1="C:\\ProgramData\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" [0031.722] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x24 [0031.722] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x6685f0 [0031.722] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GHISLER\\wcx_ftp.ini", lpDst=0x6685f0, nSize=0x24 | out: lpDst="C:\\ProgramData\\GHISLER\\wcx_ftp.ini") returned 0x23 [0031.722] CreateFileA (lpFileName="C:\\ProgramData\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\programdata\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.722] LocalFree (hMem=0x6685f0) returned 0x0 [0031.722] LocalFree (hMem=0x660530) returned 0x0 [0031.722] LocalFree (hMem=0x66e730) returned 0x0 [0031.722] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.722] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.723] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.723] lstrlenA (lpString="\\GHISLER") returned 8 [0031.723] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x660530 [0031.723] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.723] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\GHISLER" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER" [0031.723] LocalFree (hMem=0x66eb30) returned 0x0 [0031.723] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER") returned 39 [0031.723] lstrlenA (lpString="\\") returned 1 [0031.723] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6685f0 [0031.723] lstrcpyA (in: lpString1=0x6685f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER" [0031.723] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\" [0031.723] LocalFree (hMem=0x660530) returned 0x0 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe94 | out: phkResult=0x19fe94*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe68 | out: phkResult=0x19fe68*=0x0) returned 0x2 [0031.723] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe3c | out: phkResult=0x19fe3c*=0x0) returned 0x2 [0031.723] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\") returned 40 [0031.723] lstrlenA (lpString="wcx_ftp.ini") returned 11 [0031.724] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x660530 [0031.724] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\" [0031.724] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\", lpString2="wcx_ftp.ini" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini" [0031.724] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x35 [0031.724] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.724] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini", lpDst=0x661da8, nSize=0x35 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini") returned 0x34 [0031.724] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GHISLER\\wcx_ftp.ini" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\ghisler\\wcx_ftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.724] LocalFree (hMem=0x661da8) returned 0x0 [0031.724] LocalFree (hMem=0x660530) returned 0x0 [0031.724] LocalFree (hMem=0x6685f0) returned 0x0 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.724] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Windows Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.725] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Ghisler\\Total Commander", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.725] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.725] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.725] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.725] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.725] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.725] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.726] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.726] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.726] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd94 | out: pcbWritten=0x19fd94*=0x8) returned 0x0 [0031.726] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdbc*=0x0, cb=0x4, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x4) returned 0x0 [0031.726] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd0*=0x3, cb=0x2, pcbWritten=0x19fd94 | out: pcbWritten=0x19fd94*=0x2) returned 0x0 [0031.726] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x0, cb=0x2, pcbWritten=0x19fd94 | out: pcbWritten=0x19fd94*=0x2) returned 0x0 [0031.726] GetWindowsDirectoryA (in: lpBuffer=0x19fddf, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0031.726] lstrlenA (lpString="C:\\Windows") returned 10 [0031.726] lstrlenA (lpString="\\win.ini") returned 8 [0031.726] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e0f0 [0031.726] lstrcpyA (in: lpString1=0x66e0f0, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0031.726] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\win.ini" | out: lpString1="C:\\Windows\\win.ini") returned="C:\\Windows\\win.ini" [0031.726] GetPrivateProfileStringA (in: lpAppName="WS_FTP", lpKeyName="DIR", lpDefault="", lpReturnedString=0x19fddf, nSize=0x104, lpFileName="C:\\Windows\\win.ini" | out: lpReturnedString="") returned 0x0 [0031.728] GetPrivateProfileStringA (in: lpAppName="WS_FTP", lpKeyName="DEFDIR", lpDefault="", lpReturnedString=0x19fddf, nSize=0x104, lpFileName="C:\\Windows\\win.ini" | out: lpReturnedString="") returned 0x0 [0031.729] LocalFree (hMem=0x66e0f0) returned 0x0 [0031.729] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.729] SHGetFolderPathA (in: hwnd=0x0, csidl=43, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 0x0 [0031.729] lstrlenA (lpString="C:\\Program Files (x86)\\Common Files") returned 35 [0031.729] lstrlenA (lpString="\\Ipswitch\\WS_FTP") returned 16 [0031.729] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x668648 [0031.729] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Program Files (x86)\\Common Files" | out: lpString1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files" [0031.729] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Common Files", lpString2="\\Ipswitch\\WS_FTP" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" [0031.729] LocalFree (hMem=0x66eb30) returned 0x0 [0031.729] lstrlenA (lpString="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned 51 [0031.729] lstrlenA (lpString="\\*.*") returned 4 [0031.729] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.729] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP" [0031.729] lstrcatA (in: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*") returned="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*" [0031.729] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Ipswitch\\WS_FTP\\*.*", lpFindFileData=0x19fc82 | out: lpFindFileData=0x19fc82) returned 0xffffffff [0031.730] LocalFree (hMem=0x660530) returned 0x0 [0031.730] LocalFree (hMem=0x668648) returned 0x0 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.730] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.730] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.730] lstrlenA (lpString="\\Ipswitch") returned 9 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x668648 [0031.730] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.730] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Ipswitch" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch" [0031.730] LocalFree (hMem=0x66eb30) returned 0x0 [0031.730] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch") returned 42 [0031.730] lstrlenA (lpString="\\*.*") returned 4 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x660530 [0031.730] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch" [0031.730] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch\\*.*" [0031.730] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Ipswitch\\*.*", lpFindFileData=0x19fc6e | out: lpFindFileData=0x19fc6e) returned 0xffffffff [0031.730] LocalFree (hMem=0x660530) returned 0x0 [0031.730] LocalFree (hMem=0x668648) returned 0x0 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.730] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.730] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.730] lstrlenA (lpString="\\Ipswitch") returned 9 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e7d0 [0031.730] lstrcpyA (in: lpString1=0x66e7d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.730] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Ipswitch" | out: lpString1="C:\\ProgramData\\Ipswitch") returned="C:\\ProgramData\\Ipswitch" [0031.730] LocalFree (hMem=0x66eb30) returned 0x0 [0031.730] lstrlenA (lpString="C:\\ProgramData\\Ipswitch") returned 23 [0031.730] lstrlenA (lpString="\\*.*") returned 4 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x664c40 [0031.730] lstrcpyA (in: lpString1=0x664c40, lpString2="C:\\ProgramData\\Ipswitch" | out: lpString1="C:\\ProgramData\\Ipswitch") returned="C:\\ProgramData\\Ipswitch" [0031.730] lstrcatA (in: lpString1="C:\\ProgramData\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Ipswitch\\*.*") returned="C:\\ProgramData\\Ipswitch\\*.*" [0031.730] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Ipswitch\\*.*", lpFindFileData=0x19fc6e | out: lpFindFileData=0x19fc6e) returned 0xffffffff [0031.730] LocalFree (hMem=0x664c40) returned 0x0 [0031.730] LocalFree (hMem=0x66e7d0) returned 0x0 [0031.730] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.730] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.731] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.731] lstrlenA (lpString="\\Ipswitch") returned 9 [0031.731] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x668648 [0031.731] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.731] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Ipswitch" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch" [0031.731] LocalFree (hMem=0x66eb30) returned 0x0 [0031.731] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch") returned 40 [0031.731] lstrlenA (lpString="\\*.*") returned 4 [0031.731] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.731] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch" [0031.731] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch\\*.*" [0031.731] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Ipswitch\\*.*", lpFindFileData=0x19fc6e | out: lpFindFileData=0x19fc6e) returned 0xffffffff [0031.731] LocalFree (hMem=0x660530) returned 0x0 [0031.731] LocalFree (hMem=0x668648) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.731] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x10, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.731] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.731] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.731] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0031.731] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.731] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x4, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0031.731] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="CUTEFTP") returned 0x0 [0031.732] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="CUTEFTP") returned 0x0 [0031.732] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.732] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.732] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.732] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0031.732] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x668648 [0031.733] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.733] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0031.733] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 53 [0031.733] lstrlenA (lpString="\\sm.dat") returned 7 [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x663370 [0031.733] lstrcpyA (in: lpString1=0x663370, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0031.733] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" [0031.733] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x6635c8 [0031.733] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x6635c8, nSize=0x3e | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x3d [0031.733] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.733] LocalFree (hMem=0x6635c8) returned 0x0 [0031.733] LocalFree (hMem=0x663370) returned 0x0 [0031.733] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned 53 [0031.733] lstrlenA (lpString="\\*.*") returned 4 [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x663b40 [0031.733] lstrcpyA (in: lpString1=0x663b40, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP" [0031.733] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*" [0031.733] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.733] LocalFree (hMem=0x663b40) returned 0x0 [0031.733] LocalFree (hMem=0x668648) returned 0x0 [0031.733] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.733] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x663438 [0031.733] lstrcpyA (in: lpString1=0x663438, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.733] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0031.733] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 57 [0031.733] lstrlenA (lpString="\\sm.dat") returned 7 [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x65e3c8 [0031.733] lstrcpyA (in: lpString1=0x65e3c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0031.733] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0031.733] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x42 [0031.733] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x65eb18 [0031.733] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x65eb18, nSize=0x42 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x41 [0031.734] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.734] LocalFree (hMem=0x65eb18) returned 0x0 [0031.734] LocalFree (hMem=0x65e3c8) returned 0x0 [0031.734] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned 57 [0031.734] lstrlenA (lpString="\\*.*") returned 4 [0031.734] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662df8 [0031.734] lstrcpyA (in: lpString1=0x662df8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro" [0031.734] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0031.734] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.734] LocalFree (hMem=0x662df8) returned 0x0 [0031.734] LocalFree (hMem=0x663438) returned 0x0 [0031.734] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.734] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0031.734] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x6639b0 [0031.734] lstrcpyA (in: lpString1=0x6639b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.734] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0031.734] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 58 [0031.734] lstrlenA (lpString="\\sm.dat") returned 7 [0031.734] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x65eb18 [0031.734] lstrcpyA (in: lpString1=0x65eb18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0031.734] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0031.734] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x43 [0031.734] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x65e158 [0031.734] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x65e158, nSize=0x43 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x42 [0031.734] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.734] LocalFree (hMem=0x65e158) returned 0x0 [0031.734] LocalFree (hMem=0x65eb18) returned 0x0 [0031.734] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned 58 [0031.734] lstrlenA (lpString="\\*.*") returned 4 [0031.734] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x6638e8 [0031.734] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite" [0031.734] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0031.734] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.735] LocalFree (hMem=0x6638e8) returned 0x0 [0031.735] LocalFree (hMem=0x6639b0) returned 0x0 [0031.735] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.735] lstrlenA (lpString="\\CuteFTP") returned 8 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x668648 [0031.735] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.735] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP" [0031.735] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP") returned 41 [0031.735] lstrlenA (lpString="\\sm.dat") returned 7 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x660530 [0031.735] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP" [0031.735] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat" [0031.735] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x32 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x661da8 [0031.735] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat", lpDst=0x661da8, nSize=0x32 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat") returned 0x31 [0031.735] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.735] LocalFree (hMem=0x661da8) returned 0x0 [0031.735] LocalFree (hMem=0x660530) returned 0x0 [0031.735] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP") returned 41 [0031.735] lstrlenA (lpString="\\*.*") returned 4 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x660530 [0031.735] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP" [0031.735] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\*.*" [0031.735] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.735] LocalFree (hMem=0x660530) returned 0x0 [0031.735] LocalFree (hMem=0x668648) returned 0x0 [0031.735] LocalFree (hMem=0x66eb30) returned 0x0 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.735] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.735] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.735] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0031.735] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x668648 [0031.735] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.735] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0031.735] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0031.735] lstrlenA (lpString="\\sm.dat") returned 7 [0031.736] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x660530 [0031.736] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0031.736] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" [0031.736] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2b [0031.736] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x661da8 [0031.736] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x661da8, nSize=0x2b | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x2a [0031.736] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.750] LocalFree (hMem=0x661da8) returned 0x0 [0031.750] LocalFree (hMem=0x660530) returned 0x0 [0031.750] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned 34 [0031.750] lstrlenA (lpString="\\*.*") returned 4 [0031.750] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x660530 [0031.750] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP" [0031.750] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*" [0031.750] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.750] LocalFree (hMem=0x660530) returned 0x0 [0031.750] LocalFree (hMem=0x668648) returned 0x0 [0031.750] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.750] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0031.750] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x668648 [0031.750] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.750] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0031.750] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0031.750] lstrlenA (lpString="\\sm.dat") returned 7 [0031.750] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x660530 [0031.750] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0031.750] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0031.750] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2f [0031.750] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.750] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x661da8, nSize=0x2f | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x2e [0031.750] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.750] LocalFree (hMem=0x661da8) returned 0x0 [0031.750] LocalFree (hMem=0x660530) returned 0x0 [0031.750] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned 38 [0031.750] lstrlenA (lpString="\\*.*") returned 4 [0031.750] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.750] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro" [0031.751] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0031.751] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.751] LocalFree (hMem=0x660530) returned 0x0 [0031.751] LocalFree (hMem=0x668648) returned 0x0 [0031.751] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.751] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0031.751] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x668648 [0031.751] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.751] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0031.751] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0031.751] lstrlenA (lpString="\\sm.dat") returned 7 [0031.751] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x660530 [0031.751] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0031.751] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0031.751] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x30 [0031.751] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x661da8 [0031.751] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x661da8, nSize=0x30 | out: lpDst="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x2f [0031.751] CreateFileA (lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\programdata\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.751] LocalFree (hMem=0x661da8) returned 0x0 [0031.751] LocalFree (hMem=0x660530) returned 0x0 [0031.751] lstrlenA (lpString="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned 39 [0031.751] lstrlenA (lpString="\\*.*") returned 4 [0031.751] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x660530 [0031.751] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite" [0031.751] lstrcatA (in: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0031.751] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.751] LocalFree (hMem=0x660530) returned 0x0 [0031.751] LocalFree (hMem=0x668648) returned 0x0 [0031.751] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.751] lstrlenA (lpString="\\CuteFTP") returned 8 [0031.751] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e690 [0031.751] lstrcpyA (in: lpString1=0x66e690, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.751] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0031.752] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0031.752] lstrlenA (lpString="\\sm.dat") returned 7 [0031.752] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x664e38 [0031.752] lstrcpyA (in: lpString1=0x664e38, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0031.752] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\ProgramData\\CuteFTP\\sm.dat") returned="C:\\ProgramData\\CuteFTP\\sm.dat" [0031.752] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x1f [0031.752] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x664ee0 [0031.752] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CuteFTP\\sm.dat", lpDst=0x664ee0, nSize=0x1f | out: lpDst="C:\\ProgramData\\CuteFTP\\sm.dat") returned 0x1e [0031.752] CreateFileA (lpFileName="C:\\ProgramData\\CuteFTP\\sm.dat" (normalized: "c:\\programdata\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.752] LocalFree (hMem=0x664ee0) returned 0x0 [0031.752] LocalFree (hMem=0x664e38) returned 0x0 [0031.752] lstrlenA (lpString="C:\\ProgramData\\CuteFTP") returned 22 [0031.752] lstrlenA (lpString="\\*.*") returned 4 [0031.752] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6658b8 [0031.752] lstrcpyA (in: lpString1=0x6658b8, lpString2="C:\\ProgramData\\CuteFTP" | out: lpString1="C:\\ProgramData\\CuteFTP") returned="C:\\ProgramData\\CuteFTP" [0031.752] lstrcatA (in: lpString1="C:\\ProgramData\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\CuteFTP\\*.*") returned="C:\\ProgramData\\CuteFTP\\*.*" [0031.752] FindFirstFileA (in: lpFileName="C:\\ProgramData\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.752] LocalFree (hMem=0x6658b8) returned 0x0 [0031.752] LocalFree (hMem=0x66e690) returned 0x0 [0031.752] LocalFree (hMem=0x66eb30) returned 0x0 [0031.752] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.752] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.752] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.752] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0031.752] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x668648 [0031.752] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.752] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0031.752] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 51 [0031.752] lstrlenA (lpString="\\sm.dat") returned 7 [0031.752] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663370 [0031.752] lstrcpyA (in: lpString1=0x663370, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0031.752] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" [0031.752] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0031.752] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x6635c8 [0031.752] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x6635c8, nSize=0x3c | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x3b [0031.753] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.753] LocalFree (hMem=0x6635c8) returned 0x0 [0031.753] LocalFree (hMem=0x663370) returned 0x0 [0031.753] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned 51 [0031.753] lstrlenA (lpString="\\*.*") returned 4 [0031.753] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.753] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP" [0031.753] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*" [0031.753] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.753] LocalFree (hMem=0x660530) returned 0x0 [0031.753] LocalFree (hMem=0x668648) returned 0x0 [0031.753] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.753] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0031.753] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x668648 [0031.753] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.753] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0031.753] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 55 [0031.753] lstrlenA (lpString="\\sm.dat") returned 7 [0031.753] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x663a78 [0031.753] lstrcpyA (in: lpString1=0x663a78, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0031.753] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0031.753] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0031.753] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x662f88 [0031.753] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x662f88, nSize=0x40 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x3f [0031.753] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.753] LocalFree (hMem=0x662f88) returned 0x0 [0031.753] LocalFree (hMem=0x663a78) returned 0x0 [0031.753] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned 55 [0031.753] lstrlenA (lpString="\\*.*") returned 4 [0031.753] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x6631e0 [0031.754] lstrcpyA (in: lpString1=0x6631e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro" [0031.754] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0031.754] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.754] LocalFree (hMem=0x6631e0) returned 0x0 [0031.754] LocalFree (hMem=0x668648) returned 0x0 [0031.754] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.754] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0031.754] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663438 [0031.754] lstrcpyA (in: lpString1=0x663438, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.754] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0031.754] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 56 [0031.754] lstrlenA (lpString="\\sm.dat") returned 7 [0031.754] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x6638e8 [0031.754] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0031.754] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0031.754] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x41 [0031.754] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x65e158 [0031.754] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x65e158, nSize=0x41 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x40 [0031.754] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.754] LocalFree (hMem=0x65e158) returned 0x0 [0031.754] LocalFree (hMem=0x6638e8) returned 0x0 [0031.754] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned 56 [0031.754] lstrlenA (lpString="\\*.*") returned 4 [0031.754] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x662df8 [0031.754] lstrcpyA (in: lpString1=0x662df8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite" [0031.754] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0031.754] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.754] LocalFree (hMem=0x662df8) returned 0x0 [0031.754] LocalFree (hMem=0x663438) returned 0x0 [0031.754] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.754] lstrlenA (lpString="\\CuteFTP") returned 8 [0031.754] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x668648 [0031.754] lstrcpyA (in: lpString1=0x668648, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.755] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP" [0031.755] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP") returned 39 [0031.755] lstrlenA (lpString="\\sm.dat") returned 7 [0031.755] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x660530 [0031.755] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP" [0031.755] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat" [0031.755] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x30 [0031.755] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x661da8 [0031.755] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat", lpDst=0x661da8, nSize=0x30 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat") returned 0x2f [0031.755] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\sm.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.755] LocalFree (hMem=0x661da8) returned 0x0 [0031.755] LocalFree (hMem=0x660530) returned 0x0 [0031.755] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP") returned 39 [0031.755] lstrlenA (lpString="\\*.*") returned 4 [0031.755] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x660530 [0031.755] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP" [0031.755] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\*.*" [0031.755] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.755] LocalFree (hMem=0x660530) returned 0x0 [0031.755] LocalFree (hMem=0x668648) returned 0x0 [0031.755] LocalFree (hMem=0x66eb30) returned 0x0 [0031.755] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.755] SHGetFolderPathA (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0031.756] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0031.756] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP") returned 20 [0031.756] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.756] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0031.756] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0031.756] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0031.756] lstrlenA (lpString="\\sm.dat") returned 7 [0031.756] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x661da8 [0031.756] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0031.756] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" [0031.756] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x33 [0031.756] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x663c48 [0031.756] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat", lpDst=0x663c48, nSize=0x33 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat") returned 0x32 [0031.756] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.756] LocalFree (hMem=0x663c48) returned 0x0 [0031.756] LocalFree (hMem=0x661da8) returned 0x0 [0031.756] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned 42 [0031.756] lstrlenA (lpString="\\*.*") returned 4 [0031.756] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.756] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP" [0031.756] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*" [0031.756] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.756] LocalFree (hMem=0x661da8) returned 0x0 [0031.756] LocalFree (hMem=0x660530) returned 0x0 [0031.756] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0031.756] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Pro") returned 24 [0031.756] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x660530 [0031.756] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0031.757] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0031.757] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0031.757] lstrlenA (lpString="\\sm.dat") returned 7 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x661da8 [0031.757] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0031.757] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" [0031.757] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x37 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x663c48 [0031.757] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat", lpDst=0x663c48, nSize=0x37 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat") returned 0x36 [0031.757] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp pro\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.757] LocalFree (hMem=0x663c48) returned 0x0 [0031.757] LocalFree (hMem=0x661da8) returned 0x0 [0031.757] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned 46 [0031.757] lstrlenA (lpString="\\*.*") returned 4 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x661da8 [0031.757] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro" [0031.757] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*" [0031.757] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Pro\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.757] LocalFree (hMem=0x661da8) returned 0x0 [0031.757] LocalFree (hMem=0x660530) returned 0x0 [0031.757] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0031.757] lstrlenA (lpString="\\GlobalSCAPE\\CuteFTP Lite") returned 25 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x660530 [0031.757] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0031.757] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0031.757] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0031.757] lstrlenA (lpString="\\sm.dat") returned 7 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.757] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0031.757] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" [0031.757] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.757] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x663c48 [0031.757] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat", lpDst=0x663c48, nSize=0x38 | out: lpDst="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat") returned 0x37 [0031.757] CreateFileA (lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\sm.dat" (normalized: "c:\\program files (x86)\\globalscape\\cuteftp lite\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.757] LocalFree (hMem=0x663c48) returned 0x0 [0031.757] LocalFree (hMem=0x661da8) returned 0x0 [0031.758] lstrlenA (lpString="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned 47 [0031.758] lstrlenA (lpString="\\*.*") returned 4 [0031.758] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x661da8 [0031.758] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite" [0031.758] lstrcatA (in: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*") returned="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*" [0031.758] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\GlobalSCAPE\\CuteFTP Lite\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.758] LocalFree (hMem=0x661da8) returned 0x0 [0031.758] LocalFree (hMem=0x660530) returned 0x0 [0031.758] lstrlenA (lpString="C:\\Program Files (x86)") returned 22 [0031.758] lstrlenA (lpString="\\CuteFTP") returned 8 [0031.758] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x664118 [0031.758] lstrcpyA (in: lpString1=0x664118, lpString2="C:\\Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)" [0031.758] lstrcatA (in: lpString1="C:\\Program Files (x86)", lpString2="\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0031.758] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0031.758] lstrlenA (lpString="\\sm.dat") returned 7 [0031.758] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x660530 [0031.758] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0031.758] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\sm.dat" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned="C:\\Program Files (x86)\\CuteFTP\\sm.dat" [0031.758] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0031.758] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x661da8 [0031.758] ExpandEnvironmentStringsA (in: lpSrc="C:\\Program Files (x86)\\CuteFTP\\sm.dat", lpDst=0x661da8, nSize=0x27 | out: lpDst="C:\\Program Files (x86)\\CuteFTP\\sm.dat") returned 0x26 [0031.758] CreateFileA (lpFileName="C:\\Program Files (x86)\\CuteFTP\\sm.dat" (normalized: "c:\\program files (x86)\\cuteftp\\sm.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.758] LocalFree (hMem=0x661da8) returned 0x0 [0031.758] LocalFree (hMem=0x660530) returned 0x0 [0031.758] lstrlenA (lpString="C:\\Program Files (x86)\\CuteFTP") returned 30 [0031.758] lstrlenA (lpString="\\*.*") returned 4 [0031.758] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x660530 [0031.758] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Program Files (x86)\\CuteFTP" | out: lpString1="C:\\Program Files (x86)\\CuteFTP") returned="C:\\Program Files (x86)\\CuteFTP" [0031.758] lstrcatA (in: lpString1="C:\\Program Files (x86)\\CuteFTP", lpString2="\\*.*" | out: lpString1="C:\\Program Files (x86)\\CuteFTP\\*.*") returned="C:\\Program Files (x86)\\CuteFTP\\*.*" [0031.758] FindFirstFileA (in: lpFileName="C:\\Program Files (x86)\\CuteFTP\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0031.758] LocalFree (hMem=0x660530) returned 0x0 [0031.758] LocalFree (hMem=0x664118) returned 0x0 [0031.758] LocalFree (hMem=0x66eb30) returned 0x0 [0031.758] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.758] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.758] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 6 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 7 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Home\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.759] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\GlobalSCAPE\\CuteFTP 8 Professional\\QCToolbar", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.760] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.760] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.760] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.760] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.760] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.760] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.760] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.760] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.761] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\3", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.762] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.763] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.763] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.763] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0031.763] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0031.763] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FlashFXP\\4", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0031.763] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.763] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.763] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.763] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.763] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.763] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.763] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.763] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned 44 [0031.763] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.763] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.763] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.763] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" [0031.763] LocalFree (hMem=0x660530) returned 0x0 [0031.763] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.763] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.763] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat") returned 0x37 [0031.763] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.763] LocalFree (hMem=0x660530) returned 0x0 [0031.763] LocalFree (hMem=0x661da8) returned 0x0 [0031.763] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.763] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.763] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.763] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned 44 [0031.764] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.764] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" [0031.764] LocalFree (hMem=0x660530) returned 0x0 [0031.764] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.764] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat") returned 0x37 [0031.764] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.764] LocalFree (hMem=0x660530) returned 0x0 [0031.764] LocalFree (hMem=0x661da8) returned 0x0 [0031.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.764] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.764] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned 44 [0031.764] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.764] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" [0031.764] LocalFree (hMem=0x660530) returned 0x0 [0031.764] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.764] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat") returned 0x37 [0031.764] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.764] LocalFree (hMem=0x660530) returned 0x0 [0031.764] LocalFree (hMem=0x661da8) returned 0x0 [0031.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.764] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.764] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.764] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.765] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned 44 [0031.765] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.765] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" [0031.765] LocalFree (hMem=0x660530) returned 0x0 [0031.765] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.765] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat") returned 0x37 [0031.765] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.765] LocalFree (hMem=0x660530) returned 0x0 [0031.765] LocalFree (hMem=0x661da8) returned 0x0 [0031.765] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.765] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.765] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.765] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned 44 [0031.765] lstrlenA (lpString="\\History.dat") returned 12 [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6639b0 [0031.765] lstrcpyA (in: lpString1=0x6639b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3" [0031.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat" [0031.765] LocalFree (hMem=0x660530) returned 0x0 [0031.765] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3a [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x662c68 [0031.765] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat", lpDst=0x662c68, nSize=0x3a | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat") returned 0x39 [0031.765] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.765] LocalFree (hMem=0x662c68) returned 0x0 [0031.765] LocalFree (hMem=0x6639b0) returned 0x0 [0031.765] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.765] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.765] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.765] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.766] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned 44 [0031.766] lstrlenA (lpString="\\History.dat") returned 12 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663690 [0031.766] lstrcpyA (in: lpString1=0x663690, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4" [0031.766] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat" [0031.766] LocalFree (hMem=0x660530) returned 0x0 [0031.766] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3a [0031.766] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x6638e8 [0031.766] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat", lpDst=0x6638e8, nSize=0x3a | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat") returned 0x39 [0031.766] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.766] LocalFree (hMem=0x6638e8) returned 0x0 [0031.766] LocalFree (hMem=0x663690) returned 0x0 [0031.766] LocalFree (hMem=0x66eb30) returned 0x0 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.766] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.766] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.766] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x665b58 [0031.766] lstrcpyA (in: lpString1=0x665b58, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.766] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.766] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0031.766] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.766] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.766] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" [0031.766] LocalFree (hMem=0x665b58) returned 0x0 [0031.766] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x661da8 [0031.766] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Sites.dat", lpDst=0x661da8, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Sites.dat") returned 0x24 [0031.766] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.766] LocalFree (hMem=0x661da8) returned 0x0 [0031.766] LocalFree (hMem=0x660530) returned 0x0 [0031.766] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.766] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.766] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x664f88 [0031.766] lstrcpyA (in: lpString1=0x664f88, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.766] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.767] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0031.767] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.767] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.767] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" [0031.767] LocalFree (hMem=0x664f88) returned 0x0 [0031.767] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x661da8 [0031.767] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Sites.dat", lpDst=0x661da8, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Sites.dat") returned 0x24 [0031.767] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\programdata\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.767] LocalFree (hMem=0x661da8) returned 0x0 [0031.767] LocalFree (hMem=0x660530) returned 0x0 [0031.767] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.767] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6647a8 [0031.767] lstrcpyA (in: lpString1=0x6647a8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.767] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.767] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0031.767] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.767] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.767] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" [0031.767] LocalFree (hMem=0x6647a8) returned 0x0 [0031.767] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x661da8 [0031.767] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\Quick.dat", lpDst=0x661da8, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\Quick.dat") returned 0x24 [0031.767] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.767] LocalFree (hMem=0x661da8) returned 0x0 [0031.767] LocalFree (hMem=0x660530) returned 0x0 [0031.767] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.767] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.767] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6641c0 [0031.767] lstrcpyA (in: lpString1=0x6641c0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.767] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.767] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0031.768] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.768] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.768] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" [0031.768] LocalFree (hMem=0x6641c0) returned 0x0 [0031.768] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x661da8 [0031.768] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\Quick.dat", lpDst=0x661da8, nSize=0x25 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\Quick.dat") returned 0x24 [0031.768] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\programdata\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.768] LocalFree (hMem=0x661da8) returned 0x0 [0031.768] LocalFree (hMem=0x660530) returned 0x0 [0031.768] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.768] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x664070 [0031.768] lstrcpyA (in: lpString1=0x664070, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.768] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.768] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\3") returned 25 [0031.768] lstrlenA (lpString="\\History.dat") returned 12 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x660530 [0031.768] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\3" | out: lpString1="C:\\ProgramData\\FlashFXP\\3") returned="C:\\ProgramData\\FlashFXP\\3" [0031.768] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned="C:\\ProgramData\\FlashFXP\\3\\History.dat" [0031.768] LocalFree (hMem=0x664070) returned 0x0 [0031.768] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x661da8 [0031.768] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\3\\History.dat", lpDst=0x661da8, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\3\\History.dat") returned 0x26 [0031.768] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\3\\History.dat" (normalized: "c:\\programdata\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.768] LocalFree (hMem=0x661da8) returned 0x0 [0031.768] LocalFree (hMem=0x660530) returned 0x0 [0031.768] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.768] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6647a8 [0031.768] lstrcpyA (in: lpString1=0x6647a8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.768] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.768] lstrlenA (lpString="C:\\ProgramData\\FlashFXP\\4") returned 25 [0031.768] lstrlenA (lpString="\\History.dat") returned 12 [0031.768] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x660530 [0031.769] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FlashFXP\\4" | out: lpString1="C:\\ProgramData\\FlashFXP\\4") returned="C:\\ProgramData\\FlashFXP\\4" [0031.769] lstrcatA (in: lpString1="C:\\ProgramData\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned="C:\\ProgramData\\FlashFXP\\4\\History.dat" [0031.769] LocalFree (hMem=0x6647a8) returned 0x0 [0031.769] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x27 [0031.769] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x661da8 [0031.769] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FlashFXP\\4\\History.dat", lpDst=0x661da8, nSize=0x27 | out: lpDst="C:\\ProgramData\\FlashFXP\\4\\History.dat") returned 0x26 [0031.769] CreateFileA (lpFileName="C:\\ProgramData\\FlashFXP\\4\\History.dat" (normalized: "c:\\programdata\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.769] LocalFree (hMem=0x661da8) returned 0x0 [0031.769] LocalFree (hMem=0x660530) returned 0x0 [0031.769] LocalFree (hMem=0x66eb30) returned 0x0 [0031.769] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.769] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.769] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.769] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.769] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.769] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.769] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.769] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned 42 [0031.769] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.769] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.769] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.769] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat" [0031.769] LocalFree (hMem=0x660530) returned 0x0 [0031.769] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.769] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.769] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat", lpDst=0x660530, nSize=0x36 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat") returned 0x35 [0031.769] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Sites.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\3\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.770] LocalFree (hMem=0x660530) returned 0x0 [0031.770] LocalFree (hMem=0x661da8) returned 0x0 [0031.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.770] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.770] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned 42 [0031.770] lstrlenA (lpString="\\Sites.dat") returned 10 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.770] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4", lpString2="\\Sites.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat" [0031.770] LocalFree (hMem=0x660530) returned 0x0 [0031.770] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.770] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat", lpDst=0x660530, nSize=0x36 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat") returned 0x35 [0031.770] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Sites.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\4\\sites.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.770] LocalFree (hMem=0x660530) returned 0x0 [0031.770] LocalFree (hMem=0x661da8) returned 0x0 [0031.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.770] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.770] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned 42 [0031.770] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.770] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat" [0031.770] LocalFree (hMem=0x660530) returned 0x0 [0031.770] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.770] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.770] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat", lpDst=0x660530, nSize=0x36 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat") returned 0x35 [0031.770] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\Quick.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\3\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.771] LocalFree (hMem=0x660530) returned 0x0 [0031.771] LocalFree (hMem=0x661da8) returned 0x0 [0031.771] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.771] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.771] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.771] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.771] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned 42 [0031.771] lstrlenA (lpString="\\Quick.dat") returned 10 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.771] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.771] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4", lpString2="\\Quick.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat" [0031.771] LocalFree (hMem=0x660530) returned 0x0 [0031.771] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.771] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat", lpDst=0x660530, nSize=0x36 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat") returned 0x35 [0031.771] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\Quick.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\4\\quick.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.771] LocalFree (hMem=0x660530) returned 0x0 [0031.771] LocalFree (hMem=0x661da8) returned 0x0 [0031.771] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.771] lstrlenA (lpString="\\FlashFXP\\3") returned 11 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.771] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.771] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.771] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned 42 [0031.771] lstrlenA (lpString="\\History.dat") returned 12 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.771] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3" [0031.771] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3", lpString2="\\History.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat" [0031.771] LocalFree (hMem=0x660530) returned 0x0 [0031.771] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.771] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.771] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat") returned 0x37 [0031.771] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\3\\History.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\3\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.772] LocalFree (hMem=0x660530) returned 0x0 [0031.772] LocalFree (hMem=0x661da8) returned 0x0 [0031.772] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.772] lstrlenA (lpString="\\FlashFXP\\4") returned 11 [0031.772] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.772] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.772] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.772] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned 42 [0031.772] lstrlenA (lpString="\\History.dat") returned 12 [0031.772] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.772] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4" [0031.772] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4", lpString2="\\History.dat" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat" [0031.772] LocalFree (hMem=0x660530) returned 0x0 [0031.772] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x38 [0031.772] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.772] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat", lpDst=0x660530, nSize=0x38 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat") returned 0x37 [0031.772] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FlashFXP\\4\\History.dat" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\flashfxp\\4\\history.dat"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.772] LocalFree (hMem=0x660530) returned 0x0 [0031.772] LocalFree (hMem=0x661da8) returned 0x0 [0031.772] LocalFree (hMem=0x66eb30) returned 0x0 [0031.772] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.772] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.772] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.772] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.772] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.772] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.773] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.773] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.773] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.773] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.773] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x6, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.773] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.773] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.774] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.775] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f640 | out: phkResult=0x19f640*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19f614 | out: phkResult=0x19f614*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19f5e8 | out: phkResult=0x19f5e8*=0x0) returned 0x2 [0031.776] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.776] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\FileZilla Client", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.776] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.776] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.776] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.776] lstrlenA (lpString="\\FileZilla") returned 10 [0031.776] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x660530 [0031.777] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.777] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" [0031.777] LocalFree (hMem=0x66eb30) returned 0x0 [0031.777] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned 43 [0031.777] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663050 [0031.777] lstrcpyA (in: lpString1=0x663050, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" [0031.777] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml" [0031.777] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x663370 [0031.777] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpDst=0x663370, nSize=0x3d | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml") returned 0x3c [0031.777] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.777] LocalFree (hMem=0x663370) returned 0x0 [0031.777] LocalFree (hMem=0x663050) returned 0x0 [0031.777] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned 43 [0031.777] lstrlenA (lpString="\\recentservers.xml") returned 18 [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x6639b0 [0031.777] lstrcpyA (in: lpString1=0x6639b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" [0031.777] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml" [0031.777] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x662ec0 [0031.777] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpDst=0x662ec0, nSize=0x3f | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml") returned 0x3e [0031.777] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.777] LocalFree (hMem=0x662ec0) returned 0x0 [0031.777] LocalFree (hMem=0x6639b0) returned 0x0 [0031.777] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned 43 [0031.777] lstrlenA (lpString="\\filezilla.xml") returned 14 [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x662ec0 [0031.777] lstrcpyA (in: lpString1=0x662ec0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla" [0031.777] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml" [0031.777] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0031.777] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663370 [0031.778] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml", lpDst=0x663370, nSize=0x3b | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml") returned 0x3a [0031.778] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.778] LocalFree (hMem=0x663370) returned 0x0 [0031.778] LocalFree (hMem=0x662ec0) returned 0x0 [0031.778] LocalFree (hMem=0x660530) returned 0x0 [0031.778] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.778] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.778] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.778] lstrlenA (lpString="\\FileZilla") returned 10 [0031.778] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6658b8 [0031.778] lstrcpyA (in: lpString1=0x6658b8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.778] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0031.778] LocalFree (hMem=0x66eb30) returned 0x0 [0031.778] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0031.778] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0031.778] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.778] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0031.778] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned="C:\\ProgramData\\FileZilla\\sitemanager.xml" [0031.778] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2a [0031.778] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x661da8 [0031.778] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\sitemanager.xml", lpDst=0x661da8, nSize=0x2a | out: lpDst="C:\\ProgramData\\FileZilla\\sitemanager.xml") returned 0x29 [0031.778] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\sitemanager.xml" (normalized: "c:\\programdata\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.778] LocalFree (hMem=0x661da8) returned 0x0 [0031.778] LocalFree (hMem=0x660530) returned 0x0 [0031.778] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0031.778] lstrlenA (lpString="\\recentservers.xml") returned 18 [0031.778] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.778] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0031.778] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\recentservers.xml") returned="C:\\ProgramData\\FileZilla\\recentservers.xml" [0031.778] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2c [0031.778] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x661da8 [0031.778] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\recentservers.xml", lpDst=0x661da8, nSize=0x2c | out: lpDst="C:\\ProgramData\\FileZilla\\recentservers.xml") returned 0x2b [0031.778] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\recentservers.xml" (normalized: "c:\\programdata\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.779] LocalFree (hMem=0x661da8) returned 0x0 [0031.779] LocalFree (hMem=0x660530) returned 0x0 [0031.779] lstrlenA (lpString="C:\\ProgramData\\FileZilla") returned 24 [0031.779] lstrlenA (lpString="\\filezilla.xml") returned 14 [0031.779] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x660530 [0031.779] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\FileZilla" | out: lpString1="C:\\ProgramData\\FileZilla") returned="C:\\ProgramData\\FileZilla" [0031.779] lstrcatA (in: lpString1="C:\\ProgramData\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\ProgramData\\FileZilla\\filezilla.xml") returned="C:\\ProgramData\\FileZilla\\filezilla.xml" [0031.779] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x28 [0031.779] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x661da8 [0031.779] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\FileZilla\\filezilla.xml", lpDst=0x661da8, nSize=0x28 | out: lpDst="C:\\ProgramData\\FileZilla\\filezilla.xml") returned 0x27 [0031.779] CreateFileA (lpFileName="C:\\ProgramData\\FileZilla\\filezilla.xml" (normalized: "c:\\programdata\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.779] LocalFree (hMem=0x661da8) returned 0x0 [0031.779] LocalFree (hMem=0x660530) returned 0x0 [0031.779] LocalFree (hMem=0x6658b8) returned 0x0 [0031.779] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.779] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.779] lstrlenA (lpString="\\FileZilla") returned 10 [0031.779] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x660530 [0031.779] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.779] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" [0031.779] LocalFree (hMem=0x66eb30) returned 0x0 [0031.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned 41 [0031.779] lstrlenA (lpString="\\sitemanager.xml") returned 16 [0031.779] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x6638e8 [0031.780] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" [0031.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla", lpString2="\\sitemanager.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml" [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0031.780] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x6639b0 [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml", lpDst=0x6639b0, nSize=0x3b | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml") returned 0x3a [0031.780] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\filezilla\\sitemanager.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.780] LocalFree (hMem=0x6639b0) returned 0x0 [0031.780] LocalFree (hMem=0x6638e8) returned 0x0 [0031.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned 41 [0031.780] lstrlenA (lpString="\\recentservers.xml") returned 18 [0031.780] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663a78 [0031.780] lstrcpyA (in: lpString1=0x663a78, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" [0031.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla", lpString2="\\recentservers.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml" [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0031.780] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x663758 [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml", lpDst=0x663758, nSize=0x3d | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml") returned 0x3c [0031.780] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.780] LocalFree (hMem=0x663758) returned 0x0 [0031.780] LocalFree (hMem=0x663a78) returned 0x0 [0031.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned 41 [0031.780] lstrlenA (lpString="\\filezilla.xml") returned 14 [0031.780] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x661da8 [0031.780] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla" [0031.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla", lpString2="\\filezilla.xml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml" [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x39 [0031.780] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663a78 [0031.780] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml", lpDst=0x663a78, nSize=0x39 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml") returned 0x38 [0031.780] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FileZilla\\filezilla.xml" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\filezilla\\filezilla.xml"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.780] LocalFree (hMem=0x663a78) returned 0x0 [0031.780] LocalFree (hMem=0x661da8) returned 0x0 [0031.780] LocalFree (hMem=0x660530) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.781] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.781] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.781] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.781] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.781] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.781] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x7, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.781] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.781] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FTP Navigator") returned 0x0 [0031.781] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FTP Commander") returned 0x0 [0031.781] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FTP Navigator") returned 0x0 [0031.781] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FTP Commander") returned 0x0 [0031.781] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FTP Navigator") returned 0x0 [0031.781] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FTP Commander") returned 0x0 [0031.781] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FTP Navigator") returned 0x0 [0031.781] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FTP Commander") returned 0x0 [0031.781] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FTP Commander") returned 0x0 [0031.782] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FTP Navigator") returned 0x0 [0031.782] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FTP Commander") returned 0x0 [0031.783] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FTP Navigator") returned 0x0 [0031.783] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FTP Commander") returned 0x0 [0031.783] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.799] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.800] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.800] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.800] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.800] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.800] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.800] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.800] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.800] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.800] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x8, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.800] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Main", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.800] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Main", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP\\Bullet Proof FTP\\Options", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BulletProof Software\\BulletProof FTP Client\\Options", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.801] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\BPFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.801] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.801] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.801] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.801] lstrlenA (lpString="\\BulletProof Software") returned 21 [0031.801] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.801] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.801] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software" [0031.801] LocalFree (hMem=0x66eb30) returned 0x0 [0031.801] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software") returned 52 [0031.801] lstrlenA (lpString="\\*.*") returned 4 [0031.801] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6639b0 [0031.801] lstrcpyA (in: lpString1=0x6639b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software" [0031.801] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*" [0031.801] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.801] LocalFree (hMem=0x6639b0) returned 0x0 [0031.801] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software") returned 52 [0031.801] lstrlenA (lpString="\\*.*") returned 4 [0031.801] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663438 [0031.801] lstrcpyA (in: lpString1=0x663438, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software" [0031.801] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*" [0031.802] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.802] LocalFree (hMem=0x663438) returned 0x0 [0031.802] LocalFree (hMem=0x660530) returned 0x0 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.802] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.802] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.802] lstrlenA (lpString="\\BulletProof Software") returned 21 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x660530 [0031.802] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.802] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software" [0031.802] LocalFree (hMem=0x66eb30) returned 0x0 [0031.802] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software") returned 54 [0031.802] lstrlenA (lpString="\\*.*") returned 4 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662f88 [0031.802] lstrcpyA (in: lpString1=0x662f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software" [0031.802] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*" [0031.802] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.802] LocalFree (hMem=0x662f88) returned 0x0 [0031.802] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software") returned 54 [0031.802] lstrlenA (lpString="\\*.*") returned 4 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662c68 [0031.802] lstrcpyA (in: lpString1=0x662c68, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software" [0031.802] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*" [0031.802] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.802] LocalFree (hMem=0x662c68) returned 0x0 [0031.802] LocalFree (hMem=0x660530) returned 0x0 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.802] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.802] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.802] lstrlenA (lpString="\\BulletProof Software") returned 21 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.802] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.802] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0031.802] LocalFree (hMem=0x66eb30) returned 0x0 [0031.802] lstrlenA (lpString="C:\\ProgramData\\BulletProof Software") returned 35 [0031.802] lstrlenA (lpString="\\*.*") returned 4 [0031.802] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x661da8 [0031.802] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0031.803] lstrcatA (in: lpString1="C:\\ProgramData\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BulletProof Software\\*.*") returned="C:\\ProgramData\\BulletProof Software\\*.*" [0031.803] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.803] LocalFree (hMem=0x661da8) returned 0x0 [0031.803] lstrlenA (lpString="C:\\ProgramData\\BulletProof Software") returned 35 [0031.803] lstrlenA (lpString="\\*.*") returned 4 [0031.803] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x661da8 [0031.803] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\BulletProof Software" | out: lpString1="C:\\ProgramData\\BulletProof Software") returned="C:\\ProgramData\\BulletProof Software" [0031.803] lstrcatA (in: lpString1="C:\\ProgramData\\BulletProof Software", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BulletProof Software\\*.*") returned="C:\\ProgramData\\BulletProof Software\\*.*" [0031.803] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BulletProof Software\\*.*", lpFindFileData=0x19fd4e | out: lpFindFileData=0x19fd4e) returned 0xffffffff [0031.803] LocalFree (hMem=0x661da8) returned 0x0 [0031.803] LocalFree (hMem=0x660530) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.803] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.803] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.803] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.803] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.803] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.803] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x9, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.803] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.803] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.803] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.803] lstrlenA (lpString="\\SmartFTP") returned 9 [0031.803] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.803] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.804] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" [0031.804] LocalFree (hMem=0x66eb30) returned 0x0 [0031.804] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned 42 [0031.804] lstrlenA (lpString="\\*.*") returned 4 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.804] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" [0031.804] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*" [0031.804] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.804] LocalFree (hMem=0x661da8) returned 0x0 [0031.804] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned 42 [0031.804] lstrlenA (lpString="\\*.*") returned 4 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.804] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" [0031.804] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*" [0031.804] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.804] LocalFree (hMem=0x661da8) returned 0x0 [0031.804] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned 42 [0031.804] lstrlenA (lpString="\\*.*") returned 4 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.804] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP" [0031.804] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*" [0031.804] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SmartFTP\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.804] LocalFree (hMem=0x661da8) returned 0x0 [0031.804] LocalFree (hMem=0x660530) returned 0x0 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.804] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.804] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.804] lstrlenA (lpString="\\SmartFTP") returned 9 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e690 [0031.804] lstrcpyA (in: lpString1=0x66e690, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.804] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0031.804] LocalFree (hMem=0x66eb30) returned 0x0 [0031.804] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0031.804] lstrlenA (lpString="\\*.*") returned 4 [0031.804] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x665378 [0031.804] lstrcpyA (in: lpString1=0x665378, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0031.804] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0031.804] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.805] LocalFree (hMem=0x665378) returned 0x0 [0031.805] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0031.805] lstrlenA (lpString="\\*.*") returned 4 [0031.805] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x665378 [0031.805] lstrcpyA (in: lpString1=0x665378, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0031.805] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0031.805] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.805] LocalFree (hMem=0x665378) returned 0x0 [0031.805] lstrlenA (lpString="C:\\ProgramData\\SmartFTP") returned 23 [0031.805] lstrlenA (lpString="\\*.*") returned 4 [0031.805] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x6652d0 [0031.805] lstrcpyA (in: lpString1=0x6652d0, lpString2="C:\\ProgramData\\SmartFTP" | out: lpString1="C:\\ProgramData\\SmartFTP") returned="C:\\ProgramData\\SmartFTP" [0031.805] lstrcatA (in: lpString1="C:\\ProgramData\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SmartFTP\\*.*") returned="C:\\ProgramData\\SmartFTP\\*.*" [0031.805] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SmartFTP\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.805] LocalFree (hMem=0x6652d0) returned 0x0 [0031.805] LocalFree (hMem=0x66e690) returned 0x0 [0031.805] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.805] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.805] lstrlenA (lpString="\\SmartFTP") returned 9 [0031.805] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.805] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.805] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" [0031.805] LocalFree (hMem=0x66eb30) returned 0x0 [0031.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned 40 [0031.805] lstrlenA (lpString="\\*.*") returned 4 [0031.805] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.805] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" [0031.805] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*" [0031.805] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.805] LocalFree (hMem=0x661da8) returned 0x0 [0031.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned 40 [0031.806] lstrlenA (lpString="\\*.*") returned 4 [0031.806] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.806] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" [0031.806] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*" [0031.806] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.806] LocalFree (hMem=0x661da8) returned 0x0 [0031.806] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned 40 [0031.806] lstrlenA (lpString="\\*.*") returned 4 [0031.806] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.806] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP" [0031.806] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*" [0031.806] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SmartFTP\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.806] LocalFree (hMem=0x661da8) returned 0x0 [0031.806] LocalFree (hMem=0x660530) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.806] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.806] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.806] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.806] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.806] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.806] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0xa, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.806] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.807] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0031.807] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0031.807] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0031.807] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0031.807] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0031.807] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0031.807] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.807] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.807] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.807] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.807] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.807] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.807] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" [0031.807] LocalFree (hMem=0x66eb30) returned 0x0 [0031.807] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned 42 [0031.807] lstrlenA (lpString="\\*.*") returned 4 [0031.807] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.807] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" [0031.807] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*" [0031.807] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.807] LocalFree (hMem=0x661da8) returned 0x0 [0031.807] LocalFree (hMem=0x660530) returned 0x0 [0031.807] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.807] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.807] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.807] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.807] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e410 [0031.807] lstrcpyA (in: lpString1=0x66e410, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.807] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\TurboFTP" | out: lpString1="C:\\ProgramData\\TurboFTP") returned="C:\\ProgramData\\TurboFTP" [0031.808] LocalFree (hMem=0x66eb30) returned 0x0 [0031.808] lstrlenA (lpString="C:\\ProgramData\\TurboFTP") returned 23 [0031.808] lstrlenA (lpString="\\*.*") returned 4 [0031.808] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x663fc8 [0031.808] lstrcpyA (in: lpString1=0x663fc8, lpString2="C:\\ProgramData\\TurboFTP" | out: lpString1="C:\\ProgramData\\TurboFTP") returned="C:\\ProgramData\\TurboFTP" [0031.808] lstrcatA (in: lpString1="C:\\ProgramData\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\TurboFTP\\*.*") returned="C:\\ProgramData\\TurboFTP\\*.*" [0031.808] FindFirstFileA (in: lpFileName="C:\\ProgramData\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.808] LocalFree (hMem=0x663fc8) returned 0x0 [0031.808] LocalFree (hMem=0x66e410) returned 0x0 [0031.808] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.808] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.808] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.808] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.808] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.808] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.808] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" [0031.808] LocalFree (hMem=0x66eb30) returned 0x0 [0031.808] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned 40 [0031.808] lstrlenA (lpString="\\*.*") returned 4 [0031.808] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.808] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" [0031.808] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*" [0031.808] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.808] LocalFree (hMem=0x661da8) returned 0x0 [0031.808] LocalFree (hMem=0x660530) returned 0x0 [0031.808] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0031.808] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0031.808] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0031.808] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0031.808] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0031.809] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\TurboFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.809] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.809] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.809] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.809] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.809] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" [0031.809] LocalFree (hMem=0x66eb30) returned 0x0 [0031.809] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned 42 [0031.809] lstrlenA (lpString="\\*.*") returned 4 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.809] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP" [0031.809] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*" [0031.809] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.809] LocalFree (hMem=0x661da8) returned 0x0 [0031.809] LocalFree (hMem=0x660530) returned 0x0 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.809] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.809] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.809] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66dbf0 [0031.809] lstrcpyA (in: lpString1=0x66dbf0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.809] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\TurboFTP" | out: lpString1="C:\\ProgramData\\TurboFTP") returned="C:\\ProgramData\\TurboFTP" [0031.809] LocalFree (hMem=0x66eb30) returned 0x0 [0031.809] lstrlenA (lpString="C:\\ProgramData\\TurboFTP") returned 23 [0031.809] lstrlenA (lpString="\\*.*") returned 4 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x665a08 [0031.809] lstrcpyA (in: lpString1=0x665a08, lpString2="C:\\ProgramData\\TurboFTP" | out: lpString1="C:\\ProgramData\\TurboFTP") returned="C:\\ProgramData\\TurboFTP" [0031.809] lstrcatA (in: lpString1="C:\\ProgramData\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\TurboFTP\\*.*") returned="C:\\ProgramData\\TurboFTP\\*.*" [0031.809] FindFirstFileA (in: lpFileName="C:\\ProgramData\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.809] LocalFree (hMem=0x665a08) returned 0x0 [0031.809] LocalFree (hMem=0x66dbf0) returned 0x0 [0031.809] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.809] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.810] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.810] lstrlenA (lpString="\\TurboFTP") returned 9 [0031.810] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.810] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.810] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" [0031.810] LocalFree (hMem=0x66eb30) returned 0x0 [0031.810] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned 40 [0031.810] lstrlenA (lpString="\\*.*") returned 4 [0031.810] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.810] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP" [0031.810] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*" [0031.810] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TurboFTP\\*.*", lpFindFileData=0x19fd26 | out: lpFindFileData=0x19fd26) returned 0xffffffff [0031.810] LocalFree (hMem=0x661da8) returned 0x0 [0031.810] LocalFree (hMem=0x660530) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.810] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.810] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.810] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.810] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0031.810] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.810] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0xb, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0031.810] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0031.810] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea8 | out: phkResult=0x19fea8*=0x0) returned 0x2 [0031.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe7c | out: phkResult=0x19fe7c*=0x0) returned 0x2 [0031.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe50 | out: phkResult=0x19fe50*=0x0) returned 0x2 [0031.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea8 | out: phkResult=0x19fea8*=0x0) returned 0x2 [0031.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe7c | out: phkResult=0x19fe7c*=0x0) returned 0x2 [0031.811] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe50 | out: phkResult=0x19fe50*=0x0) returned 0x2 [0031.811] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Sota\\FFFTP\\Options", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.811] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.811] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.811] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.811] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.811] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.811] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0xc, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.811] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.812] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\CoffeeCup Software\\Internet\\Profiles", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.812] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0xd, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.812] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FTPWare\\COREFTP\\Sites", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.812] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.812] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.813] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.813] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.813] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.813] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.813] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.813] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.813] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.813] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0xe, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.813] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.813] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.813] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.813] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.813] lstrlenA (lpString="\\FTP Explorer") returned 13 [0031.813] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x660530 [0031.813] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.813] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FTP Explorer" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer" [0031.813] LocalFree (hMem=0x66eb30) returned 0x0 [0031.813] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer") returned 46 [0031.813] lstrlenA (lpString="\\*.*") returned 4 [0031.813] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x661da8 [0031.813] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer" [0031.813] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer\\*.*" [0031.813] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTP Explorer\\*.*", lpFindFileData=0x19fd32 | out: lpFindFileData=0x19fd32) returned 0xffffffff [0031.813] LocalFree (hMem=0x661da8) returned 0x0 [0031.813] LocalFree (hMem=0x660530) returned 0x0 [0031.813] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.814] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.814] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.814] lstrlenA (lpString="\\FTP Explorer") returned 13 [0031.814] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x6648f8 [0031.814] lstrcpyA (in: lpString1=0x6648f8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.814] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FTP Explorer" | out: lpString1="C:\\ProgramData\\FTP Explorer") returned="C:\\ProgramData\\FTP Explorer" [0031.814] LocalFree (hMem=0x66eb30) returned 0x0 [0031.814] lstrlenA (lpString="C:\\ProgramData\\FTP Explorer") returned 27 [0031.814] lstrlenA (lpString="\\*.*") returned 4 [0031.814] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x664508 [0031.814] lstrcpyA (in: lpString1=0x664508, lpString2="C:\\ProgramData\\FTP Explorer" | out: lpString1="C:\\ProgramData\\FTP Explorer") returned="C:\\ProgramData\\FTP Explorer" [0031.814] lstrcatA (in: lpString1="C:\\ProgramData\\FTP Explorer", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\FTP Explorer\\*.*") returned="C:\\ProgramData\\FTP Explorer\\*.*" [0031.814] FindFirstFileA (in: lpFileName="C:\\ProgramData\\FTP Explorer\\*.*", lpFindFileData=0x19fd32 | out: lpFindFileData=0x19fd32) returned 0xffffffff [0031.814] LocalFree (hMem=0x664508) returned 0x0 [0031.814] LocalFree (hMem=0x6648f8) returned 0x0 [0031.814] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.814] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.814] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.814] lstrlenA (lpString="\\FTP Explorer") returned 13 [0031.814] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.814] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.814] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FTP Explorer" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer" [0031.814] LocalFree (hMem=0x66eb30) returned 0x0 [0031.814] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer") returned 44 [0031.814] lstrlenA (lpString="\\*.*") returned 4 [0031.814] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x661da8 [0031.814] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer" [0031.814] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer\\*.*" [0031.814] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTP Explorer\\*.*", lpFindFileData=0x19fd32 | out: lpFindFileData=0x19fd32) returned 0xffffffff [0031.814] LocalFree (hMem=0x661da8) returned 0x0 [0031.814] LocalFree (hMem=0x660530) returned 0x0 [0031.814] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FTP Explorer\\FTP Explorer\\Workspace\\MFCToolBar-224", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea4 | out: phkResult=0x19fea4*=0x0) returned 0x2 [0031.814] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FTP Explorer\\FTP Explorer\\Workspace\\MFCToolBar-224", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe78 | out: phkResult=0x19fe78*=0x0) returned 0x2 [0031.815] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FTP Explorer\\FTP Explorer\\Workspace\\MFCToolBar-224", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe4c | out: phkResult=0x19fe4c*=0x0) returned 0x2 [0031.815] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FTP Explorer\\Profiles", phkResult=0x19fec8 | out: phkResult=0x19fec8*=0x0) returned 0x2 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.815] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.815] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.815] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.815] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.815] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.815] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0xf, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.815] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.815] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.815] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.815] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.815] lstrlenA (lpString="\\Frigate3") returned 9 [0031.815] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.815] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.815] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Frigate3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3" [0031.816] LocalFree (hMem=0x66eb30) returned 0x0 [0031.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3") returned 42 [0031.816] lstrlenA (lpString="\\*.*") returned 4 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.816] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3" [0031.816] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3\\*.*" [0031.816] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Frigate3\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.816] LocalFree (hMem=0x661da8) returned 0x0 [0031.816] LocalFree (hMem=0x660530) returned 0x0 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.816] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.816] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.816] lstrlenA (lpString="\\Frigate3") returned 9 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66df10 [0031.816] lstrcpyA (in: lpString1=0x66df10, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.816] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Frigate3" | out: lpString1="C:\\ProgramData\\Frigate3") returned="C:\\ProgramData\\Frigate3" [0031.816] LocalFree (hMem=0x66eb30) returned 0x0 [0031.816] lstrlenA (lpString="C:\\ProgramData\\Frigate3") returned 23 [0031.816] lstrlenA (lpString="\\*.*") returned 4 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x665ab0 [0031.816] lstrcpyA (in: lpString1=0x665ab0, lpString2="C:\\ProgramData\\Frigate3" | out: lpString1="C:\\ProgramData\\Frigate3") returned="C:\\ProgramData\\Frigate3" [0031.816] lstrcatA (in: lpString1="C:\\ProgramData\\Frigate3", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Frigate3\\*.*") returned="C:\\ProgramData\\Frigate3\\*.*" [0031.816] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Frigate3\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.816] LocalFree (hMem=0x665ab0) returned 0x0 [0031.816] LocalFree (hMem=0x66df10) returned 0x0 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.816] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.816] lstrlenA (lpString="\\Frigate3") returned 9 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.816] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.816] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Frigate3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3" [0031.816] LocalFree (hMem=0x66eb30) returned 0x0 [0031.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3") returned 40 [0031.816] lstrlenA (lpString="\\*.*") returned 4 [0031.816] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.816] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3" [0031.817] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3\\*.*" [0031.817] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Frigate3\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.817] LocalFree (hMem=0x661da8) returned 0x0 [0031.817] LocalFree (hMem=0x660530) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.817] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.817] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.817] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.817] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.817] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.817] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x10, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.817] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.817] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.817] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.817] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.817] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0031.817] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x6638e8 [0031.817] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.818] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0031.818] LocalFree (hMem=0x66eb30) returned 0x0 [0031.818] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned 57 [0031.818] lstrlenA (lpString="\\*.*") returned 4 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x663370 [0031.818] lstrcpyA (in: lpString1=0x663370, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions" [0031.818] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*" [0031.818] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.818] LocalFree (hMem=0x663370) returned 0x0 [0031.818] LocalFree (hMem=0x6638e8) returned 0x0 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.818] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.818] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.818] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x660530 [0031.818] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.818] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0031.818] LocalFree (hMem=0x66eb30) returned 0x0 [0031.818] lstrlenA (lpString="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned 38 [0031.818] lstrlenA (lpString="\\*.*") returned 4 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x661da8 [0031.818] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions" [0031.818] lstrcatA (in: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*" [0031.818] FindFirstFileA (in: lpFileName="C:\\ProgramData\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.818] LocalFree (hMem=0x661da8) returned 0x0 [0031.818] LocalFree (hMem=0x660530) returned 0x0 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.818] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.818] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.818] lstrlenA (lpString="\\VanDyke\\Config\\Sessions") returned 24 [0031.818] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.818] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.818] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions" [0031.818] LocalFree (hMem=0x66eb30) returned 0x0 [0031.818] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions") returned 55 [0031.818] lstrlenA (lpString="\\*.*") returned 4 [0031.819] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663758 [0031.819] lstrcpyA (in: lpString1=0x663758, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions" [0031.819] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*" [0031.819] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VanDyke\\Config\\Sessions\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.819] LocalFree (hMem=0x663758) returned 0x0 [0031.819] LocalFree (hMem=0x660530) returned 0x0 [0031.819] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.819] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.819] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\VanDyke\\SecureFX", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.819] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.819] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.819] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.819] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.819] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.819] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x11, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.819] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.819] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="UltraFXP") returned 0x0 [0031.820] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="UltraFXP") returned 0x0 [0031.820] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.820] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.820] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.820] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.820] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.820] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.821] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.821] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.821] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.821] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.821] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x12, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.821] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.821] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.821] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.821] lstrlenA (lpString="\\FTPRush") returned 8 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x660530 [0031.821] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.821] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FTPRush" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush" [0031.821] LocalFree (hMem=0x66eb30) returned 0x0 [0031.821] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush") returned 41 [0031.821] lstrlenA (lpString="\\*.*") returned 4 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x661da8 [0031.821] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush" [0031.821] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush\\*.*" [0031.821] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPRush\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.821] LocalFree (hMem=0x661da8) returned 0x0 [0031.821] LocalFree (hMem=0x660530) returned 0x0 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.821] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.821] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.821] lstrlenA (lpString="\\FTPRush") returned 8 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66df10 [0031.821] lstrcpyA (in: lpString1=0x66df10, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.821] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FTPRush" | out: lpString1="C:\\ProgramData\\FTPRush") returned="C:\\ProgramData\\FTPRush" [0031.821] LocalFree (hMem=0x66eb30) returned 0x0 [0031.821] lstrlenA (lpString="C:\\ProgramData\\FTPRush") returned 22 [0031.821] lstrlenA (lpString="\\*.*") returned 4 [0031.821] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x665420 [0031.822] lstrcpyA (in: lpString1=0x665420, lpString2="C:\\ProgramData\\FTPRush" | out: lpString1="C:\\ProgramData\\FTPRush") returned="C:\\ProgramData\\FTPRush" [0031.822] lstrcatA (in: lpString1="C:\\ProgramData\\FTPRush", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\FTPRush\\*.*") returned="C:\\ProgramData\\FTPRush\\*.*" [0031.822] FindFirstFileA (in: lpFileName="C:\\ProgramData\\FTPRush\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.822] LocalFree (hMem=0x665420) returned 0x0 [0031.822] LocalFree (hMem=0x66df10) returned 0x0 [0031.822] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.822] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.822] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.822] lstrlenA (lpString="\\FTPRush") returned 8 [0031.822] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x660530 [0031.822] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.822] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FTPRush" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush" [0031.822] LocalFree (hMem=0x66eb30) returned 0x0 [0031.822] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush") returned 39 [0031.822] lstrlenA (lpString="\\*.*") returned 4 [0031.822] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x661da8 [0031.822] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush" [0031.822] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush\\*.*" [0031.822] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPRush\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.822] LocalFree (hMem=0x661da8) returned 0x0 [0031.822] LocalFree (hMem=0x660530) returned 0x0 [0031.822] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.822] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.822] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.822] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.822] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.822] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.822] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x13, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.823] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Cryer\\WebSitePublisher", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.823] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.823] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x14, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.823] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.824] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.824] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.824] lstrlenA (lpString="\\BitKinex") returned 9 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.824] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.824] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\BitKinex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex" [0031.824] LocalFree (hMem=0x66eb30) returned 0x0 [0031.824] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex") returned 42 [0031.824] lstrlenA (lpString="\\*.*") returned 4 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.824] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex" [0031.824] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex\\*.*" [0031.824] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BitKinex\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.824] LocalFree (hMem=0x661da8) returned 0x0 [0031.824] LocalFree (hMem=0x660530) returned 0x0 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.824] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.824] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.824] lstrlenA (lpString="\\BitKinex") returned 9 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e9b0 [0031.824] lstrcpyA (in: lpString1=0x66e9b0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.824] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BitKinex" | out: lpString1="C:\\ProgramData\\BitKinex") returned="C:\\ProgramData\\BitKinex" [0031.824] LocalFree (hMem=0x66eb30) returned 0x0 [0031.824] lstrlenA (lpString="C:\\ProgramData\\BitKinex") returned 23 [0031.824] lstrlenA (lpString="\\*.*") returned 4 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x6652d0 [0031.824] lstrcpyA (in: lpString1=0x6652d0, lpString2="C:\\ProgramData\\BitKinex" | out: lpString1="C:\\ProgramData\\BitKinex") returned="C:\\ProgramData\\BitKinex" [0031.824] lstrcatA (in: lpString1="C:\\ProgramData\\BitKinex", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BitKinex\\*.*") returned="C:\\ProgramData\\BitKinex\\*.*" [0031.824] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BitKinex\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.824] LocalFree (hMem=0x6652d0) returned 0x0 [0031.824] LocalFree (hMem=0x66e9b0) returned 0x0 [0031.824] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.824] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.824] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.824] lstrlenA (lpString="\\BitKinex") returned 9 [0031.825] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.825] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.825] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\BitKinex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex" [0031.825] LocalFree (hMem=0x66eb30) returned 0x0 [0031.825] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex") returned 40 [0031.825] lstrlenA (lpString="\\*.*") returned 4 [0031.825] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.825] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex" [0031.825] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex\\*.*" [0031.825] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BitKinex\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.825] LocalFree (hMem=0x661da8) returned 0x0 [0031.825] LocalFree (hMem=0x660530) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.825] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.825] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.825] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.825] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.825] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.825] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x15, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.826] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.826] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\ExpanDrive\\Sessions", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0031.826] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ExpanDrive", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.826] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ExpanDrive", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.826] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ExpanDrive", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.826] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.826] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.826] lstrlenA (lpString="\\ExpanDrive") returned 11 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x660530 [0031.826] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.826] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\ExpanDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive" [0031.826] LocalFree (hMem=0x66eb30) returned 0x0 [0031.826] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive") returned 44 [0031.826] lstrlenA (lpString="\\drives.js") returned 10 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.826] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive" [0031.826] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive", lpString2="\\drives.js" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive\\drives.js") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive\\drives.js" [0031.826] LocalFree (hMem=0x660530) returned 0x0 [0031.826] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ExpanDrive\\drives.js" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\expandrive\\drives.js"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.826] LocalFree (hMem=0x661da8) returned 0x0 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.826] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.826] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.826] lstrlenA (lpString="\\ExpanDrive") returned 11 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.826] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.826] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\ExpanDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive" [0031.826] LocalFree (hMem=0x66eb30) returned 0x0 [0031.826] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive") returned 42 [0031.826] lstrlenA (lpString="\\drives.js") returned 10 [0031.826] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.827] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive" [0031.827] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive", lpString2="\\drives.js" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive\\drives.js") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive\\drives.js" [0031.827] LocalFree (hMem=0x660530) returned 0x0 [0031.827] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ExpanDrive\\drives.js" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\expandrive\\drives.js"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.827] LocalFree (hMem=0x661da8) returned 0x0 [0031.827] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.827] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.827] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.827] lstrlenA (lpString="\\ExpanDrive") returned 11 [0031.827] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6645b0 [0031.827] lstrcpyA (in: lpString1=0x6645b0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.827] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\ExpanDrive" | out: lpString1="C:\\ProgramData\\ExpanDrive") returned="C:\\ProgramData\\ExpanDrive" [0031.827] LocalFree (hMem=0x66eb30) returned 0x0 [0031.827] lstrlenA (lpString="C:\\ProgramData\\ExpanDrive") returned 25 [0031.827] lstrlenA (lpString="\\drives.js") returned 10 [0031.827] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.827] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\ExpanDrive" | out: lpString1="C:\\ProgramData\\ExpanDrive") returned="C:\\ProgramData\\ExpanDrive" [0031.827] lstrcatA (in: lpString1="C:\\ProgramData\\ExpanDrive", lpString2="\\drives.js" | out: lpString1="C:\\ProgramData\\ExpanDrive\\drives.js") returned="C:\\ProgramData\\ExpanDrive\\drives.js" [0031.827] LocalFree (hMem=0x6645b0) returned 0x0 [0031.827] CreateFileA (lpFileName="C:\\ProgramData\\ExpanDrive\\drives.js" (normalized: "c:\\programdata\\expandrive\\drives.js"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.827] LocalFree (hMem=0x660530) returned 0x0 [0031.827] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.827] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.827] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.827] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.827] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.827] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.828] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.828] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.828] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x16, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.828] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.828] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\NCH Software\\ClassicFTP\\FTPAccounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.828] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\NCH Software\\ClassicFTP\\FTPAccounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.828] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.828] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.828] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x17, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.829] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\NCH Software\\Fling\\Accounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.829] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\NCH Software\\Fling\\Accounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.829] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.829] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x18, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.829] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.829] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\FTPClient\\Sites", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.830] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\FTPClient\\Sites", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.830] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\SoftX.org\\FTPClient\\Sites", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.830] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\SoftX.org\\FTPClient\\Sites", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.830] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.830] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.830] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.830] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.830] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.830] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x19, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.830] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.830] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.830] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.830] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.831] lstrlenA (lpString="\\GPSoftware\\Directory Opus") returned 26 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x662c68 [0031.831] lstrcpyA (in: lpString1=0x662c68, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" [0031.831] LocalFree (hMem=0x66eb30) returned 0x0 [0031.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned 59 [0031.831] lstrlenA (lpString="\\*.*") returned 4 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x6638e8 [0031.831] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" [0031.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*" [0031.831] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.831] LocalFree (hMem=0x6638e8) returned 0x0 [0031.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned 59 [0031.831] lstrlenA (lpString="\\*.*") returned 4 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x662f88 [0031.831] lstrcpyA (in: lpString1=0x662f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" [0031.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*" [0031.831] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.831] LocalFree (hMem=0x662f88) returned 0x0 [0031.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned 59 [0031.831] lstrlenA (lpString="\\*.*") returned 4 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x662f88 [0031.831] lstrcpyA (in: lpString1=0x662f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus" [0031.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*" [0031.831] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.831] LocalFree (hMem=0x662f88) returned 0x0 [0031.831] LocalFree (hMem=0x662c68) returned 0x0 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.831] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.831] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.831] lstrlenA (lpString="\\GPSoftware\\Directory Opus") returned 26 [0031.831] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.831] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.831] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\GPSoftware\\Directory Opus" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus") returned="C:\\ProgramData\\GPSoftware\\Directory Opus" [0031.832] LocalFree (hMem=0x66eb30) returned 0x0 [0031.832] lstrlenA (lpString="C:\\ProgramData\\GPSoftware\\Directory Opus") returned 40 [0031.832] lstrlenA (lpString="\\*.*") returned 4 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.832] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\GPSoftware\\Directory Opus" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus") returned="C:\\ProgramData\\GPSoftware\\Directory Opus" [0031.832] lstrcatA (in: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*") returned="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*" [0031.832] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.832] LocalFree (hMem=0x661da8) returned 0x0 [0031.832] lstrlenA (lpString="C:\\ProgramData\\GPSoftware\\Directory Opus") returned 40 [0031.832] lstrlenA (lpString="\\*.*") returned 4 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.832] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\GPSoftware\\Directory Opus" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus") returned="C:\\ProgramData\\GPSoftware\\Directory Opus" [0031.832] lstrcatA (in: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*") returned="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*" [0031.832] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.832] LocalFree (hMem=0x661da8) returned 0x0 [0031.832] lstrlenA (lpString="C:\\ProgramData\\GPSoftware\\Directory Opus") returned 40 [0031.832] lstrlenA (lpString="\\*.*") returned 4 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.832] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\GPSoftware\\Directory Opus" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus") returned="C:\\ProgramData\\GPSoftware\\Directory Opus" [0031.832] lstrcatA (in: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*") returned="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*" [0031.832] FindFirstFileA (in: lpFileName="C:\\ProgramData\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.832] LocalFree (hMem=0x661da8) returned 0x0 [0031.832] LocalFree (hMem=0x660530) returned 0x0 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.832] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.832] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.832] lstrlenA (lpString="\\GPSoftware\\Directory Opus") returned 26 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x6635c8 [0031.832] lstrcpyA (in: lpString1=0x6635c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.832] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" [0031.832] LocalFree (hMem=0x66eb30) returned 0x0 [0031.832] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned 57 [0031.832] lstrlenA (lpString="\\*.*") returned 4 [0031.832] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x6631e0 [0031.832] lstrcpyA (in: lpString1=0x6631e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" [0031.833] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*" [0031.833] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.833] LocalFree (hMem=0x6631e0) returned 0x0 [0031.833] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned 57 [0031.833] lstrlenA (lpString="\\*.*") returned 4 [0031.833] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x663758 [0031.833] lstrcpyA (in: lpString1=0x663758, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" [0031.836] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*" [0031.836] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.836] LocalFree (hMem=0x663758) returned 0x0 [0031.837] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned 57 [0031.837] lstrlenA (lpString="\\*.*") returned 4 [0031.837] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x663500 [0031.837] lstrcpyA (in: lpString1=0x663500, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus" [0031.837] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*" [0031.837] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\GPSoftware\\Directory Opus\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.837] LocalFree (hMem=0x663500) returned 0x0 [0031.837] LocalFree (hMem=0x6635c8) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.837] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.837] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.837] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.837] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.837] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.837] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x1a, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.837] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.837] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.837] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.837] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.837] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.837] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.837] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.838] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs" [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x661da8 [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs", lpDst=0x661da8, nSize=0x36 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs") returned 0x35 [0031.838] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.838] LocalFree (hMem=0x661da8) returned 0x0 [0031.838] LocalFree (hMem=0x660530) returned 0x0 [0031.838] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.838] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x660530 [0031.838] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.838] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite" [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x39 [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663050 [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite", lpDst=0x663050, nSize=0x39 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite") returned 0x38 [0031.838] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.838] LocalFree (hMem=0x663050) returned 0x0 [0031.838] LocalFree (hMem=0x660530) returned 0x0 [0031.838] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.838] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663820 [0031.838] lstrcpyA (in: lpString1=0x663820, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.838] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs" [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x6632a8 [0031.838] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs", lpDst=0x6632a8, nSize=0x3c | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs") returned 0x3b [0031.838] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.838] LocalFree (hMem=0x6632a8) returned 0x0 [0031.838] LocalFree (hMem=0x663820) returned 0x0 [0031.838] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.838] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.838] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x6638e8 [0031.838] lstrcpyA (in: lpString1=0x6638e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.839] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite" [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0031.839] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x6639b0 [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite", lpDst=0x6639b0, nSize=0x3f | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite") returned 0x3e [0031.839] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.839] LocalFree (hMem=0x6639b0) returned 0x0 [0031.839] LocalFree (hMem=0x6638e8) returned 0x0 [0031.839] LocalFree (hMem=0x66eb30) returned 0x0 [0031.839] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.839] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.839] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.839] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.839] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x660530 [0031.839] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.839] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\ProgramData\\SharedSettings.ccs") returned="C:\\ProgramData\\SharedSettings.ccs" [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x23 [0031.839] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings.ccs", lpDst=0x661da8, nSize=0x23 | out: lpDst="C:\\ProgramData\\SharedSettings.ccs") returned 0x22 [0031.839] CreateFileA (lpFileName="C:\\ProgramData\\SharedSettings.ccs" (normalized: "c:\\programdata\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.839] LocalFree (hMem=0x661da8) returned 0x0 [0031.839] LocalFree (hMem=0x660530) returned 0x0 [0031.839] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.839] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.839] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x660530 [0031.839] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.839] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\ProgramData\\SharedSettings.sqlite") returned="C:\\ProgramData\\SharedSettings.sqlite" [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x26 [0031.839] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x661da8 [0031.839] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings.sqlite", lpDst=0x661da8, nSize=0x26 | out: lpDst="C:\\ProgramData\\SharedSettings.sqlite") returned 0x25 [0031.839] CreateFileA (lpFileName="C:\\ProgramData\\SharedSettings.sqlite" (normalized: "c:\\programdata\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.839] LocalFree (hMem=0x661da8) returned 0x0 [0031.839] LocalFree (hMem=0x660530) returned 0x0 [0031.839] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.840] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x660530 [0031.840] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.840] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\ProgramData\\SharedSettings_1_0_5.ccs") returned="C:\\ProgramData\\SharedSettings_1_0_5.ccs" [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x29 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x661da8 [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings_1_0_5.ccs", lpDst=0x661da8, nSize=0x29 | out: lpDst="C:\\ProgramData\\SharedSettings_1_0_5.ccs") returned 0x28 [0031.840] CreateFileA (lpFileName="C:\\ProgramData\\SharedSettings_1_0_5.ccs" (normalized: "c:\\programdata\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.840] LocalFree (hMem=0x661da8) returned 0x0 [0031.840] LocalFree (hMem=0x660530) returned 0x0 [0031.840] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.840] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.840] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.840] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\ProgramData\\SharedSettings_1_0_5.sqlite") returned="C:\\ProgramData\\SharedSettings_1_0_5.sqlite" [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2c [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x661da8 [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\SharedSettings_1_0_5.sqlite", lpDst=0x661da8, nSize=0x2c | out: lpDst="C:\\ProgramData\\SharedSettings_1_0_5.sqlite") returned 0x2b [0031.840] CreateFileA (lpFileName="C:\\ProgramData\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\programdata\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.840] LocalFree (hMem=0x661da8) returned 0x0 [0031.840] LocalFree (hMem=0x660530) returned 0x0 [0031.840] LocalFree (hMem=0x66eb30) returned 0x0 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.840] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.840] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.840] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x660530 [0031.840] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.840] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs" [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x34 [0031.840] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x661da8 [0031.840] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs", lpDst=0x661da8, nSize=0x34 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs") returned 0x33 [0031.840] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.840] LocalFree (hMem=0x661da8) returned 0x0 [0031.841] LocalFree (hMem=0x660530) returned 0x0 [0031.841] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.841] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x660530 [0031.841] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.841] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite" [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x37 [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite", lpDst=0x661da8, nSize=0x37 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite") returned 0x36 [0031.841] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.841] LocalFree (hMem=0x661da8) returned 0x0 [0031.841] LocalFree (hMem=0x660530) returned 0x0 [0031.841] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.841] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663820 [0031.841] lstrcpyA (in: lpString1=0x663820, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.841] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs" [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3a [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x662ec0 [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs", lpDst=0x662ec0, nSize=0x3a | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs") returned 0x39 [0031.841] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.841] LocalFree (hMem=0x662ec0) returned 0x0 [0031.841] LocalFree (hMem=0x663820) returned 0x0 [0031.841] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.841] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663438 [0031.841] lstrcpyA (in: lpString1=0x663438, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.841] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite" [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0031.841] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x662f88 [0031.841] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite", lpDst=0x662f88, nSize=0x3d | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite") returned 0x3c [0031.841] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.841] LocalFree (hMem=0x662f88) returned 0x0 [0031.842] LocalFree (hMem=0x663438) returned 0x0 [0031.842] LocalFree (hMem=0x66eb30) returned 0x0 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.842] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.842] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.842] lstrlenA (lpString="\\CoffeeCup Software") returned 19 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x660530 [0031.842] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.842] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" [0031.842] LocalFree (hMem=0x66eb30) returned 0x0 [0031.842] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned 52 [0031.842] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x65e2f8 [0031.842] lstrcpyA (in: lpString1=0x65e2f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" [0031.842] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs" [0031.842] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x49 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x661da8 [0031.842] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x661da8, nSize=0x49 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs") returned 0x48 [0031.842] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\coffeecup software\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.842] LocalFree (hMem=0x661da8) returned 0x0 [0031.842] LocalFree (hMem=0x65e2f8) returned 0x0 [0031.842] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned 52 [0031.842] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x661da8 [0031.842] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" [0031.842] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite" [0031.842] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4c [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x663c48 [0031.842] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x663c48, nSize=0x4c | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite") returned 0x4b [0031.842] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\coffeecup software\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.842] LocalFree (hMem=0x663c48) returned 0x0 [0031.842] LocalFree (hMem=0x661da8) returned 0x0 [0031.842] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned 52 [0031.842] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.842] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x661da8 [0031.842] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" [0031.843] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" [0031.843] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4f [0031.843] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x663c48 [0031.843] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x663c48, nSize=0x4f | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned 0x4e [0031.843] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\coffeecup software\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.843] LocalFree (hMem=0x663c48) returned 0x0 [0031.843] LocalFree (hMem=0x661da8) returned 0x0 [0031.843] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned 52 [0031.843] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.843] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x661da8 [0031.843] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software" [0031.843] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" [0031.843] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x52 [0031.843] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x663c48 [0031.843] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x663c48, nSize=0x52 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned 0x51 [0031.843] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\roaming\\coffeecup software\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.843] LocalFree (hMem=0x663c48) returned 0x0 [0031.843] LocalFree (hMem=0x661da8) returned 0x0 [0031.843] LocalFree (hMem=0x660530) returned 0x0 [0031.843] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.843] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.843] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.843] lstrlenA (lpString="\\CoffeeCup Software") returned 19 [0031.843] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x660530 [0031.843] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.843] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\CoffeeCup Software" | out: lpString1="C:\\ProgramData\\CoffeeCup Software") returned="C:\\ProgramData\\CoffeeCup Software" [0031.843] LocalFree (hMem=0x66eb30) returned 0x0 [0031.843] lstrlenA (lpString="C:\\ProgramData\\CoffeeCup Software") returned 33 [0031.843] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.843] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.843] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\CoffeeCup Software" | out: lpString1="C:\\ProgramData\\CoffeeCup Software") returned="C:\\ProgramData\\CoffeeCup Software" [0031.844] lstrcatA (in: lpString1="C:\\ProgramData\\CoffeeCup Software", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs") returned="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs" [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x36 [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x663c48 [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x663c48, nSize=0x36 | out: lpDst="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs") returned 0x35 [0031.844] CreateFileA (lpFileName="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.ccs" (normalized: "c:\\programdata\\coffeecup software\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.844] LocalFree (hMem=0x663c48) returned 0x0 [0031.844] LocalFree (hMem=0x661da8) returned 0x0 [0031.844] lstrlenA (lpString="C:\\ProgramData\\CoffeeCup Software") returned 33 [0031.844] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x661da8 [0031.844] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\CoffeeCup Software" | out: lpString1="C:\\ProgramData\\CoffeeCup Software") returned="C:\\ProgramData\\CoffeeCup Software" [0031.844] lstrcatA (in: lpString1="C:\\ProgramData\\CoffeeCup Software", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite") returned="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite" [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x39 [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6639b0 [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x6639b0, nSize=0x39 | out: lpDst="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite") returned 0x38 [0031.844] CreateFileA (lpFileName="C:\\ProgramData\\CoffeeCup Software\\SharedSettings.sqlite" (normalized: "c:\\programdata\\coffeecup software\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.844] LocalFree (hMem=0x6639b0) returned 0x0 [0031.844] LocalFree (hMem=0x661da8) returned 0x0 [0031.844] lstrlenA (lpString="C:\\ProgramData\\CoffeeCup Software") returned 33 [0031.844] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662f88 [0031.844] lstrcpyA (in: lpString1=0x662f88, lpString2="C:\\ProgramData\\CoffeeCup Software" | out: lpString1="C:\\ProgramData\\CoffeeCup Software") returned="C:\\ProgramData\\CoffeeCup Software" [0031.844] lstrcatA (in: lpString1="C:\\ProgramData\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3c [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x6632a8 [0031.844] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x6632a8, nSize=0x3c | out: lpDst="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned 0x3b [0031.844] CreateFileA (lpFileName="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" (normalized: "c:\\programdata\\coffeecup software\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.844] LocalFree (hMem=0x6632a8) returned 0x0 [0031.844] LocalFree (hMem=0x662f88) returned 0x0 [0031.844] lstrlenA (lpString="C:\\ProgramData\\CoffeeCup Software") returned 33 [0031.844] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.844] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662d30 [0031.844] lstrcpyA (in: lpString1=0x662d30, lpString2="C:\\ProgramData\\CoffeeCup Software" | out: lpString1="C:\\ProgramData\\CoffeeCup Software") returned="C:\\ProgramData\\CoffeeCup Software" [0031.844] lstrcatA (in: lpString1="C:\\ProgramData\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" [0031.845] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3f [0031.845] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x663758 [0031.845] ExpandEnvironmentStringsA (in: lpSrc="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x663758, nSize=0x3f | out: lpDst="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned 0x3e [0031.845] CreateFileA (lpFileName="C:\\ProgramData\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\programdata\\coffeecup software\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.845] LocalFree (hMem=0x663758) returned 0x0 [0031.845] LocalFree (hMem=0x662d30) returned 0x0 [0031.845] LocalFree (hMem=0x660530) returned 0x0 [0031.845] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.845] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.845] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.845] lstrlenA (lpString="\\CoffeeCup Software") returned 19 [0031.845] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x660530 [0031.845] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.845] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" [0031.845] LocalFree (hMem=0x66eb30) returned 0x0 [0031.845] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned 50 [0031.845] lstrlenA (lpString="\\SharedSettings.ccs") returned 19 [0031.845] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x65e158 [0031.845] lstrcpyA (in: lpString1=0x65e158, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" [0031.845] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software", lpString2="\\SharedSettings.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs" [0031.845] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x47 [0031.845] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x65e2f8 [0031.845] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs", lpDst=0x65e2f8, nSize=0x47 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs") returned 0x46 [0031.845] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\coffeecup software\\sharedsettings.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.846] LocalFree (hMem=0x65e2f8) returned 0x0 [0031.846] LocalFree (hMem=0x65e158) returned 0x0 [0031.846] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned 50 [0031.846] lstrlenA (lpString="\\SharedSettings.sqlite") returned 22 [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x661da8 [0031.846] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" [0031.846] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software", lpString2="\\SharedSettings.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite" [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4a [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x663c48 [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite", lpDst=0x663c48, nSize=0x4a | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite") returned 0x49 [0031.846] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\coffeecup software\\sharedsettings.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.846] LocalFree (hMem=0x663c48) returned 0x0 [0031.846] LocalFree (hMem=0x661da8) returned 0x0 [0031.846] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned 50 [0031.846] lstrlenA (lpString="\\SharedSettings_1_0_5.ccs") returned 25 [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x661da8 [0031.846] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" [0031.846] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.ccs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4d [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x663c48 [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs", lpDst=0x663c48, nSize=0x4d | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs") returned 0x4c [0031.846] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.ccs" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\coffeecup software\\sharedsettings_1_0_5.ccs"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.846] LocalFree (hMem=0x663c48) returned 0x0 [0031.846] LocalFree (hMem=0x661da8) returned 0x0 [0031.846] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned 50 [0031.846] lstrlenA (lpString="\\SharedSettings_1_0_5.sqlite") returned 28 [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x661da8 [0031.846] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software" [0031.846] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software", lpString2="\\SharedSettings_1_0_5.sqlite" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x50 [0031.846] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x663c48 [0031.846] ExpandEnvironmentStringsA (in: lpSrc="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite", lpDst=0x663c48, nSize=0x50 | out: lpDst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite") returned 0x4f [0031.846] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\CoffeeCup Software\\SharedSettings_1_0_5.sqlite" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\coffeecup software\\sharedsettings_1_0_5.sqlite"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.847] LocalFree (hMem=0x663c48) returned 0x0 [0031.847] LocalFree (hMem=0x661da8) returned 0x0 [0031.847] LocalFree (hMem=0x660530) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.847] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.847] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.847] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.847] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.847] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.847] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x1b, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.847] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.847] StrStrA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="unleap.exe") returned 0x0 [0031.847] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="leapftp") returned 0x0 [0031.847] StrStrA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="unleap.exe") returned 0x0 [0031.847] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="leapftp") returned 0x0 [0031.847] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.847] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="leapftp") returned 0x0 [0031.848] StrStrA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="unleap.exe") returned 0x0 [0031.848] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="leapftp") returned 0x0 [0031.848] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.848] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.848] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.848] lstrlenA (lpString="\\LeapWare\\LeapFTP") returned 17 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x660530 [0031.849] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.849] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP" [0031.849] LocalFree (hMem=0x66eb30) returned 0x0 [0031.849] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP") returned 50 [0031.849] lstrlenA (lpString="\\*.*") returned 4 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.849] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP" [0031.849] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*" [0031.849] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd52 | out: lpFindFileData=0x19fd52) returned 0xffffffff [0031.849] LocalFree (hMem=0x661da8) returned 0x0 [0031.849] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP") returned 50 [0031.849] lstrlenA (lpString="\\*.*") returned 4 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x661da8 [0031.849] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP" [0031.849] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*" [0031.849] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.849] LocalFree (hMem=0x661da8) returned 0x0 [0031.849] LocalFree (hMem=0x660530) returned 0x0 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.849] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.849] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.849] lstrlenA (lpString="\\LeapWare\\LeapFTP") returned 17 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x6647a8 [0031.849] lstrcpyA (in: lpString1=0x6647a8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.849] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\LeapWare\\LeapFTP" | out: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP") returned="C:\\ProgramData\\LeapWare\\LeapFTP" [0031.849] LocalFree (hMem=0x66eb30) returned 0x0 [0031.849] lstrlenA (lpString="C:\\ProgramData\\LeapWare\\LeapFTP") returned 31 [0031.849] lstrlenA (lpString="\\*.*") returned 4 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.849] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\LeapWare\\LeapFTP" | out: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP") returned="C:\\ProgramData\\LeapWare\\LeapFTP" [0031.849] lstrcatA (in: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*") returned="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*" [0031.849] FindFirstFileA (in: lpFileName="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd52 | out: lpFindFileData=0x19fd52) returned 0xffffffff [0031.849] LocalFree (hMem=0x660530) returned 0x0 [0031.849] lstrlenA (lpString="C:\\ProgramData\\LeapWare\\LeapFTP") returned 31 [0031.849] lstrlenA (lpString="\\*.*") returned 4 [0031.849] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.849] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\LeapWare\\LeapFTP" | out: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP") returned="C:\\ProgramData\\LeapWare\\LeapFTP" [0031.850] lstrcatA (in: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*") returned="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*" [0031.850] FindFirstFileA (in: lpFileName="C:\\ProgramData\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.850] LocalFree (hMem=0x660530) returned 0x0 [0031.850] LocalFree (hMem=0x6647a8) returned 0x0 [0031.850] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.850] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.850] lstrlenA (lpString="\\LeapWare\\LeapFTP") returned 17 [0031.850] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x660530 [0031.850] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP" [0031.850] LocalFree (hMem=0x66eb30) returned 0x0 [0031.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP") returned 48 [0031.850] lstrlenA (lpString="\\*.*") returned 4 [0031.850] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.850] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP" [0031.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*" [0031.850] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd52 | out: lpFindFileData=0x19fd52) returned 0xffffffff [0031.850] LocalFree (hMem=0x661da8) returned 0x0 [0031.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP") returned 48 [0031.850] lstrlenA (lpString="\\*.*") returned 4 [0031.850] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x661da8 [0031.850] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP" [0031.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*" [0031.850] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\LeapWare\\LeapFTP\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0031.850] LocalFree (hMem=0x661da8) returned 0x0 [0031.850] LocalFree (hMem=0x660530) returned 0x0 [0031.850] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\LeapWare", phkResult=0x19fec4 | out: phkResult=0x19fec4*=0x0) returned 0x2 [0031.850] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\LeapWare", phkResult=0x19fec4 | out: phkResult=0x19fec4*=0x0) returned 0x2 [0031.850] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.850] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.850] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.850] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.851] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x1c, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.851] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Martin Prikryl", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.851] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Martin Prikryl", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.851] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.851] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x1d, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.851] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.852] GetWindowsDirectoryA (in: lpBuffer=0x19fddf, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0031.852] lstrlenA (lpString="C:\\Windows") returned 10 [0031.852] lstrlenA (lpString="\\32BitFtp.ini") returned 13 [0031.852] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e370 [0031.852] lstrcpyA (in: lpString1=0x66e370, lpString2="C:\\Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows" [0031.852] lstrcatA (in: lpString1="C:\\Windows", lpString2="\\32BitFtp.ini" | out: lpString1="C:\\Windows\\32BitFtp.ini") returned="C:\\Windows\\32BitFtp.ini" [0031.852] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\32BitFtp.ini", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x19 [0031.852] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x664d90 [0031.852] ExpandEnvironmentStringsA (in: lpSrc="C:\\Windows\\32BitFtp.ini", lpDst=0x664d90, nSize=0x19 | out: lpDst="C:\\Windows\\32BitFtp.ini") returned 0x18 [0031.852] CreateFileA (lpFileName="C:\\Windows\\32BitFtp.ini" (normalized: "c:\\windows\\32bitftp.ini"), dwDesiredAccess=0x80, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0031.852] LocalFree (hMem=0x664d90) returned 0x0 [0031.852] LocalFree (hMem=0x66e370) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.852] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.852] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.852] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.852] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.852] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.852] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x1e, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.852] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.852] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.852] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.852] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.853] lstrlenA (lpString="\\NetDrive") returned 9 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x660530 [0031.853] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.853] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\NetDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive" [0031.853] LocalFree (hMem=0x66eb30) returned 0x0 [0031.853] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive") returned 42 [0031.853] lstrlenA (lpString="\\*.*") returned 4 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x661da8 [0031.853] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive" [0031.853] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive\\*.*" [0031.853] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetDrive\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.853] LocalFree (hMem=0x661da8) returned 0x0 [0031.853] LocalFree (hMem=0x660530) returned 0x0 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.853] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.853] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.853] lstrlenA (lpString="\\NetDrive") returned 9 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e550 [0031.853] lstrcpyA (in: lpString1=0x66e550, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.853] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\NetDrive" | out: lpString1="C:\\ProgramData\\NetDrive") returned="C:\\ProgramData\\NetDrive" [0031.853] LocalFree (hMem=0x66eb30) returned 0x0 [0031.853] lstrlenA (lpString="C:\\ProgramData\\NetDrive") returned 23 [0031.853] lstrlenA (lpString="\\*.*") returned 4 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x664a48 [0031.853] lstrcpyA (in: lpString1=0x664a48, lpString2="C:\\ProgramData\\NetDrive" | out: lpString1="C:\\ProgramData\\NetDrive") returned="C:\\ProgramData\\NetDrive" [0031.853] lstrcatA (in: lpString1="C:\\ProgramData\\NetDrive", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\NetDrive\\*.*") returned="C:\\ProgramData\\NetDrive\\*.*" [0031.853] FindFirstFileA (in: lpFileName="C:\\ProgramData\\NetDrive\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.853] LocalFree (hMem=0x664a48) returned 0x0 [0031.853] LocalFree (hMem=0x66e550) returned 0x0 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.853] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.853] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.853] lstrlenA (lpString="\\NetDrive") returned 9 [0031.853] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.853] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.854] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\NetDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive" [0031.854] LocalFree (hMem=0x66eb30) returned 0x0 [0031.854] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive") returned 40 [0031.854] lstrlenA (lpString="\\*.*") returned 4 [0031.854] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.854] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive" [0031.854] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive\\*.*" [0031.854] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetDrive\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.854] LocalFree (hMem=0x661da8) returned 0x0 [0031.854] LocalFree (hMem=0x660530) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.854] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.854] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.854] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.854] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.854] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.854] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x1f, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.854] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.854] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\South River Technologies\\WebDrive\\Connections", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.855] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\South River Technologies\\WebDrive\\Connections", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.855] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.855] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.855] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.855] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.855] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.855] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x20, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.855] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.855] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="FTPCON") returned 0x0 [0031.855] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FTP CONTROL") returned 0x0 [0031.855] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="FTPCON") returned 0x0 [0031.855] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FTP CONTROL") returned 0x0 [0031.855] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.855] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FTP CONTROL") returned 0x0 [0031.855] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.855] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.856] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FTP CONTROL") returned 0x0 [0031.856] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.857] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FTP CONTROL") returned 0x0 [0031.857] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="FTPCON") returned 0x0 [0031.857] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FTP CONTROL") returned 0x0 [0031.857] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="FTPCON") returned 0x0 [0031.857] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FTP CONTROL") returned 0x0 [0031.857] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="FTPCON") returned 0x0 [0031.857] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FTP CONTROL") returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.857] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.857] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.857] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.857] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.857] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.857] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x21, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.857] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.858] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.858] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.858] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.858] lstrlenA (lpString="\\*.*") returned 4 [0031.858] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x660530 [0031.858] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\*.*" [0031.858] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\*.*", lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0x6556c8 [0031.858] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.858] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.858] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0031.858] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0031.858] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.858] lstrlenA (lpString="\\") returned 1 [0031.858] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.858] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.858] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.858] lstrlenA (lpString="Adobe") returned 5 [0031.858] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x663c48 [0031.858] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Adobe" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Adobe") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Adobe" [0031.858] LocalFree (hMem=0x661da8) returned 0x0 [0031.858] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Adobe", lpSrch="opera") returned 0x0 [0031.859] LocalFree (hMem=0x663c48) returned 0x0 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] lstrcmpiA (lpString1=".", lpString2="Macromedia") returned -1 [0031.859] lstrcmpiA (lpString1="..", lpString2="Macromedia") returned -1 [0031.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.859] lstrlenA (lpString="\\") returned 1 [0031.859] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.859] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.859] lstrlenA (lpString="Macromedia") returned 10 [0031.859] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x663c48 [0031.859] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Macromedia" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Macromedia" [0031.859] LocalFree (hMem=0x661da8) returned 0x0 [0031.859] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Macromedia", lpSrch="opera") returned 0x0 [0031.859] LocalFree (hMem=0x663c48) returned 0x0 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.859] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0031.859] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0031.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.859] lstrlenA (lpString="\\") returned 1 [0031.859] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.859] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.859] lstrlenA (lpString="Microsoft") returned 9 [0031.859] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x663c48 [0031.859] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Microsoft" [0031.859] LocalFree (hMem=0x661da8) returned 0x0 [0031.859] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Microsoft", lpSrch="opera") returned 0x0 [0031.860] LocalFree (hMem=0x663c48) returned 0x0 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] lstrcmpiA (lpString1=".", lpString2="Mozilla") returned -1 [0031.860] lstrcmpiA (lpString1="..", lpString2="Mozilla") returned -1 [0031.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.860] lstrlenA (lpString="\\") returned 1 [0031.860] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.860] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.860] lstrlenA (lpString="Mozilla") returned 7 [0031.860] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x663c48 [0031.860] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Mozilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla" [0031.860] LocalFree (hMem=0x661da8) returned 0x0 [0031.860] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla", lpSrch="opera") returned 0x0 [0031.860] LocalFree (hMem=0x663c48) returned 0x0 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.860] lstrcmpiA (lpString1=".", lpString2="Skype") returned -1 [0031.860] lstrcmpiA (lpString1="..", lpString2="Skype") returned -1 [0031.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.860] lstrlenA (lpString="\\") returned 1 [0031.860] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.860] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.860] lstrlenA (lpString="Skype") returned 5 [0031.860] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x663c48 [0031.860] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Skype" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Skype") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Skype" [0031.860] LocalFree (hMem=0x661da8) returned 0x0 [0031.861] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Skype", lpSrch="opera") returned 0x0 [0031.861] LocalFree (hMem=0x663c48) returned 0x0 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] lstrcmpiA (lpString1=".", lpString2="Sun") returned -1 [0031.861] lstrcmpiA (lpString1="..", lpString2="Sun") returned -1 [0031.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.861] lstrlenA (lpString="\\") returned 1 [0031.861] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x661da8 [0031.861] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned 34 [0031.861] lstrlenA (lpString="Sun") returned 3 [0031.861] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x663c48 [0031.861] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\" [0031.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\", lpString2="Sun" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sun") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sun" [0031.861] LocalFree (hMem=0x661da8) returned 0x0 [0031.861] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sun", lpSrch="opera") returned 0x0 [0031.861] LocalFree (hMem=0x663c48) returned 0x0 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.861] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0 [0031.861] FindClose (in: hFindFile=0x6556c8 | out: hFindFile=0x6556c8) returned 1 [0031.861] LocalFree (hMem=0x660530) returned 0x0 [0031.861] LocalFree (hMem=0x66eb30) returned 0x0 [0031.861] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.861] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.861] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.861] lstrlenA (lpString="\\*.*") returned 4 [0031.861] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e550 [0031.861] lstrcpyA (in: lpString1=0x66e550, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.861] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\*.*") returned="C:\\ProgramData\\*.*" [0031.862] FindFirstFileA (in: lpFileName="C:\\ProgramData\\*.*", lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0x6556c8 [0031.862] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.862] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.862] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.862] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.862] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.862] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0031.862] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0031.862] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.862] lstrlenA (lpString="\\") returned 1 [0031.862] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.862] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.862] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.862] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.862] lstrlenA (lpString="Adobe") returned 5 [0031.862] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66ea50 [0031.862] lstrcpyA (in: lpString1=0x66ea50, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.862] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Adobe" | out: lpString1="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0031.862] LocalFree (hMem=0x660530) returned 0x0 [0031.862] StrStrIA (lpFirst="C:\\ProgramData\\Adobe", lpSrch="opera") returned 0x0 [0031.862] LocalFree (hMem=0x66ea50) returned 0x0 [0031.862] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.862] lstrcmpiA (lpString1=".", lpString2="Application Data") returned -1 [0031.862] lstrcmpiA (lpString1="..", lpString2="Application Data") returned -1 [0031.862] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.862] lstrlenA (lpString="\\") returned 1 [0031.862] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.862] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.862] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.862] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.862] lstrlenA (lpString="Application Data") returned 16 [0031.862] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x6658b8 [0031.862] lstrcpyA (in: lpString1=0x6658b8, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.862] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Application Data" | out: lpString1="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0031.862] LocalFree (hMem=0x660530) returned 0x0 [0031.863] StrStrIA (lpFirst="C:\\ProgramData\\Application Data", lpSrch="opera") returned 0x0 [0031.863] LocalFree (hMem=0x6658b8) returned 0x0 [0031.863] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.863] lstrcmpiA (lpString1=".", lpString2="Comms") returned -1 [0031.863] lstrcmpiA (lpString1="..", lpString2="Comms") returned -1 [0031.863] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.863] lstrlenA (lpString="\\") returned 1 [0031.863] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.863] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.863] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.863] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.863] lstrlenA (lpString="Comms") returned 5 [0031.863] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e5f0 [0031.863] lstrcpyA (in: lpString1=0x66e5f0, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.863] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Comms" | out: lpString1="C:\\ProgramData\\Comms") returned="C:\\ProgramData\\Comms" [0031.863] LocalFree (hMem=0x660530) returned 0x0 [0031.863] StrStrIA (lpFirst="C:\\ProgramData\\Comms", lpSrch="opera") returned 0x0 [0031.863] LocalFree (hMem=0x66e5f0) returned 0x0 [0031.863] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.863] lstrcmpiA (lpString1=".", lpString2="Desktop") returned -1 [0031.863] lstrcmpiA (lpString1="..", lpString2="Desktop") returned -1 [0031.863] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.863] lstrlenA (lpString="\\") returned 1 [0031.863] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.863] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.863] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.863] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.863] lstrlenA (lpString="Desktop") returned 7 [0031.863] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66de70 [0031.863] lstrcpyA (in: lpString1=0x66de70, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.863] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Desktop" | out: lpString1="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0031.863] LocalFree (hMem=0x660530) returned 0x0 [0031.863] StrStrIA (lpFirst="C:\\ProgramData\\Desktop", lpSrch="opera") returned 0x0 [0031.863] LocalFree (hMem=0x66de70) returned 0x0 [0031.863] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.863] lstrcmpiA (lpString1=".", lpString2="Documents") returned -1 [0031.863] lstrcmpiA (lpString1="..", lpString2="Documents") returned -1 [0031.863] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.863] lstrlenA (lpString="\\") returned 1 [0031.863] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.863] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.863] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.864] lstrlenA (lpString="Documents") returned 9 [0031.864] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6652d0 [0031.864] lstrcpyA (in: lpString1=0x6652d0, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Documents" | out: lpString1="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0031.864] LocalFree (hMem=0x660530) returned 0x0 [0031.864] StrStrIA (lpFirst="C:\\ProgramData\\Documents", lpSrch="opera") returned 0x0 [0031.864] LocalFree (hMem=0x6652d0) returned 0x0 [0031.864] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.864] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0031.864] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0031.864] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.864] lstrlenA (lpString="\\") returned 1 [0031.864] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.864] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.864] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.864] lstrlenA (lpString="Microsoft") returned 9 [0031.864] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x664658 [0031.864] lstrcpyA (in: lpString1=0x664658, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Microsoft" | out: lpString1="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0031.864] LocalFree (hMem=0x660530) returned 0x0 [0031.864] StrStrIA (lpFirst="C:\\ProgramData\\Microsoft", lpSrch="opera") returned 0x0 [0031.864] LocalFree (hMem=0x664658) returned 0x0 [0031.864] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.864] lstrcmpiA (lpString1=".", lpString2="Microsoft Help") returned -1 [0031.864] lstrcmpiA (lpString1="..", lpString2="Microsoft Help") returned -1 [0031.864] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.864] lstrlenA (lpString="\\") returned 1 [0031.864] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.864] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.864] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.864] lstrlenA (lpString="Microsoft Help") returned 14 [0031.864] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x665ab0 [0031.864] lstrcpyA (in: lpString1=0x665ab0, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.864] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Microsoft Help" | out: lpString1="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0031.865] LocalFree (hMem=0x660530) returned 0x0 [0031.865] StrStrIA (lpFirst="C:\\ProgramData\\Microsoft Help", lpSrch="opera") returned 0x0 [0031.865] LocalFree (hMem=0x665ab0) returned 0x0 [0031.865] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.865] lstrcmpiA (lpString1=".", lpString2="Microsoft OneDrive") returned -1 [0031.865] lstrcmpiA (lpString1="..", lpString2="Microsoft OneDrive") returned -1 [0031.865] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.865] lstrlenA (lpString="\\") returned 1 [0031.865] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.865] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.865] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.865] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.865] lstrlenA (lpString="Microsoft OneDrive") returned 18 [0031.865] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x661da8 [0031.865] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.865] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Microsoft OneDrive" | out: lpString1="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive" [0031.865] LocalFree (hMem=0x660530) returned 0x0 [0031.865] StrStrIA (lpFirst="C:\\ProgramData\\Microsoft OneDrive", lpSrch="opera") returned 0x0 [0031.865] LocalFree (hMem=0x661da8) returned 0x0 [0031.865] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.865] lstrcmpiA (lpString1=".", lpString2="Oracle") returned -1 [0031.865] lstrcmpiA (lpString1="..", lpString2="Oracle") returned -1 [0031.865] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.865] lstrlenA (lpString="\\") returned 1 [0031.865] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.865] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.865] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.865] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.865] lstrlenA (lpString="Oracle") returned 6 [0031.865] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66e690 [0031.865] lstrcpyA (in: lpString1=0x66e690, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.865] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Oracle" | out: lpString1="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0031.865] LocalFree (hMem=0x660530) returned 0x0 [0031.865] StrStrIA (lpFirst="C:\\ProgramData\\Oracle", lpSrch="opera") returned 0x0 [0031.865] LocalFree (hMem=0x66e690) returned 0x0 [0031.865] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.865] lstrcmpiA (lpString1=".", lpString2="Package Cache") returned -1 [0031.865] lstrcmpiA (lpString1="..", lpString2="Package Cache") returned -1 [0031.865] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.865] lstrlenA (lpString="\\") returned 1 [0031.865] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.865] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.866] lstrlenA (lpString="Package Cache") returned 13 [0031.866] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x664850 [0031.866] lstrcpyA (in: lpString1=0x664850, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Package Cache" | out: lpString1="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0031.866] LocalFree (hMem=0x660530) returned 0x0 [0031.866] StrStrIA (lpFirst="C:\\ProgramData\\Package Cache", lpSrch="opera") returned 0x0 [0031.866] LocalFree (hMem=0x664850) returned 0x0 [0031.866] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.866] lstrcmpiA (lpString1=".", lpString2="regid.1991-06.com.microsoft") returned -1 [0031.866] lstrcmpiA (lpString1="..", lpString2="regid.1991-06.com.microsoft") returned -1 [0031.866] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.866] lstrlenA (lpString="\\") returned 1 [0031.866] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.866] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.866] lstrlenA (lpString="regid.1991-06.com.microsoft") returned 27 [0031.866] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x661da8 [0031.866] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="regid.1991-06.com.microsoft" | out: lpString1="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft" [0031.866] LocalFree (hMem=0x660530) returned 0x0 [0031.866] StrStrIA (lpFirst="C:\\ProgramData\\regid.1991-06.com.microsoft", lpSrch="opera") returned 0x0 [0031.866] LocalFree (hMem=0x661da8) returned 0x0 [0031.866] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.866] lstrcmpiA (lpString1=".", lpString2="SoftwareDistribution") returned -1 [0031.866] lstrcmpiA (lpString1="..", lpString2="SoftwareDistribution") returned -1 [0031.866] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.866] lstrlenA (lpString="\\") returned 1 [0031.866] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.866] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.866] lstrlenA (lpString="SoftwareDistribution") returned 20 [0031.866] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x661da8 [0031.866] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.866] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="SoftwareDistribution" | out: lpString1="C:\\ProgramData\\SoftwareDistribution") returned="C:\\ProgramData\\SoftwareDistribution" [0031.866] LocalFree (hMem=0x660530) returned 0x0 [0031.867] StrStrIA (lpFirst="C:\\ProgramData\\SoftwareDistribution", lpSrch="opera") returned 0x0 [0031.867] LocalFree (hMem=0x661da8) returned 0x0 [0031.867] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.867] lstrcmpiA (lpString1=".", lpString2="Start Menu") returned -1 [0031.867] lstrcmpiA (lpString1="..", lpString2="Start Menu") returned -1 [0031.867] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.867] lstrlenA (lpString="\\") returned 1 [0031.867] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.867] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.867] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.867] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.867] lstrlenA (lpString="Start Menu") returned 10 [0031.867] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x664d90 [0031.867] lstrcpyA (in: lpString1=0x664d90, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.867] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Start Menu" | out: lpString1="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0031.867] LocalFree (hMem=0x660530) returned 0x0 [0031.867] StrStrIA (lpFirst="C:\\ProgramData\\Start Menu", lpSrch="opera") returned 0x0 [0031.867] LocalFree (hMem=0x664d90) returned 0x0 [0031.867] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.867] lstrcmpiA (lpString1=".", lpString2="Templates") returned -1 [0031.867] lstrcmpiA (lpString1="..", lpString2="Templates") returned -1 [0031.867] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.867] lstrlenA (lpString="\\") returned 1 [0031.867] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.867] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.867] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.867] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.867] lstrlenA (lpString="Templates") returned 9 [0031.867] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x665420 [0031.867] lstrcpyA (in: lpString1=0x665420, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.867] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="Templates" | out: lpString1="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0031.867] LocalFree (hMem=0x660530) returned 0x0 [0031.867] StrStrIA (lpFirst="C:\\ProgramData\\Templates", lpSrch="opera") returned 0x0 [0031.867] LocalFree (hMem=0x665420) returned 0x0 [0031.867] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.867] lstrcmpiA (lpString1=".", lpString2="USOPrivate") returned -1 [0031.867] lstrcmpiA (lpString1="..", lpString2="USOPrivate") returned -1 [0031.867] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.867] lstrlenA (lpString="\\") returned 1 [0031.867] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.867] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.867] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.868] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.868] lstrlenA (lpString="USOPrivate") returned 10 [0031.868] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x663dd0 [0031.868] lstrcpyA (in: lpString1=0x663dd0, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.868] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="USOPrivate" | out: lpString1="C:\\ProgramData\\USOPrivate") returned="C:\\ProgramData\\USOPrivate" [0031.868] LocalFree (hMem=0x660530) returned 0x0 [0031.868] StrStrIA (lpFirst="C:\\ProgramData\\USOPrivate", lpSrch="opera") returned 0x0 [0031.868] LocalFree (hMem=0x663dd0) returned 0x0 [0031.868] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.868] lstrcmpiA (lpString1=".", lpString2="USOShared") returned -1 [0031.868] lstrcmpiA (lpString1="..", lpString2="USOShared") returned -1 [0031.868] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.868] lstrlenA (lpString="\\") returned 1 [0031.868] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x660530 [0031.868] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.868] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.868] lstrlenA (lpString="C:\\ProgramData\\") returned 15 [0031.868] lstrlenA (lpString="USOShared") returned 9 [0031.868] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x665c00 [0031.868] lstrcpyA (in: lpString1=0x665c00, lpString2="C:\\ProgramData\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0031.868] lstrcatA (in: lpString1="C:\\ProgramData\\", lpString2="USOShared" | out: lpString1="C:\\ProgramData\\USOShared") returned="C:\\ProgramData\\USOShared" [0031.868] LocalFree (hMem=0x660530) returned 0x0 [0031.868] StrStrIA (lpFirst="C:\\ProgramData\\USOShared", lpSrch="opera") returned 0x0 [0031.868] LocalFree (hMem=0x665c00) returned 0x0 [0031.868] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0 [0031.868] FindClose (in: hFindFile=0x6556c8 | out: hFindFile=0x6556c8) returned 1 [0031.868] LocalFree (hMem=0x66e550) returned 0x0 [0031.868] LocalFree (hMem=0x66eb30) returned 0x0 [0031.868] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.868] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.868] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.868] lstrlenA (lpString="\\*.*") returned 4 [0031.868] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.868] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\*.*" [0031.868] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\*.*", lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0x6556c8 [0031.869] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.869] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.869] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.869] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.869] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.869] lstrcmpiA (lpString1=".", lpString2="ActiveSync") returned -1 [0031.869] lstrcmpiA (lpString1="..", lpString2="ActiveSync") returned -1 [0031.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.869] lstrlenA (lpString="\\") returned 1 [0031.869] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.869] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.869] lstrlenA (lpString="ActiveSync") returned 10 [0031.869] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x663c48 [0031.869] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="ActiveSync" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ActiveSync") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ActiveSync" [0031.869] LocalFree (hMem=0x661da8) returned 0x0 [0031.869] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ActiveSync", lpSrch="opera") returned 0x0 [0031.869] LocalFree (hMem=0x663c48) returned 0x0 [0031.869] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.869] lstrcmpiA (lpString1=".", lpString2="Adobe") returned -1 [0031.869] lstrcmpiA (lpString1="..", lpString2="Adobe") returned -1 [0031.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.869] lstrlenA (lpString="\\") returned 1 [0031.869] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.869] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.869] lstrlenA (lpString="Adobe") returned 5 [0031.869] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x663c48 [0031.869] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Adobe" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Adobe") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Adobe" [0031.869] LocalFree (hMem=0x661da8) returned 0x0 [0031.869] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Adobe", lpSrch="opera") returned 0x0 [0031.869] LocalFree (hMem=0x663c48) returned 0x0 [0031.869] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.869] lstrcmpiA (lpString1=".", lpString2="Application Data") returned -1 [0031.869] lstrcmpiA (lpString1="..", lpString2="Application Data") returned -1 [0031.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.870] lstrlenA (lpString="\\") returned 1 [0031.870] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.870] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.870] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.870] lstrlenA (lpString="Application Data") returned 16 [0031.870] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x663c48 [0031.870] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Application Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Application Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Application Data" [0031.902] LocalFree (hMem=0x661da8) returned 0x0 [0031.902] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Application Data", lpSrch="opera") returned 0x0 [0031.902] LocalFree (hMem=0x663c48) returned 0x0 [0031.902] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.902] lstrcmpiA (lpString1=".", lpString2="Comms") returned -1 [0031.902] lstrcmpiA (lpString1="..", lpString2="Comms") returned -1 [0031.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.902] lstrlenA (lpString="\\") returned 1 [0031.902] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.902] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.902] lstrlenA (lpString="Comms") returned 5 [0031.902] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x663c48 [0031.902] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Comms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comms" [0031.902] LocalFree (hMem=0x661da8) returned 0x0 [0031.902] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comms", lpSrch="opera") returned 0x0 [0031.902] LocalFree (hMem=0x663c48) returned 0x0 [0031.902] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.902] lstrcmpiA (lpString1=".", lpString2="Google") returned -1 [0031.902] lstrcmpiA (lpString1="..", lpString2="Google") returned -1 [0031.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.902] lstrlenA (lpString="\\") returned 1 [0031.902] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.902] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.903] lstrlenA (lpString="Google") returned 6 [0031.903] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x663c48 [0031.903] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Google" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google" [0031.903] LocalFree (hMem=0x661da8) returned 0x0 [0031.903] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google", lpSrch="opera") returned 0x0 [0031.903] LocalFree (hMem=0x663c48) returned 0x0 [0031.903] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.903] lstrcmpiA (lpString1=".", lpString2="History") returned -1 [0031.903] lstrcmpiA (lpString1="..", lpString2="History") returned -1 [0031.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.903] lstrlenA (lpString="\\") returned 1 [0031.903] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.903] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.903] lstrlenA (lpString="History") returned 7 [0031.903] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x663c48 [0031.903] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="History" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\History") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\History" [0031.903] LocalFree (hMem=0x661da8) returned 0x0 [0031.903] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\History", lpSrch="opera") returned 0x0 [0031.903] LocalFree (hMem=0x663c48) returned 0x0 [0031.903] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.903] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.903] lstrcmpiA (lpString1=".", lpString2="Microsoft") returned -1 [0031.903] lstrcmpiA (lpString1="..", lpString2="Microsoft") returned -1 [0031.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.903] lstrlenA (lpString="\\") returned 1 [0031.903] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.903] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.903] lstrlenA (lpString="Microsoft") returned 9 [0031.903] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x663c48 [0031.903] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft" [0031.903] LocalFree (hMem=0x661da8) returned 0x0 [0031.903] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft", lpSrch="opera") returned 0x0 [0031.903] LocalFree (hMem=0x663c48) returned 0x0 [0031.903] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.903] lstrcmpiA (lpString1=".", lpString2="Microsoft Help") returned -1 [0031.904] lstrcmpiA (lpString1="..", lpString2="Microsoft Help") returned -1 [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.904] lstrlenA (lpString="\\") returned 1 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.904] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.904] lstrlenA (lpString="Microsoft Help") returned 14 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x663c48 [0031.904] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Microsoft Help" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft Help" [0031.904] LocalFree (hMem=0x661da8) returned 0x0 [0031.904] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft Help", lpSrch="opera") returned 0x0 [0031.904] LocalFree (hMem=0x663c48) returned 0x0 [0031.904] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.904] lstrcmpiA (lpString1=".", lpString2="MicrosoftEdge") returned -1 [0031.904] lstrcmpiA (lpString1="..", lpString2="MicrosoftEdge") returned -1 [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.904] lstrlenA (lpString="\\") returned 1 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.904] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.904] lstrlenA (lpString="MicrosoftEdge") returned 13 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x663c48 [0031.904] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="MicrosoftEdge" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MicrosoftEdge") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MicrosoftEdge" [0031.904] LocalFree (hMem=0x661da8) returned 0x0 [0031.904] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MicrosoftEdge", lpSrch="opera") returned 0x0 [0031.904] LocalFree (hMem=0x663c48) returned 0x0 [0031.904] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.904] lstrcmpiA (lpString1=".", lpString2="Microsoft_Corporation") returned -1 [0031.904] lstrcmpiA (lpString1="..", lpString2="Microsoft_Corporation") returned -1 [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.904] lstrlenA (lpString="\\") returned 1 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.904] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.904] lstrlenA (lpString="Microsoft_Corporation") returned 21 [0031.904] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x663c48 [0031.904] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Microsoft_Corporation" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft_Corporation") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft_Corporation" [0031.905] LocalFree (hMem=0x661da8) returned 0x0 [0031.905] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Microsoft_Corporation", lpSrch="opera") returned 0x0 [0031.905] LocalFree (hMem=0x663c48) returned 0x0 [0031.905] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.905] lstrcmpiA (lpString1=".", lpString2="Mozilla") returned -1 [0031.905] lstrcmpiA (lpString1="..", lpString2="Mozilla") returned -1 [0031.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.905] lstrlenA (lpString="\\") returned 1 [0031.905] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.905] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.905] lstrlenA (lpString="Mozilla") returned 7 [0031.905] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x663c48 [0031.905] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Mozilla" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Mozilla") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Mozilla" [0031.905] LocalFree (hMem=0x661da8) returned 0x0 [0031.905] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Mozilla", lpSrch="opera") returned 0x0 [0031.905] LocalFree (hMem=0x663c48) returned 0x0 [0031.905] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.905] lstrcmpiA (lpString1=".", lpString2="Packages") returned -1 [0031.905] lstrcmpiA (lpString1="..", lpString2="Packages") returned -1 [0031.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.905] lstrlenA (lpString="\\") returned 1 [0031.905] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.905] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.905] lstrlenA (lpString="Packages") returned 8 [0031.905] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x663c48 [0031.905] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Packages" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Packages") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Packages" [0031.905] LocalFree (hMem=0x661da8) returned 0x0 [0031.905] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Packages", lpSrch="opera") returned 0x0 [0031.905] LocalFree (hMem=0x663c48) returned 0x0 [0031.905] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.905] lstrcmpiA (lpString1=".", lpString2="PeerDistRepub") returned -1 [0031.905] lstrcmpiA (lpString1="..", lpString2="PeerDistRepub") returned -1 [0031.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.905] lstrlenA (lpString="\\") returned 1 [0031.905] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.906] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.906] lstrlenA (lpString="PeerDistRepub") returned 13 [0031.906] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x663c48 [0031.906] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="PeerDistRepub" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\PeerDistRepub") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\PeerDistRepub" [0031.906] LocalFree (hMem=0x661da8) returned 0x0 [0031.906] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\PeerDistRepub", lpSrch="opera") returned 0x0 [0031.906] LocalFree (hMem=0x663c48) returned 0x0 [0031.906] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.906] lstrcmpiA (lpString1=".", lpString2="Publishers") returned -1 [0031.906] lstrcmpiA (lpString1="..", lpString2="Publishers") returned -1 [0031.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.906] lstrlenA (lpString="\\") returned 1 [0031.906] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.906] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.906] lstrlenA (lpString="Publishers") returned 10 [0031.906] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x663c48 [0031.906] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Publishers" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Publishers") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Publishers" [0031.906] LocalFree (hMem=0x661da8) returned 0x0 [0031.906] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Publishers", lpSrch="opera") returned 0x0 [0031.906] LocalFree (hMem=0x663c48) returned 0x0 [0031.906] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.906] lstrcmpiA (lpString1=".", lpString2="Temp") returned -1 [0031.906] lstrcmpiA (lpString1="..", lpString2="Temp") returned -1 [0031.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.906] lstrlenA (lpString="\\") returned 1 [0031.906] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.906] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.906] lstrlenA (lpString="Temp") returned 4 [0031.906] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x663c48 [0031.906] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Temp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp" [0031.906] LocalFree (hMem=0x661da8) returned 0x0 [0031.906] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temp", lpSrch="opera") returned 0x0 [0031.907] LocalFree (hMem=0x663c48) returned 0x0 [0031.907] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.907] lstrcmpiA (lpString1=".", lpString2="Temporary Internet Files") returned -1 [0031.907] lstrcmpiA (lpString1="..", lpString2="Temporary Internet Files") returned -1 [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.907] lstrlenA (lpString="\\") returned 1 [0031.907] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.907] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.907] lstrlenA (lpString="Temporary Internet Files") returned 24 [0031.907] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x662d30 [0031.907] lstrcpyA (in: lpString1=0x662d30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="Temporary Internet Files" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temporary Internet Files" [0031.907] LocalFree (hMem=0x661da8) returned 0x0 [0031.907] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Temporary Internet Files", lpSrch="opera") returned 0x0 [0031.907] LocalFree (hMem=0x662d30) returned 0x0 [0031.907] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.907] lstrcmpiA (lpString1=".", lpString2="TileDataLayer") returned -1 [0031.907] lstrcmpiA (lpString1="..", lpString2="TileDataLayer") returned -1 [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.907] lstrlenA (lpString="\\") returned 1 [0031.907] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.907] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.907] lstrlenA (lpString="TileDataLayer") returned 13 [0031.907] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x663c48 [0031.907] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="TileDataLayer" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TileDataLayer") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TileDataLayer" [0031.907] LocalFree (hMem=0x661da8) returned 0x0 [0031.907] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\TileDataLayer", lpSrch="opera") returned 0x0 [0031.907] LocalFree (hMem=0x663c48) returned 0x0 [0031.907] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 1 [0031.907] lstrcmpiA (lpString1=".", lpString2="VirtualStore") returned -1 [0031.907] lstrcmpiA (lpString1="..", lpString2="VirtualStore") returned -1 [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.907] lstrlenA (lpString="\\") returned 1 [0031.907] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.907] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned 32 [0031.908] lstrlenA (lpString="VirtualStore") returned 12 [0031.908] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x663c48 [0031.908] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\" [0031.908] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\", lpString2="VirtualStore" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VirtualStore") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VirtualStore" [0031.908] LocalFree (hMem=0x661da8) returned 0x0 [0031.908] StrStrIA (lpFirst="C:\\Users\\Nd9E1FYi\\AppData\\Local\\VirtualStore", lpSrch="opera") returned 0x0 [0031.908] LocalFree (hMem=0x663c48) returned 0x0 [0031.908] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd82 | out: lpFindFileData=0x19fd82) returned 0 [0031.908] FindClose (in: hFindFile=0x6556c8 | out: hFindFile=0x6556c8) returned 1 [0031.908] LocalFree (hMem=0x660530) returned 0x0 [0031.908] LocalFree (hMem=0x66eb30) returned 0x0 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Opera Software", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.908] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.909] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="Opera.HTML\\shell\\open\\command", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.909] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.909] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.909] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.909] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.909] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.909] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x22, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.909] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.909] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.909] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.909] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.910] lstrlenA (lpString="\\AceBIT") returned 7 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x660530 [0031.910] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\AceBIT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT" [0031.910] LocalFree (hMem=0x66eb30) returned 0x0 [0031.910] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT") returned 40 [0031.910] lstrlenA (lpString="\\*.*") returned 4 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x661da8 [0031.910] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT" [0031.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT\\*.*" [0031.910] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\AceBIT\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.910] LocalFree (hMem=0x661da8) returned 0x0 [0031.910] LocalFree (hMem=0x660530) returned 0x0 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.910] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.910] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.910] lstrlenA (lpString="\\AceBIT") returned 7 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66e190 [0031.910] lstrcpyA (in: lpString1=0x66e190, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.910] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\AceBIT" | out: lpString1="C:\\ProgramData\\AceBIT") returned="C:\\ProgramData\\AceBIT" [0031.910] LocalFree (hMem=0x66eb30) returned 0x0 [0031.910] lstrlenA (lpString="C:\\ProgramData\\AceBIT") returned 21 [0031.910] lstrlenA (lpString="\\*.*") returned 4 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x665c00 [0031.910] lstrcpyA (in: lpString1=0x665c00, lpString2="C:\\ProgramData\\AceBIT" | out: lpString1="C:\\ProgramData\\AceBIT") returned="C:\\ProgramData\\AceBIT" [0031.910] lstrcatA (in: lpString1="C:\\ProgramData\\AceBIT", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\AceBIT\\*.*") returned="C:\\ProgramData\\AceBIT\\*.*" [0031.910] FindFirstFileA (in: lpFileName="C:\\ProgramData\\AceBIT\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.910] LocalFree (hMem=0x665c00) returned 0x0 [0031.910] LocalFree (hMem=0x66e190) returned 0x0 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.910] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.910] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.910] lstrlenA (lpString="\\AceBIT") returned 7 [0031.910] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x660530 [0031.910] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\AceBIT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT" [0031.910] LocalFree (hMem=0x66eb30) returned 0x0 [0031.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT") returned 38 [0031.911] lstrlenA (lpString="\\*.*") returned 4 [0031.911] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x661da8 [0031.911] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT" [0031.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT\\*.*" [0031.911] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\AceBIT\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0031.911] LocalFree (hMem=0x661da8) returned 0x0 [0031.911] LocalFree (hMem=0x660530) returned 0x0 [0031.911] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AceBIT", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.911] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\AceBIT", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.911] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Classes\\TypeLib\\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.911] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Classes\\TypeLib\\{9EA55529-E122-4757-BC79-E4825F80732C}", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0031.911] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.911] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.911] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.911] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.911] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.911] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.911] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.912] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.912] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.912] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.912] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x23, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.912] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.912] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.912] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.912] lstrlenA (lpString="\\RhinoSoft.com") returned 14 [0031.912] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x660530 [0031.912] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com" [0031.912] LocalFree (hMem=0x66eb30) returned 0x0 [0031.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com") returned 47 [0031.912] lstrlenA (lpString="\\*.*") returned 4 [0031.912] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x661da8 [0031.912] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com" [0031.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*" [0031.912] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.912] LocalFree (hMem=0x661da8) returned 0x0 [0031.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com") returned 47 [0031.912] lstrlenA (lpString="\\*.*") returned 4 [0031.912] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x661da8 [0031.912] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com" [0031.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*" [0031.912] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.912] LocalFree (hMem=0x661da8) returned 0x0 [0031.912] LocalFree (hMem=0x660530) returned 0x0 [0031.912] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.912] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0031.912] lstrlenA (lpString="C:\\ProgramData") returned 14 [0031.912] lstrlenA (lpString="\\RhinoSoft.com") returned 14 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6652d0 [0031.913] lstrcpyA (in: lpString1=0x6652d0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0031.913] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\RhinoSoft.com" | out: lpString1="C:\\ProgramData\\RhinoSoft.com") returned="C:\\ProgramData\\RhinoSoft.com" [0031.913] LocalFree (hMem=0x66eb30) returned 0x0 [0031.913] lstrlenA (lpString="C:\\ProgramData\\RhinoSoft.com") returned 28 [0031.913] lstrlenA (lpString="\\*.*") returned 4 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x660530 [0031.913] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\RhinoSoft.com" | out: lpString1="C:\\ProgramData\\RhinoSoft.com") returned="C:\\ProgramData\\RhinoSoft.com" [0031.913] lstrcatA (in: lpString1="C:\\ProgramData\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\RhinoSoft.com\\*.*") returned="C:\\ProgramData\\RhinoSoft.com\\*.*" [0031.913] FindFirstFileA (in: lpFileName="C:\\ProgramData\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.913] LocalFree (hMem=0x660530) returned 0x0 [0031.913] lstrlenA (lpString="C:\\ProgramData\\RhinoSoft.com") returned 28 [0031.913] lstrlenA (lpString="\\*.*") returned 4 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x660530 [0031.913] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\ProgramData\\RhinoSoft.com" | out: lpString1="C:\\ProgramData\\RhinoSoft.com") returned="C:\\ProgramData\\RhinoSoft.com" [0031.913] lstrcatA (in: lpString1="C:\\ProgramData\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\RhinoSoft.com\\*.*") returned="C:\\ProgramData\\RhinoSoft.com\\*.*" [0031.913] FindFirstFileA (in: lpFileName="C:\\ProgramData\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.913] LocalFree (hMem=0x660530) returned 0x0 [0031.913] LocalFree (hMem=0x6652d0) returned 0x0 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.913] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0031.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0031.913] lstrlenA (lpString="\\RhinoSoft.com") returned 14 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x660530 [0031.913] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0031.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com" [0031.913] LocalFree (hMem=0x66eb30) returned 0x0 [0031.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com") returned 45 [0031.913] lstrlenA (lpString="\\*.*") returned 4 [0031.913] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x661da8 [0031.913] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com" [0031.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*" [0031.913] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0031.913] LocalFree (hMem=0x661da8) returned 0x0 [0031.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com") returned 45 [0031.913] lstrlenA (lpString="\\*.*") returned 4 [0031.914] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x661da8 [0031.914] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com" [0031.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*" [0031.914] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RhinoSoft.com\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0031.914] LocalFree (hMem=0x661da8) returned 0x0 [0031.914] LocalFree (hMem=0x660530) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.914] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.914] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.914] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.914] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.914] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.914] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x24, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.914] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.914] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0031.915] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0031.915] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x66fcc8 [0031.915] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x238) returned 0x0 [0031.915] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x0, lpName=0x66fcc8, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.915] lstrlenA (lpString="Software\\Mozilla") returned 16 [0031.915] lstrlenA (lpString="\\") returned 1 [0031.915] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66dfb0 [0031.915] lstrcpyA (in: lpString1=0x66dfb0, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0031.915] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.915] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0031.915] lstrlenA (lpString="Firefox") returned 7 [0031.915] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x664e38 [0031.915] lstrcpyA (in: lpString1=0x664e38, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.915] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.915] LocalFree (hMem=0x66dfb0) returned 0x0 [0031.915] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0031.915] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd3c | out: phkResult=0x19fd3c*=0x23c) returned 0x0 [0031.915] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd34, lpData=0x0, lpcbData=0x19fd38*=0x664e49 | out: lpType=0x19fd34*=0x0, lpData=0x0, lpcbData=0x19fd38*=0x0) returned 0x2 [0031.915] RegCloseKey (hKey=0x23c) returned 0x0 [0031.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x23c) returned 0x0 [0031.916] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd08, lpData=0x0, lpcbData=0x19fd0c*=0x19fce4 | out: lpType=0x19fd08*=0x0, lpData=0x0, lpcbData=0x19fd0c*=0x0) returned 0x2 [0031.916] RegCloseKey (hKey=0x23c) returned 0x0 [0031.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fce4 | out: phkResult=0x19fce4*=0x23c) returned 0x0 [0031.916] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcdc, lpData=0x0, lpcbData=0x19fce0*=0x19fcb8 | out: lpType=0x19fcdc*=0x0, lpData=0x0, lpcbData=0x19fce0*=0x0) returned 0x2 [0031.916] RegCloseKey (hKey=0x23c) returned 0x0 [0031.916] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x670550 [0031.916] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x23c) returned 0x0 [0031.916] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x0, lpName=0x670550, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.916] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0031.916] lstrlenA (lpString="\\") returned 1 [0031.916] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x665180 [0031.916] lstrcpyA (in: lpString1=0x665180, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.916] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.916] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0031.916] lstrlenA (lpString="TaskBarIDs") returned 10 [0031.916] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.916] lstrcpyA (in: lpString1=0x660530, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.916] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0031.916] LocalFree (hMem=0x665180) returned 0x0 [0031.916] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0031.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd08 | out: phkResult=0x19fd08*=0x240) returned 0x0 [0031.916] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd00, lpData=0x0, lpcbData=0x19fd04*=0x660541 | out: lpType=0x19fd00*=0x0, lpData=0x0, lpcbData=0x19fd04*=0x0) returned 0x2 [0031.916] RegCloseKey (hKey=0x240) returned 0x0 [0031.916] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fcdc | out: phkResult=0x19fcdc*=0x240) returned 0x0 [0031.916] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcd4, lpData=0x0, lpcbData=0x19fcd8*=0x19fcb0 | out: lpType=0x19fcd4*=0x0, lpData=0x0, lpcbData=0x19fcd8*=0x0) returned 0x2 [0031.917] RegCloseKey (hKey=0x240) returned 0x0 [0031.917] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fcb0 | out: phkResult=0x19fcb0*=0x240) returned 0x0 [0031.917] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fca8, lpData=0x0, lpcbData=0x19fcac*=0x19fc84 | out: lpType=0x19fca8*=0x0, lpData=0x0, lpcbData=0x19fcac*=0x0) returned 0x2 [0031.917] RegCloseKey (hKey=0x240) returned 0x0 [0031.917] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x670dd8 [0031.917] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x240) returned 0x0 [0031.917] RegEnumKeyExA (in: hKey=0x240, dwIndex=0x0, lpName=0x670dd8, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.917] RegCloseKey (hKey=0x240) returned 0x0 [0031.917] LocalFree (hMem=0x670dd8) returned 0x0 [0031.917] LocalFree (hMem=0x660530) returned 0x0 [0031.917] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x1, lpName=0x670550, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.917] RegCloseKey (hKey=0x23c) returned 0x0 [0031.917] LocalFree (hMem=0x670550) returned 0x0 [0031.917] LocalFree (hMem=0x664e38) returned 0x0 [0031.917] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x1, lpName=0x66fcc8, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.917] RegCloseKey (hKey=0x238) returned 0x0 [0031.917] LocalFree (hMem=0x66fcc8) returned 0x0 [0031.917] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0031.917] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x66fcc8 [0031.917] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0031.917] LocalFree (hMem=0x66fcc8) returned 0x0 [0031.917] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0031.917] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.917] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.917] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.918] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.918] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.918] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.918] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.918] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.918] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.918] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.918] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x25, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.918] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.918] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.918] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0031.918] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0031.918] lstrlenA (lpString="\\Mozilla\\Firefox\\") returned 17 [0031.918] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x660530 [0031.918] lstrcpyA (in: lpString1=0x660530, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0031.918] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.918] LocalFree (hMem=0x66eb30) returned 0x0 [0031.918] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.918] lstrlenA (lpString="*.*") returned 3 [0031.918] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x661da8 [0031.918] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.918] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\*.*" [0031.918] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\*.*", lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 0x6556c8 [0031.919] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.919] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 1 [0031.919] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.919] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.919] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 1 [0031.919] lstrcmpiA (lpString1=".", lpString2="Crash Reports") returned -1 [0031.919] lstrcmpiA (lpString1="..", lpString2="Crash Reports") returned -1 [0031.919] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.919] lstrlenA (lpString="") returned 0 [0031.919] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x663c48 [0031.919] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.919] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.919] lstrlenA (lpString="Crash Reports") returned 13 [0031.919] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x663820 [0031.919] lstrcpyA (in: lpString1=0x663820, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0031.919] LocalFree (hMem=0x663c48) returned 0x0 [0031.919] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 63 [0031.919] lstrlenA (lpString="\\*.*") returned 4 [0031.919] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x65e158 [0031.919] lstrcpyA (in: lpString1=0x65e158, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0031.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*" [0031.919] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*.*", lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0x655708 [0031.920] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.920] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.920] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.920] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.920] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.920] lstrcmpiA (lpString1=".", lpString2="events") returned -1 [0031.920] lstrcmpiA (lpString1="..", lpString2="events") returned -1 [0031.920] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 63 [0031.920] lstrlenA (lpString="\\") returned 1 [0031.920] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x65e2f8 [0031.920] lstrcpyA (in: lpString1=0x65e2f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" [0031.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\" [0031.920] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\") returned 64 [0031.920] lstrlenA (lpString="events") returned 6 [0031.920] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x65eb18 [0031.920] lstrcpyA (in: lpString1=0x65eb18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\" [0031.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="events" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events" [0031.920] LocalFree (hMem=0x65e2f8) returned 0x0 [0031.920] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events") returned 70 [0031.920] lstrlenA (lpString="\\*.*") returned 4 [0031.920] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x663c48 [0031.920] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events" [0031.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*.*" [0031.920] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*.*", lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 0x655788 [0031.921] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.921] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.921] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.921] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.921] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 0 [0031.921] FindClose (in: hFindFile=0x655788 | out: hFindFile=0x655788) returned 1 [0031.921] LocalFree (hMem=0x663c48) returned 0x0 [0031.921] LocalFree (hMem=0x65eb18) returned 0x0 [0031.921] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.921] StrStrIA (lpFirst="InstallTime20170814072924", lpSrch="fireFTPsites.dat") returned 0x0 [0031.921] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0 [0031.921] FindClose (in: hFindFile=0x655708 | out: hFindFile=0x655708) returned 1 [0031.921] LocalFree (hMem=0x65e158) returned 0x0 [0031.921] LocalFree (hMem=0x663820) returned 0x0 [0031.921] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 1 [0031.921] lstrcmpiA (lpString1=".", lpString2="Pending Pings") returned -1 [0031.921] lstrcmpiA (lpString1="..", lpString2="Pending Pings") returned -1 [0031.921] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.921] lstrlenA (lpString="") returned 0 [0031.921] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x663c48 [0031.921] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.921] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.921] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.921] lstrlenA (lpString="Pending Pings") returned 13 [0031.922] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x662f88 [0031.922] lstrcpyA (in: lpString1=0x662f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Pending Pings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings" [0031.922] LocalFree (hMem=0x663c48) returned 0x0 [0031.922] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings") returned 63 [0031.922] lstrlenA (lpString="\\*.*") returned 4 [0031.922] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x65e158 [0031.922] lstrcpyA (in: lpString1=0x65e158, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings" [0031.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\*.*" [0031.922] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\*.*", lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0x655708 [0031.922] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.922] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.922] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.922] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.922] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0 [0031.922] FindClose (in: hFindFile=0x655708 | out: hFindFile=0x655708) returned 1 [0031.922] LocalFree (hMem=0x65e158) returned 0x0 [0031.922] LocalFree (hMem=0x662f88) returned 0x0 [0031.922] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 1 [0031.923] lstrcmpiA (lpString1=".", lpString2="Profiles") returned -1 [0031.923] lstrcmpiA (lpString1="..", lpString2="Profiles") returned -1 [0031.923] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.923] lstrlenA (lpString="") returned 0 [0031.923] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x663c48 [0031.923] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.923] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 50 [0031.923] lstrlenA (lpString="Profiles") returned 8 [0031.923] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663500 [0031.923] lstrcpyA (in: lpString1=0x663500, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\" [0031.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0031.923] LocalFree (hMem=0x663c48) returned 0x0 [0031.923] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 58 [0031.923] lstrlenA (lpString="\\*.*") returned 4 [0031.923] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x6635c8 [0031.923] lstrcpyA (in: lpString1=0x6635c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0031.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*" [0031.923] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0x655708 [0031.923] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.924] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.924] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.924] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.924] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 1 [0031.924] lstrcmpiA (lpString1=".", lpString2="i6gc44p4.default") returned -1 [0031.924] lstrcmpiA (lpString1="..", lpString2="i6gc44p4.default") returned -1 [0031.924] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 58 [0031.924] lstrlenA (lpString="\\") returned 1 [0031.924] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x662d30 [0031.924] lstrcpyA (in: lpString1=0x662d30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" [0031.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0031.924] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 59 [0031.924] lstrlenA (lpString="i6gc44p4.default") returned 16 [0031.924] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x663c48 [0031.924] lstrcpyA (in: lpString1=0x663c48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0031.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.924] LocalFree (hMem=0x662d30) returned 0x0 [0031.924] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.924] lstrlenA (lpString="\\*.*") returned 4 [0031.924] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x66eb30 [0031.924] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\*.*" [0031.924] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\*.*", lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 0x655788 [0031.926] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.926] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.927] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.927] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] StrStrIA (lpFirst="addons.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.927] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] StrStrIA (lpFirst="addonStartup.json.lz4", lpSrch="fireFTPsites.dat") returned 0x0 [0031.927] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] StrStrIA (lpFirst="AlternateServices.txt", lpSrch="fireFTPsites.dat") returned 0x0 [0031.927] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] StrStrIA (lpFirst="blocklist.xml", lpSrch="fireFTPsites.dat") returned 0x0 [0031.927] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.927] lstrcmpiA (lpString1=".", lpString2="bookmarkbackups") returned -1 [0031.927] lstrcmpiA (lpString1="..", lpString2="bookmarkbackups") returned -1 [0031.927] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.927] lstrlenA (lpString="\\") returned 1 [0031.927] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.927] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.927] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.927] lstrlenA (lpString="bookmarkbackups") returned 15 [0031.927] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x672db8 [0031.927] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups" [0031.927] LocalFree (hMem=0x672ce0) returned 0x0 [0031.927] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups") returned 91 [0031.927] lstrlenA (lpString="\\*.*") returned 4 [0031.927] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x672ea0 [0031.927] lstrcpyA (in: lpString1=0x672ea0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups" [0031.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups\\*.*" [0031.927] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\bookmarkbackups\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.928] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.928] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.928] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.928] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.928] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.928] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.928] LocalFree (hMem=0x672ea0) returned 0x0 [0031.928] LocalFree (hMem=0x672db8) returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] StrStrIA (lpFirst="cert8.db", lpSrch="fireFTPsites.dat") returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] StrStrIA (lpFirst="compatibility.ini", lpSrch="fireFTPsites.dat") returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] StrStrIA (lpFirst="containers.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] StrStrIA (lpFirst="content-prefs.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] StrStrIA (lpFirst="cookies.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.928] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.928] lstrcmpiA (lpString1=".", lpString2="crashes") returned -1 [0031.928] lstrcmpiA (lpString1="..", lpString2="crashes") returned -1 [0031.928] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.928] lstrlenA (lpString="\\") returned 1 [0031.928] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.928] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.929] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.929] lstrlenA (lpString="crashes") returned 7 [0031.929] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x672db8 [0031.929] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="crashes" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes" [0031.929] LocalFree (hMem=0x672ce0) returned 0x0 [0031.929] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes") returned 83 [0031.929] lstrlenA (lpString="\\*.*") returned 4 [0031.929] LocalAlloc (uFlags=0x40, uBytes=0xd8) returned 0x672e98 [0031.929] lstrcpyA (in: lpString1=0x672e98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes" [0031.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\*.*" [0031.929] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.929] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.929] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.929] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.929] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.930] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.930] lstrcmpiA (lpString1=".", lpString2="events") returned -1 [0031.930] lstrcmpiA (lpString1="..", lpString2="events") returned -1 [0031.930] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes") returned 83 [0031.930] lstrlenA (lpString="\\") returned 1 [0031.930] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x673f80 [0031.930] lstrcpyA (in: lpString1=0x673f80, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes" [0031.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\" [0031.930] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\") returned 84 [0031.930] lstrlenA (lpString="events") returned 6 [0031.930] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x674060 [0031.930] lstrcpyA (in: lpString1=0x674060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\" [0031.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\", lpString2="events" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events" [0031.930] LocalFree (hMem=0x673f80) returned 0x0 [0031.930] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events") returned 90 [0031.930] lstrlenA (lpString="\\*.*") returned 4 [0031.930] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x674148 [0031.930] lstrcpyA (in: lpString1=0x674148, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events" [0031.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events\\*.*" [0031.930] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\crashes\\events\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x674920 [0031.931] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.931] FindNextFileA (in: hFindFile=0x674920, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.931] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.931] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.931] FindNextFileA (in: hFindFile=0x674920, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.931] FindClose (in: hFindFile=0x674920 | out: hFindFile=0x674920) returned 1 [0031.931] LocalFree (hMem=0x674148) returned 0x0 [0031.931] LocalFree (hMem=0x674060) returned 0x0 [0031.931] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.931] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.931] LocalFree (hMem=0x672e98) returned 0x0 [0031.931] LocalFree (hMem=0x672db8) returned 0x0 [0031.931] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.931] lstrcmpiA (lpString1=".", lpString2="datareporting") returned -1 [0031.931] lstrcmpiA (lpString1="..", lpString2="datareporting") returned -1 [0031.931] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.931] lstrlenA (lpString="\\") returned 1 [0031.931] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.931] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.931] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.931] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.931] lstrlenA (lpString="datareporting") returned 13 [0031.931] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x672db8 [0031.931] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.931] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="datareporting" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting" [0031.931] LocalFree (hMem=0x672ce0) returned 0x0 [0031.931] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting") returned 89 [0031.932] lstrlenA (lpString="\\*.*") returned 4 [0031.932] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x672ea0 [0031.932] lstrcpyA (in: lpString1=0x672ea0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting" [0031.932] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\*.*" [0031.932] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.933] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.933] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.933] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.933] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.933] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.933] lstrcmpiA (lpString1=".", lpString2="archived") returned -1 [0031.933] lstrcmpiA (lpString1="..", lpString2="archived") returned -1 [0031.933] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting") returned 89 [0031.933] lstrlenA (lpString="\\") returned 1 [0031.933] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x673f90 [0031.933] lstrcpyA (in: lpString1=0x673f90, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting" [0031.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\" [0031.933] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\") returned 90 [0031.933] lstrlenA (lpString="archived") returned 8 [0031.933] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x667920 [0031.933] lstrcpyA (in: lpString1=0x667920, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\" [0031.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\", lpString2="archived" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived" [0031.934] LocalFree (hMem=0x673f90) returned 0x0 [0031.934] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived") returned 98 [0031.934] lstrlenA (lpString="\\*.*") returned 4 [0031.934] LocalAlloc (uFlags=0x40, uBytes=0xe7) returned 0x667a10 [0031.934] lstrcpyA (in: lpString1=0x667a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived" [0031.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\*.*" [0031.934] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x6751e0 [0031.934] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.934] FindNextFileA (in: hFindFile=0x6751e0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.934] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.934] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.934] FindNextFileA (in: hFindFile=0x6751e0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.934] lstrcmpiA (lpString1=".", lpString2="2017-08") returned -1 [0031.934] lstrcmpiA (lpString1="..", lpString2="2017-08") returned -1 [0031.934] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived") returned 98 [0031.934] lstrlenA (lpString="\\") returned 1 [0031.934] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x666de0 [0031.934] lstrcpyA (in: lpString1=0x666de0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived" [0031.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\" [0031.934] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\") returned 99 [0031.934] lstrlenA (lpString="2017-08") returned 7 [0031.934] LocalAlloc (uFlags=0x40, uBytes=0xeb) returned 0x673f90 [0031.934] lstrcpyA (in: lpString1=0x673f90, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\" [0031.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\", lpString2="2017-08" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08" [0031.934] LocalFree (hMem=0x666de0) returned 0x0 [0031.934] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08") returned 106 [0031.934] lstrlenA (lpString="\\*.*") returned 4 [0031.934] LocalAlloc (uFlags=0x40, uBytes=0xef) returned 0x674088 [0031.934] lstrcpyA (in: lpString1=0x674088, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08" [0031.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08\\*.*" [0031.934] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\datareporting\\archived\\2017-08\\*.*", lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0x6750e0 [0031.936] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.936] FindNextFileA (in: hFindFile=0x6750e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.936] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.936] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.936] FindNextFileA (in: hFindFile=0x6750e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.936] StrStrIA (lpFirst="1503651440860.2d520ad0-8005-4317-b4fd-571af846ed8d.new-profile.jsonlz4", lpSrch="fireFTPsites.dat") returned 0x0 [0031.936] FindNextFileA (in: hFindFile=0x6750e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.936] StrStrIA (lpFirst="1503651441015.321b9820-ddf0-4472-8833-27c2104c93fa.main.jsonlz4", lpSrch="fireFTPsites.dat") returned 0x0 [0031.936] FindNextFileA (in: hFindFile=0x6750e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.936] StrStrIA (lpFirst="1503651456011.5f95b583-d699-497d-975d-4dba64e21259.main.jsonlz4", lpSrch="fireFTPsites.dat") returned 0x0 [0031.936] FindNextFileA (in: hFindFile=0x6750e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0 [0031.937] FindClose (in: hFindFile=0x6750e0 | out: hFindFile=0x6750e0) returned 1 [0031.937] LocalFree (hMem=0x674088) returned 0x0 [0031.937] LocalFree (hMem=0x673f90) returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x6751e0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.937] FindClose (in: hFindFile=0x6751e0 | out: hFindFile=0x6751e0) returned 1 [0031.937] LocalFree (hMem=0x667a10) returned 0x0 [0031.937] LocalFree (hMem=0x667920) returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.937] StrStrIA (lpFirst="session-state.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.937] StrStrIA (lpFirst="state.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.937] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.937] LocalFree (hMem=0x672ea0) returned 0x0 [0031.937] LocalFree (hMem=0x672db8) returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.937] StrStrIA (lpFirst="extensions.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.937] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.937] StrStrIA (lpFirst="favicons.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.938] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.938] lstrcmpiA (lpString1=".", lpString2="gmp") returned -1 [0031.938] lstrcmpiA (lpString1="..", lpString2="gmp") returned -1 [0031.938] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.938] lstrlenA (lpString="\\") returned 1 [0031.938] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x666d78 [0031.938] lstrcpyA (in: lpString1=0x666d78, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.938] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.938] lstrlenA (lpString="gmp") returned 3 [0031.938] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x666e50 [0031.938] lstrcpyA (in: lpString1=0x666e50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="gmp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp" [0031.938] LocalFree (hMem=0x666d78) returned 0x0 [0031.938] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp") returned 79 [0031.938] lstrlenA (lpString="\\*.*") returned 4 [0031.938] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x666f28 [0031.938] lstrcpyA (in: lpString1=0x666f28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp" [0031.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\*.*" [0031.938] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.942] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.942] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.942] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.942] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.942] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.943] lstrcmpiA (lpString1=".", lpString2="WINNT_x86_64-msvc") returned -1 [0031.943] lstrcmpiA (lpString1="..", lpString2="WINNT_x86_64-msvc") returned -1 [0031.943] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp") returned 79 [0031.943] lstrlenA (lpString="\\") returned 1 [0031.943] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x667008 [0031.943] lstrcpyA (in: lpString1=0x667008, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp" [0031.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\" [0031.943] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\") returned 80 [0031.943] lstrlenA (lpString="WINNT_x86_64-msvc") returned 17 [0031.943] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x674940 [0031.943] lstrcpyA (in: lpString1=0x674940, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\" [0031.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\", lpString2="WINNT_x86_64-msvc" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc" [0031.943] LocalFree (hMem=0x667008) returned 0x0 [0031.943] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc") returned 97 [0031.943] lstrlenA (lpString="\\*.*") returned 4 [0031.943] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x674670 [0031.943] lstrcpyA (in: lpString1=0x674670, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc" [0031.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc\\*.*" [0031.943] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp\\WINNT_x86_64-msvc\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x675060 [0031.943] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.943] FindNextFileA (in: hFindFile=0x675060, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.943] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.943] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.943] FindNextFileA (in: hFindFile=0x675060, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.943] FindClose (in: hFindFile=0x675060 | out: hFindFile=0x675060) returned 1 [0031.943] LocalFree (hMem=0x674670) returned 0x0 [0031.943] LocalFree (hMem=0x674940) returned 0x0 [0031.943] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.943] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.947] LocalFree (hMem=0x666f28) returned 0x0 [0031.947] LocalFree (hMem=0x666e50) returned 0x0 [0031.947] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.947] lstrcmpiA (lpString1=".", lpString2="gmp-gmpopenh264") returned -1 [0031.947] lstrcmpiA (lpString1="..", lpString2="gmp-gmpopenh264") returned -1 [0031.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.947] lstrlenA (lpString="\\") returned 1 [0031.947] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.947] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.947] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.947] lstrlenA (lpString="gmp-gmpopenh264") returned 15 [0031.947] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x672db8 [0031.947] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.947] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="gmp-gmpopenh264" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264" [0031.947] LocalFree (hMem=0x672ce0) returned 0x0 [0031.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264") returned 91 [0031.947] lstrlenA (lpString="\\*.*") returned 4 [0031.948] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x672ea0 [0031.948] lstrcpyA (in: lpString1=0x672ea0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264" [0031.948] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\*.*" [0031.948] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.951] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.951] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.951] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.951] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.951] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.951] lstrcmpiA (lpString1=".", lpString2="1.6") returned -1 [0031.951] lstrcmpiA (lpString1="..", lpString2="1.6") returned -1 [0031.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264") returned 91 [0031.951] lstrlenA (lpString="\\") returned 1 [0031.951] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x672f88 [0031.952] lstrcpyA (in: lpString1=0x672f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264" [0031.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\" [0031.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\") returned 92 [0031.952] lstrlenA (lpString="1.6") returned 3 [0031.952] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x673070 [0031.952] lstrcpyA (in: lpString1=0x673070, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\" [0031.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\", lpString2="1.6" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6" [0031.952] LocalFree (hMem=0x672f88) returned 0x0 [0031.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6") returned 95 [0031.952] lstrlenA (lpString="\\*.*") returned 4 [0031.952] LocalAlloc (uFlags=0x40, uBytes=0xe4) returned 0x674940 [0031.952] lstrcpyA (in: lpString1=0x674940, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6" [0031.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6\\*.*" [0031.952] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-gmpopenh264\\1.6\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x6750a0 [0031.952] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.952] FindNextFileA (in: hFindFile=0x6750a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.952] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.952] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.952] FindNextFileA (in: hFindFile=0x6750a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.952] StrStrIA (lpFirst="gmpopenh264.dll", lpSrch="fireFTPsites.dat") returned 0x0 [0031.952] FindNextFileA (in: hFindFile=0x6750a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.952] StrStrIA (lpFirst="gmpopenh264.info", lpSrch="fireFTPsites.dat") returned 0x0 [0031.952] FindNextFileA (in: hFindFile=0x6750a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.952] FindClose (in: hFindFile=0x6750a0 | out: hFindFile=0x6750a0) returned 1 [0031.953] LocalFree (hMem=0x674940) returned 0x0 [0031.953] LocalFree (hMem=0x673070) returned 0x0 [0031.953] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.953] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.953] LocalFree (hMem=0x672ea0) returned 0x0 [0031.953] LocalFree (hMem=0x672db8) returned 0x0 [0031.953] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.953] lstrcmpiA (lpString1=".", lpString2="gmp-widevinecdm") returned -1 [0031.953] lstrcmpiA (lpString1="..", lpString2="gmp-widevinecdm") returned -1 [0031.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.953] lstrlenA (lpString="\\") returned 1 [0031.953] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.953] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.953] lstrlenA (lpString="gmp-widevinecdm") returned 15 [0031.953] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x672db8 [0031.953] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="gmp-widevinecdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm" [0031.953] LocalFree (hMem=0x672ce0) returned 0x0 [0031.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm") returned 91 [0031.953] lstrlenA (lpString="\\*.*") returned 4 [0031.953] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x672ea0 [0031.953] lstrcpyA (in: lpString1=0x672ea0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm" [0031.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\*.*" [0031.953] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.954] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.954] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.954] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.954] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.954] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.954] lstrcmpiA (lpString1=".", lpString2="1.4.8.903") returned -1 [0031.954] lstrcmpiA (lpString1="..", lpString2="1.4.8.903") returned -1 [0031.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm") returned 91 [0031.954] lstrlenA (lpString="\\") returned 1 [0031.954] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x672f88 [0031.954] lstrcpyA (in: lpString1=0x672f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm" [0031.954] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\" [0031.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\") returned 92 [0031.954] lstrlenA (lpString="1.4.8.903") returned 9 [0031.954] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x674940 [0031.954] lstrcpyA (in: lpString1=0x674940, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\" [0031.954] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\", lpString2="1.4.8.903" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903" [0031.954] LocalFree (hMem=0x672f88) returned 0x0 [0031.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903") returned 101 [0031.954] lstrlenA (lpString="\\*.*") returned 4 [0031.954] LocalAlloc (uFlags=0x40, uBytes=0xea) returned 0x672f88 [0031.954] lstrcpyA (in: lpString1=0x672f88, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903" [0031.954] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903\\*.*" [0031.954] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\gmp-widevinecdm\\1.4.8.903\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x675b20 [0031.956] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.956] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.956] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.956] StrStrIA (lpFirst="LICENSE.txt", lpSrch="fireFTPsites.dat") returned 0x0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.956] StrStrIA (lpFirst="manifest.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.956] StrStrIA (lpFirst="widevinecdm.dll", lpSrch="fireFTPsites.dat") returned 0x0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.956] StrStrIA (lpFirst="widevinecdm.dll.lib", lpSrch="fireFTPsites.dat") returned 0x0 [0031.956] FindNextFileA (in: hFindFile=0x675b20, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.956] FindClose (in: hFindFile=0x675b20 | out: hFindFile=0x675b20) returned 1 [0031.957] LocalFree (hMem=0x672f88) returned 0x0 [0031.957] LocalFree (hMem=0x674940) returned 0x0 [0031.957] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.957] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.957] LocalFree (hMem=0x672ea0) returned 0x0 [0031.957] LocalFree (hMem=0x672db8) returned 0x0 [0031.957] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.957] StrStrIA (lpFirst="handlers.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.957] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.957] StrStrIA (lpFirst="key3.db", lpSrch="fireFTPsites.dat") returned 0x0 [0031.957] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.957] lstrcmpiA (lpString1=".", lpString2="minidumps") returned -1 [0031.957] lstrcmpiA (lpString1="..", lpString2="minidumps") returned -1 [0031.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.957] lstrlenA (lpString="\\") returned 1 [0031.957] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.957] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.957] lstrlenA (lpString="minidumps") returned 9 [0031.957] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x672db8 [0031.957] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps" [0031.957] LocalFree (hMem=0x672ce0) returned 0x0 [0031.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps") returned 85 [0031.957] lstrlenA (lpString="\\*.*") returned 4 [0031.957] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x672e98 [0031.957] lstrcpyA (in: lpString1=0x672e98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps" [0031.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps\\*.*" [0031.957] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\minidumps\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.957] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.957] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.958] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.958] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.958] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.958] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.958] LocalFree (hMem=0x672e98) returned 0x0 [0031.958] LocalFree (hMem=0x672db8) returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] StrStrIA (lpFirst="parent.lock", lpSrch="fireFTPsites.dat") returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] StrStrIA (lpFirst="permissions.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] StrStrIA (lpFirst="places.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] StrStrIA (lpFirst="pluginreg.dat", lpSrch="fireFTPsites.dat") returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] StrStrIA (lpFirst="prefs.js", lpSrch="fireFTPsites.dat") returned 0x0 [0031.958] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.958] lstrcmpiA (lpString1=".", lpString2="saved-telemetry-pings") returned -1 [0031.958] lstrcmpiA (lpString1="..", lpString2="saved-telemetry-pings") returned -1 [0031.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.958] lstrlenA (lpString="\\") returned 1 [0031.958] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.958] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.958] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.958] lstrlenA (lpString="saved-telemetry-pings") returned 21 [0031.958] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x674580 [0031.958] lstrcpyA (in: lpString1=0x674580, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.958] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="saved-telemetry-pings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings" [0031.958] LocalFree (hMem=0x672ce0) returned 0x0 [0031.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings") returned 97 [0031.958] lstrlenA (lpString="\\*.*") returned 4 [0031.958] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x674850 [0031.958] lstrcpyA (in: lpString1=0x674850, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings" [0031.958] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings\\*.*" [0031.958] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\saved-telemetry-pings\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.959] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.959] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.960] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.960] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.960] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.960] StrStrIA (lpFirst="321b9820-ddf0-4472-8833-27c2104c93fa", lpSrch="fireFTPsites.dat") returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.960] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.960] LocalFree (hMem=0x674850) returned 0x0 [0031.960] LocalFree (hMem=0x674580) returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.960] StrStrIA (lpFirst="search.json.mozlz4", lpSrch="fireFTPsites.dat") returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.960] StrStrIA (lpFirst="secmod.db", lpSrch="fireFTPsites.dat") returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.960] StrStrIA (lpFirst="SecurityPreloadState.txt", lpSrch="fireFTPsites.dat") returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.960] StrStrIA (lpFirst="sessionCheckpoints.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.960] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.960] lstrcmpiA (lpString1=".", lpString2="sessionstore-backups") returned -1 [0031.960] lstrcmpiA (lpString1="..", lpString2="sessionstore-backups") returned -1 [0031.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.961] lstrlenA (lpString="\\") returned 1 [0031.961] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.961] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.961] lstrlenA (lpString="sessionstore-backups") returned 20 [0031.961] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x673d10 [0031.961] lstrcpyA (in: lpString1=0x673d10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="sessionstore-backups" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups" [0031.961] LocalFree (hMem=0x672ce0) returned 0x0 [0031.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups") returned 96 [0031.961] lstrlenA (lpString="\\*.*") returned 4 [0031.961] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x674760 [0031.961] lstrcpyA (in: lpString1=0x674760, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups" [0031.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups\\*.*" [0031.961] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\sessionstore-backups\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.961] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.961] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.962] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.962] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.962] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.962] StrStrIA (lpFirst="previous.js", lpSrch="fireFTPsites.dat") returned 0x0 [0031.962] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.962] StrStrIA (lpFirst="upgrade.js-20170814072924", lpSrch="fireFTPsites.dat") returned 0x0 [0031.962] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.962] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.962] LocalFree (hMem=0x674760) returned 0x0 [0031.962] LocalFree (hMem=0x673d10) returned 0x0 [0031.962] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.962] StrStrIA (lpFirst="sessionstore.js", lpSrch="fireFTPsites.dat") returned 0x0 [0031.962] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.962] StrStrIA (lpFirst="SiteSecurityServiceState.txt", lpSrch="fireFTPsites.dat") returned 0x0 [0031.962] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.962] lstrcmpiA (lpString1=".", lpString2="storage") returned -1 [0031.962] lstrcmpiA (lpString1="..", lpString2="storage") returned -1 [0031.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned 75 [0031.962] lstrlenA (lpString="\\") returned 1 [0031.962] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x672ce0 [0031.962] lstrcpyA (in: lpString1=0x672ce0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default" [0031.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned 76 [0031.962] lstrlenA (lpString="storage") returned 7 [0031.962] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x672db8 [0031.962] lstrcpyA (in: lpString1=0x672db8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\" [0031.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\", lpString2="storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage" [0031.962] LocalFree (hMem=0x672ce0) returned 0x0 [0031.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage") returned 83 [0031.962] lstrlenA (lpString="\\*.*") returned 4 [0031.962] LocalAlloc (uFlags=0x40, uBytes=0xd8) returned 0x672e98 [0031.962] lstrcpyA (in: lpString1=0x672e98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage" [0031.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\*.*" [0031.963] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\*.*", lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0x6557c8 [0031.963] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.963] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.963] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.963] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.963] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 1 [0031.963] lstrcmpiA (lpString1=".", lpString2="permanent") returned -1 [0031.963] lstrcmpiA (lpString1="..", lpString2="permanent") returned -1 [0031.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage") returned 83 [0031.963] lstrlenA (lpString="\\") returned 1 [0031.963] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x672f78 [0031.963] lstrcpyA (in: lpString1=0x672f78, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage" [0031.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\" [0031.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\") returned 84 [0031.963] lstrlenA (lpString="permanent") returned 9 [0031.963] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x673058 [0031.963] lstrcpyA (in: lpString1=0x673058, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\" [0031.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\", lpString2="permanent" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" [0031.963] LocalFree (hMem=0x672f78) returned 0x0 [0031.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned 93 [0031.963] lstrlenA (lpString="\\*.*") returned 4 [0031.964] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x6743a0 [0031.964] lstrcpyA (in: lpString1=0x6743a0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" [0031.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\*.*" [0031.964] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\*.*", lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0x6751a0 [0031.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.964] FindNextFileA (in: hFindFile=0x6751a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.964] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.964] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.964] FindNextFileA (in: hFindFile=0x6751a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.964] lstrcmpiA (lpString1=".", lpString2="chrome") returned -1 [0031.964] lstrcmpiA (lpString1="..", lpString2="chrome") returned -1 [0031.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned 93 [0031.964] lstrlenA (lpString="\\") returned 1 [0031.964] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x673140 [0031.964] lstrcpyA (in: lpString1=0x673140, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" [0031.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" [0031.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned 94 [0031.964] lstrlenA (lpString="chrome") returned 6 [0031.964] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x674760 [0031.964] lstrcpyA (in: lpString1=0x674760, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" [0031.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\", lpString2="chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome" [0031.964] LocalFree (hMem=0x673140) returned 0x0 [0031.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome") returned 100 [0031.964] lstrlenA (lpString="\\*.*") returned 4 [0031.964] LocalAlloc (uFlags=0x40, uBytes=0xe9) returned 0x673140 [0031.964] lstrcpyA (in: lpString1=0x673140, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome" [0031.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\*.*" [0031.964] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\*.*", lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0x6754e0 [0031.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.964] FindNextFileA (in: hFindFile=0x6754e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.965] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.965] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.965] FindNextFileA (in: hFindFile=0x6754e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.965] StrStrIA (lpFirst=".metadata", lpSrch="fireFTPsites.dat") returned 0x0 [0031.965] FindNextFileA (in: hFindFile=0x6754e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.965] StrStrIA (lpFirst=".metadata-v2", lpSrch="fireFTPsites.dat") returned 0x0 [0031.965] FindNextFileA (in: hFindFile=0x6754e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.965] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0031.965] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0031.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome") returned 100 [0031.965] lstrlenA (lpString="\\") returned 1 [0031.965] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x674580 [0031.965] lstrcpyA (in: lpString1=0x674580, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome" [0031.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\" [0031.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\") returned 101 [0031.965] lstrlenA (lpString="idb") returned 3 [0031.965] LocalAlloc (uFlags=0x40, uBytes=0xe9) returned 0x673238 [0031.965] lstrcpyA (in: lpString1=0x673238, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\" [0031.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\", lpString2="idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb" [0031.965] LocalFree (hMem=0x674580) returned 0x0 [0031.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb") returned 104 [0031.965] lstrlenA (lpString="\\*.*") returned 4 [0031.965] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x673330 [0031.965] lstrcpyA (in: lpString1=0x673330, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb" [0031.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\*.*" [0031.965] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\*.*", lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 0x674f60 [0031.966] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.966] FindNextFileA (in: hFindFile=0x674f60, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.966] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.967] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.967] FindNextFileA (in: hFindFile=0x674f60, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.967] lstrcmpiA (lpString1=".", lpString2="2918063365piupsah.files") returned -1 [0031.967] lstrcmpiA (lpString1="..", lpString2="2918063365piupsah.files") returned -1 [0031.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb") returned 104 [0031.967] lstrlenA (lpString="\\") returned 1 [0031.967] LocalAlloc (uFlags=0x40, uBytes=0xea) returned 0x678d10 [0031.967] lstrcpyA (in: lpString1=0x678d10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb" [0031.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\" [0031.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\") returned 105 [0031.967] lstrlenA (lpString="2918063365piupsah.files") returned 23 [0031.967] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x678e08 [0031.967] lstrcpyA (in: lpString1=0x678e08, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\" [0031.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\", lpString2="2918063365piupsah.files" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files" [0031.967] LocalFree (hMem=0x678d10) returned 0x0 [0031.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files") returned 128 [0031.967] lstrlenA (lpString="\\*.*") returned 4 [0031.967] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x673428 [0031.967] lstrcpyA (in: lpString1=0x673428, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files" [0031.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*.*" [0031.967] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*.*", lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 0x674fe0 [0031.967] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.967] FindNextFileA (in: hFindFile=0x674fe0, lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 1 [0031.968] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.968] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.968] FindNextFileA (in: hFindFile=0x674fe0, lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 0 [0031.968] FindClose (in: hFindFile=0x674fe0 | out: hFindFile=0x674fe0) returned 1 [0031.968] LocalFree (hMem=0x673428) returned 0x0 [0031.968] LocalFree (hMem=0x678e08) returned 0x0 [0031.968] FindNextFileA (in: hFindFile=0x674f60, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.968] StrStrIA (lpFirst="2918063365piupsah.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.968] FindNextFileA (in: hFindFile=0x674f60, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 0 [0031.968] FindClose (in: hFindFile=0x674f60 | out: hFindFile=0x674f60) returned 1 [0031.968] LocalFree (hMem=0x673330) returned 0x0 [0031.968] LocalFree (hMem=0x673238) returned 0x0 [0031.968] FindNextFileA (in: hFindFile=0x6754e0, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0 [0031.968] FindClose (in: hFindFile=0x6754e0 | out: hFindFile=0x6754e0) returned 1 [0031.968] LocalFree (hMem=0x673140) returned 0x0 [0031.968] LocalFree (hMem=0x674760) returned 0x0 [0031.968] FindNextFileA (in: hFindFile=0x6751a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 1 [0031.968] lstrcmpiA (lpString1=".", lpString2="moz-safe-about+home") returned -1 [0031.968] lstrcmpiA (lpString1="..", lpString2="moz-safe-about+home") returned -1 [0031.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned 93 [0031.968] lstrlenA (lpString="\\") returned 1 [0031.968] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x673140 [0031.968] lstrcpyA (in: lpString1=0x673140, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent" [0031.968] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" [0031.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned 94 [0031.968] lstrlenA (lpString="moz-safe-about+home") returned 19 [0031.968] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x673228 [0031.968] lstrcpyA (in: lpString1=0x673228, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\" [0031.968] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home" [0031.968] LocalFree (hMem=0x673140) returned 0x0 [0031.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home") returned 113 [0031.968] lstrlenA (lpString="\\*.*") returned 4 [0031.968] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6654c8 [0031.968] lstrcpyA (in: lpString1=0x6654c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home" [0031.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\*.*" [0031.969] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\*.*", lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0x674d20 [0031.969] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.969] FindNextFileA (in: hFindFile=0x674d20, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.969] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.969] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.969] FindNextFileA (in: hFindFile=0x674d20, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.969] StrStrIA (lpFirst=".metadata", lpSrch="fireFTPsites.dat") returned 0x0 [0031.969] FindNextFileA (in: hFindFile=0x674d20, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.969] StrStrIA (lpFirst=".metadata-v2", lpSrch="fireFTPsites.dat") returned 0x0 [0031.969] FindNextFileA (in: hFindFile=0x674d20, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 1 [0031.969] lstrcmpiA (lpString1=".", lpString2="idb") returned -1 [0031.969] lstrcmpiA (lpString1="..", lpString2="idb") returned -1 [0031.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home") returned 113 [0031.969] lstrlenA (lpString="\\") returned 1 [0031.969] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6643c8 [0031.969] lstrcpyA (in: lpString1=0x6643c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home" [0031.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\" [0031.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\") returned 114 [0031.969] lstrlenA (lpString="idb") returned 3 [0031.969] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6640c8 [0031.969] lstrcpyA (in: lpString1=0x6640c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\" [0031.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb" [0031.970] LocalFree (hMem=0x6643c8) returned 0x0 [0031.970] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb") returned 117 [0031.970] lstrlenA (lpString="\\*.*") returned 4 [0031.970] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x673328 [0031.970] lstrcpyA (in: lpString1=0x673328, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb" [0031.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\*.*" [0031.970] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\*.*", lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 0x674e20 [0031.971] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.971] FindNextFileA (in: hFindFile=0x674e20, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.971] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.971] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.971] FindNextFileA (in: hFindFile=0x674e20, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.971] lstrcmpiA (lpString1=".", lpString2="818200132aebmoouht.files") returned -1 [0031.971] lstrcmpiA (lpString1="..", lpString2="818200132aebmoouht.files") returned -1 [0031.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb") returned 117 [0031.971] lstrlenA (lpString="\\") returned 1 [0031.971] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x664bc8 [0031.971] lstrcpyA (in: lpString1=0x664bc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb" [0031.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\" [0031.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\") returned 118 [0031.971] lstrlenA (lpString="818200132aebmoouht.files") returned 24 [0031.971] LocalAlloc (uFlags=0x40, uBytes=0x10f) returned 0x679a58 [0031.971] lstrcpyA (in: lpString1=0x679a58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\" [0031.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht.files" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files" [0031.971] LocalFree (hMem=0x664bc8) returned 0x0 [0031.972] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files") returned 142 [0031.972] lstrlenA (lpString="\\*.*") returned 4 [0031.972] LocalAlloc (uFlags=0x40, uBytes=0x113) returned 0x673430 [0031.972] lstrcpyA (in: lpString1=0x673430, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files" [0031.972] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*.*" [0031.972] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\i6gc44p4.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*.*", lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 0x6753e0 [0031.972] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.972] FindNextFileA (in: hFindFile=0x6753e0, lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 1 [0031.972] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.972] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.972] FindNextFileA (in: hFindFile=0x6753e0, lpFindFileData=0x19f272 | out: lpFindFileData=0x19f272) returned 0 [0031.972] FindClose (in: hFindFile=0x6753e0 | out: hFindFile=0x6753e0) returned 1 [0031.972] LocalFree (hMem=0x673430) returned 0x0 [0031.972] LocalFree (hMem=0x679a58) returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x674e20, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 1 [0031.973] StrStrIA (lpFirst="818200132aebmoouht.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x674e20, lpFindFileData=0x19f3de | out: lpFindFileData=0x19f3de) returned 0 [0031.973] FindClose (in: hFindFile=0x674e20 | out: hFindFile=0x674e20) returned 1 [0031.973] LocalFree (hMem=0x673328) returned 0x0 [0031.973] LocalFree (hMem=0x6640c8) returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x674d20, lpFindFileData=0x19f54a | out: lpFindFileData=0x19f54a) returned 0 [0031.973] FindClose (in: hFindFile=0x674d20 | out: hFindFile=0x674d20) returned 1 [0031.973] LocalFree (hMem=0x6654c8) returned 0x0 [0031.973] LocalFree (hMem=0x673228) returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x6751a0, lpFindFileData=0x19f6b6 | out: lpFindFileData=0x19f6b6) returned 0 [0031.973] FindClose (in: hFindFile=0x6751a0 | out: hFindFile=0x6751a0) returned 1 [0031.973] LocalFree (hMem=0x6743a0) returned 0x0 [0031.973] LocalFree (hMem=0x673058) returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x6557c8, lpFindFileData=0x19f822 | out: lpFindFileData=0x19f822) returned 0 [0031.973] FindClose (in: hFindFile=0x6557c8 | out: hFindFile=0x6557c8) returned 1 [0031.973] LocalFree (hMem=0x672e98) returned 0x0 [0031.973] LocalFree (hMem=0x672db8) returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.973] StrStrIA (lpFirst="storage.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.973] StrStrIA (lpFirst="times.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.973] StrStrIA (lpFirst="webappsstore.sqlite", lpSrch="fireFTPsites.dat") returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 1 [0031.973] StrStrIA (lpFirst="xulstore.json", lpSrch="fireFTPsites.dat") returned 0x0 [0031.973] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19f98e | out: lpFindFileData=0x19f98e) returned 0 [0031.973] FindClose (in: hFindFile=0x655788 | out: hFindFile=0x655788) returned 1 [0031.973] LocalFree (hMem=0x66eb30) returned 0x0 [0031.973] LocalFree (hMem=0x663c48) returned 0x0 [0031.974] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fafa | out: lpFindFileData=0x19fafa) returned 0 [0031.974] FindClose (in: hFindFile=0x655708 | out: hFindFile=0x655708) returned 1 [0031.974] LocalFree (hMem=0x6635c8) returned 0x0 [0031.974] LocalFree (hMem=0x663500) returned 0x0 [0031.974] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 1 [0031.974] StrStrIA (lpFirst="profiles.ini", lpSrch="fireFTPsites.dat") returned 0x0 [0031.974] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fc66 | out: lpFindFileData=0x19fc66) returned 0 [0031.974] FindClose (in: hFindFile=0x6556c8 | out: hFindFile=0x6556c8) returned 1 [0031.974] LocalFree (hMem=0x661da8) returned 0x0 [0031.974] LocalFree (hMem=0x660530) returned 0x0 [0031.974] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0031.974] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0031.974] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.974] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x238) returned 0x0 [0031.974] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x0, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.974] lstrlenA (lpString="Software\\Mozilla") returned 16 [0031.974] lstrlenA (lpString="\\") returned 1 [0031.974] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66ea50 [0031.974] lstrcpyA (in: lpString1=0x66ea50, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0031.974] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.974] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0031.974] lstrlenA (lpString="Firefox") returned 7 [0031.974] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6719d8 [0031.974] lstrcpyA (in: lpString1=0x6719d8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.974] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.974] LocalFree (hMem=0x66ea50) returned 0x0 [0031.974] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Firefox") returned="Firefox" [0031.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd3c | out: phkResult=0x19fd3c*=0x23c) returned 0x0 [0031.974] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd34, lpData=0x0, lpcbData=0x19fd38*=0x6719e9 | out: lpType=0x19fd34*=0x0, lpData=0x0, lpcbData=0x19fd38*=0x0) returned 0x2 [0031.974] RegCloseKey (hKey=0x23c) returned 0x0 [0031.974] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x23c) returned 0x0 [0031.975] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd08, lpData=0x0, lpcbData=0x19fd0c*=0x19fce4 | out: lpType=0x19fd08*=0x0, lpData=0x0, lpcbData=0x19fd0c*=0x0) returned 0x2 [0031.975] RegCloseKey (hKey=0x23c) returned 0x0 [0031.975] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fce4 | out: phkResult=0x19fce4*=0x23c) returned 0x0 [0031.975] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcdc, lpData=0x0, lpcbData=0x19fce0*=0x19fcb8 | out: lpType=0x19fcdc*=0x0, lpData=0x0, lpcbData=0x19fce0*=0x0) returned 0x2 [0031.975] RegCloseKey (hKey=0x23c) returned 0x0 [0031.975] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x662c10 [0031.975] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x23c) returned 0x0 [0031.975] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x0, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.975] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0031.975] lstrlenA (lpString="\\") returned 1 [0031.975] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6713f0 [0031.975] lstrcpyA (in: lpString1=0x6713f0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.975] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.975] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0031.976] lstrlenA (lpString="TaskBarIDs") returned 10 [0031.976] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.976] lstrcpyA (in: lpString1=0x660530, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.976] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0031.976] LocalFree (hMem=0x6713f0) returned 0x0 [0031.976] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Firefox") returned="Firefox\\TaskBarIDs" [0031.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd08 | out: phkResult=0x19fd08*=0x240) returned 0x0 [0031.976] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd00, lpData=0x0, lpcbData=0x19fd04*=0x660541 | out: lpType=0x19fd00*=0x0, lpData=0x0, lpcbData=0x19fd04*=0x0) returned 0x2 [0031.976] RegCloseKey (hKey=0x240) returned 0x0 [0031.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fcdc | out: phkResult=0x19fcdc*=0x240) returned 0x0 [0031.976] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcd4, lpData=0x0, lpcbData=0x19fcd8*=0x19fcb0 | out: lpType=0x19fcd4*=0x0, lpData=0x0, lpcbData=0x19fcd8*=0x0) returned 0x2 [0031.976] RegCloseKey (hKey=0x240) returned 0x0 [0031.976] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fcb0 | out: phkResult=0x19fcb0*=0x240) returned 0x0 [0031.976] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fca8, lpData=0x0, lpcbData=0x19fcac*=0x19fc84 | out: lpType=0x19fca8*=0x0, lpData=0x0, lpcbData=0x19fcac*=0x0) returned 0x2 [0031.976] RegCloseKey (hKey=0x240) returned 0x0 [0031.976] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x663498 [0031.976] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x240) returned 0x0 [0031.976] RegEnumKeyExA (in: hKey=0x240, dwIndex=0x0, lpName=0x663498, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.976] RegCloseKey (hKey=0x240) returned 0x0 [0031.976] LocalFree (hMem=0x663498) returned 0x0 [0031.976] LocalFree (hMem=0x660530) returned 0x0 [0031.976] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x1, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.976] RegCloseKey (hKey=0x23c) returned 0x0 [0031.976] LocalFree (hMem=0x662c10) returned 0x0 [0031.976] LocalFree (hMem=0x6719d8) returned 0x0 [0031.976] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x1, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.976] RegCloseKey (hKey=0x238) returned 0x0 [0031.976] LocalFree (hMem=0x666d78) returned 0x0 [0031.976] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Firefox") returned 0x0 [0031.977] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.977] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0031.977] LocalFree (hMem=0x666d78) returned 0x0 [0031.977] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.977] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.977] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.977] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.977] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.977] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.977] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x26, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.977] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.977] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0031.977] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="SeaMonkey") returned 0x0 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.978] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x238) returned 0x0 [0031.978] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x0, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.978] lstrlenA (lpString="Software\\Mozilla") returned 16 [0031.978] lstrlenA (lpString="\\") returned 1 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66ddd0 [0031.978] lstrcpyA (in: lpString1=0x66ddd0, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0031.978] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.978] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0031.978] lstrlenA (lpString="Firefox") returned 7 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x671bd0 [0031.978] lstrcpyA (in: lpString1=0x671bd0, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.978] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.978] LocalFree (hMem=0x66ddd0) returned 0x0 [0031.978] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="SeaMonkey") returned 0x0 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x662c10 [0031.978] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x23c) returned 0x0 [0031.978] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x0, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.978] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0031.978] lstrlenA (lpString="\\") returned 1 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x671b28 [0031.978] lstrcpyA (in: lpString1=0x671b28, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.978] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.978] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0031.978] lstrlenA (lpString="TaskBarIDs") returned 10 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.978] lstrcpyA (in: lpString1=0x660530, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.978] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0031.978] LocalFree (hMem=0x671b28) returned 0x0 [0031.978] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="SeaMonkey") returned 0x0 [0031.978] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x663498 [0031.978] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x240) returned 0x0 [0031.978] RegEnumKeyExA (in: hKey=0x240, dwIndex=0x0, lpName=0x663498, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.978] RegCloseKey (hKey=0x240) returned 0x0 [0031.979] LocalFree (hMem=0x663498) returned 0x0 [0031.979] LocalFree (hMem=0x660530) returned 0x0 [0031.979] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x1, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.979] RegCloseKey (hKey=0x23c) returned 0x0 [0031.979] LocalFree (hMem=0x662c10) returned 0x0 [0031.979] LocalFree (hMem=0x671bd0) returned 0x0 [0031.979] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x1, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.979] RegCloseKey (hKey=0x238) returned 0x0 [0031.979] LocalFree (hMem=0x666d78) returned 0x0 [0031.979] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="SeaMonkey") returned 0x0 [0031.979] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.979] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0031.979] LocalFree (hMem=0x666d78) returned 0x0 [0031.979] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.979] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.979] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.979] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.979] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.980] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.980] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x27, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.980] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.980] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0031.980] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Flock") returned 0x0 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.980] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x238) returned 0x0 [0031.980] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x0, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.980] lstrlenA (lpString="Software\\Mozilla") returned 16 [0031.980] lstrlenA (lpString="\\") returned 1 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66ea50 [0031.980] lstrcpyA (in: lpString1=0x66ea50, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0031.980] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.980] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0031.980] lstrlenA (lpString="Firefox") returned 7 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670ac0 [0031.980] lstrcpyA (in: lpString1=0x670ac0, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.980] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.980] LocalFree (hMem=0x66ea50) returned 0x0 [0031.980] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Flock") returned 0x0 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x662c10 [0031.980] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x23c) returned 0x0 [0031.980] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x0, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.980] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0031.980] lstrlenA (lpString="\\") returned 1 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x670b68 [0031.980] lstrcpyA (in: lpString1=0x670b68, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.980] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.980] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0031.980] lstrlenA (lpString="TaskBarIDs") returned 10 [0031.980] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.980] lstrcpyA (in: lpString1=0x660530, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.980] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0031.981] LocalFree (hMem=0x670b68) returned 0x0 [0031.981] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Flock") returned 0x0 [0031.981] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x663498 [0031.981] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x240) returned 0x0 [0031.981] RegEnumKeyExA (in: hKey=0x240, dwIndex=0x0, lpName=0x663498, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.981] RegCloseKey (hKey=0x240) returned 0x0 [0031.981] LocalFree (hMem=0x663498) returned 0x0 [0031.981] LocalFree (hMem=0x660530) returned 0x0 [0031.981] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x1, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.981] RegCloseKey (hKey=0x23c) returned 0x0 [0031.981] LocalFree (hMem=0x662c10) returned 0x0 [0031.981] LocalFree (hMem=0x670ac0) returned 0x0 [0031.981] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x1, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.981] RegCloseKey (hKey=0x238) returned 0x0 [0031.981] LocalFree (hMem=0x666d78) returned 0x0 [0031.981] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Flock") returned 0x0 [0031.981] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.981] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0031.981] LocalFree (hMem=0x666d78) returned 0x0 [0031.981] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0031.981] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.981] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.981] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.981] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.981] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.981] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.981] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.982] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.982] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0031.982] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0031.982] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x28, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.982] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0031.982] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0031.982] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Mozilla") returned="Mozilla" [0031.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd70 | out: phkResult=0x19fd70*=0x238) returned 0x0 [0031.982] RegQueryValueExA (in: hKey=0x238, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd68, lpData=0x0, lpcbData=0x19fd6c*=0x41303b | out: lpType=0x19fd68*=0x0, lpData=0x0, lpcbData=0x19fd6c*=0x0) returned 0x2 [0031.982] RegCloseKey (hKey=0x238) returned 0x0 [0031.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fd44 | out: phkResult=0x19fd44*=0x238) returned 0x0 [0031.982] RegQueryValueExA (in: hKey=0x238, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd3c, lpData=0x0, lpcbData=0x19fd40*=0x19fd18 | out: lpType=0x19fd3c*=0x0, lpData=0x0, lpcbData=0x19fd40*=0x0) returned 0x2 [0031.982] RegCloseKey (hKey=0x238) returned 0x0 [0031.982] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd18 | out: phkResult=0x19fd18*=0x238) returned 0x0 [0031.982] RegQueryValueExA (in: hKey=0x238, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd10, lpData=0x0, lpcbData=0x19fd14*=0x19fcec | out: lpType=0x19fd10*=0x0, lpData=0x0, lpcbData=0x19fd14*=0x0) returned 0x2 [0031.982] RegCloseKey (hKey=0x238) returned 0x0 [0031.982] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.982] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x238) returned 0x0 [0031.982] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x0, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.982] lstrlenA (lpString="Software\\Mozilla") returned 16 [0031.982] lstrlenA (lpString="\\") returned 1 [0031.982] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66ea50 [0031.982] lstrcpyA (in: lpString1=0x66ea50, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0031.988] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.988] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0031.988] lstrlenA (lpString="Firefox") returned 7 [0031.988] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6719d8 [0031.988] lstrcpyA (in: lpString1=0x6719d8, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0031.988] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.988] LocalFree (hMem=0x66ea50) returned 0x0 [0031.988] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Mozilla") returned="Mozilla\\Firefox" [0031.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd3c | out: phkResult=0x19fd3c*=0x23c) returned 0x0 [0031.988] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd34, lpData=0x0, lpcbData=0x19fd38*=0x6719e1 | out: lpType=0x19fd34*=0x0, lpData=0x0, lpcbData=0x19fd38*=0x0) returned 0x2 [0031.988] RegCloseKey (hKey=0x23c) returned 0x0 [0031.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x23c) returned 0x0 [0031.988] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd08, lpData=0x0, lpcbData=0x19fd0c*=0x19fce4 | out: lpType=0x19fd08*=0x0, lpData=0x0, lpcbData=0x19fd0c*=0x0) returned 0x2 [0031.988] RegCloseKey (hKey=0x23c) returned 0x0 [0031.988] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fce4 | out: phkResult=0x19fce4*=0x23c) returned 0x0 [0031.988] RegQueryValueExA (in: hKey=0x23c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcdc, lpData=0x0, lpcbData=0x19fce0*=0x19fcb8 | out: lpType=0x19fcdc*=0x0, lpData=0x0, lpcbData=0x19fce0*=0x0) returned 0x2 [0031.988] RegCloseKey (hKey=0x23c) returned 0x0 [0031.988] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x662c10 [0031.988] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x23c) returned 0x0 [0031.988] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x0, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0031.988] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0031.988] lstrlenA (lpString="\\") returned 1 [0031.988] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6712a0 [0031.988] lstrcpyA (in: lpString1=0x6712a0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0031.989] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.989] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0031.989] lstrlenA (lpString="TaskBarIDs") returned 10 [0031.989] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x660530 [0031.989] lstrcpyA (in: lpString1=0x660530, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0031.989] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0031.989] LocalFree (hMem=0x6712a0) returned 0x0 [0031.989] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Mozilla") returned="Mozilla\\Firefox\\TaskBarIDs" [0031.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd08 | out: phkResult=0x19fd08*=0x240) returned 0x0 [0031.989] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd00, lpData=0x0, lpcbData=0x19fd04*=0x660539 | out: lpType=0x19fd00*=0x0, lpData=0x0, lpcbData=0x19fd04*=0x0) returned 0x2 [0031.989] RegCloseKey (hKey=0x240) returned 0x0 [0031.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fcdc | out: phkResult=0x19fcdc*=0x240) returned 0x0 [0031.989] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fcd4, lpData=0x0, lpcbData=0x19fcd8*=0x19fcb0 | out: lpType=0x19fcd4*=0x0, lpData=0x0, lpcbData=0x19fcd8*=0x0) returned 0x2 [0031.989] RegCloseKey (hKey=0x240) returned 0x0 [0031.989] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fcb0 | out: phkResult=0x19fcb0*=0x240) returned 0x0 [0031.989] RegQueryValueExA (in: hKey=0x240, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fca8, lpData=0x0, lpcbData=0x19fcac*=0x19fc84 | out: lpType=0x19fca8*=0x0, lpData=0x0, lpcbData=0x19fcac*=0x0) returned 0x2 [0031.989] RegCloseKey (hKey=0x240) returned 0x0 [0031.989] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x663498 [0031.989] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x240) returned 0x0 [0031.989] RegEnumKeyExA (in: hKey=0x240, dwIndex=0x0, lpName=0x663498, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.989] RegCloseKey (hKey=0x240) returned 0x0 [0031.989] LocalFree (hMem=0x663498) returned 0x0 [0031.989] LocalFree (hMem=0x660530) returned 0x0 [0031.989] RegEnumKeyExA (in: hKey=0x23c, dwIndex=0x1, lpName=0x662c10, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.989] RegCloseKey (hKey=0x23c) returned 0x0 [0031.989] LocalFree (hMem=0x662c10) returned 0x0 [0031.989] LocalFree (hMem=0x6719d8) returned 0x0 [0031.989] RegEnumKeyExA (in: hKey=0x238, dwIndex=0x1, lpName=0x666d78, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0031.989] RegCloseKey (hKey=0x238) returned 0x0 [0031.990] LocalFree (hMem=0x666d78) returned 0x0 [0031.990] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Mozilla") returned="Mozilla" [0031.990] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fd70 | out: phkResult=0x19fd70*=0x0) returned 0x2 [0031.990] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fd44 | out: phkResult=0x19fd44*=0x0) returned 0x2 [0031.990] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd18 | out: phkResult=0x19fd18*=0x238) returned 0x0 [0031.990] RegQueryValueExA (in: hKey=0x238, lpValueName="PathToExe", lpReserved=0x0, lpType=0x19fd10, lpData=0x0, lpcbData=0x19fd14*=0x0 | out: lpType=0x19fd10*=0x0, lpData=0x0, lpcbData=0x19fd14*=0x0) returned 0x2 [0031.990] RegCloseKey (hKey=0x238) returned 0x0 [0031.990] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x666d78 [0031.990] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0031.990] LocalFree (hMem=0x666d78) returned 0x0 [0031.990] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0031.990] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.990] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.990] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0031.990] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.990] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.990] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.990] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.991] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0031.991] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0031.991] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x29, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.991] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0031.991] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\LeechFTP", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.991] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.991] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.991] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.992] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.992] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.992] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x2a, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.992] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.992] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0031.992] SHGetFolderPathA (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x0 [0031.993] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop") returned 25 [0031.993] lstrlenA (lpString="\\*.*") returned 4 [0031.993] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x670a18 [0031.993] lstrcpyA (in: lpString1=0x670a18, lpString2="C:\\Users\\Nd9E1FYi\\Desktop" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop") returned="C:\\Users\\Nd9E1FYi\\Desktop" [0031.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\*.*") returned="C:\\Users\\Nd9E1FYi\\Desktop\\*.*" [0031.993] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Desktop\\*.*", lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 0x6556c8 [0031.993] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.993] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.993] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.993] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.993] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.993] StrStrIA (lpFirst="2Z7t7aKAJEYLt.mkv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.993] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.993] StrStrIA (lpFirst="3cczvK.gif", lpSrch="SiteInfo.QFP") returned 0x0 [0031.993] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.993] lstrcmpiA (lpString1=".", lpString2="7r4iWh") returned -1 [0031.993] lstrcmpiA (lpString1="..", lpString2="7r4iWh") returned -1 [0031.993] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop") returned 25 [0031.993] lstrlenA (lpString="\\") returned 1 [0031.993] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0031.993] lstrcpyA (in: lpString1=0x670040, lpString2="C:\\Users\\Nd9E1FYi\\Desktop" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop") returned="C:\\Users\\Nd9E1FYi\\Desktop" [0031.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\" [0031.993] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\") returned 26 [0031.993] lstrlenA (lpString="7r4iWh") returned 6 [0031.993] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x661da8 [0031.993] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\" [0031.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\", lpString2="7r4iWh" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" [0031.993] LocalFree (hMem=0x670040) returned 0x0 [0031.993] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned 32 [0031.993] lstrlenA (lpString="\\*.*") returned 4 [0031.993] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x666d78 [0031.993] lstrcpyA (in: lpString1=0x666d78, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" [0031.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\*.*") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\*.*" [0031.993] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\*.*", lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 0x655708 [0031.994] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.994] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.994] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.994] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.994] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.994] StrStrIA (lpFirst="CBnY2lu.wav", lpSrch="SiteInfo.QFP") returned 0x0 [0031.994] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.994] lstrcmpiA (lpString1=".", lpString2="gTLi6wHcv") returned -1 [0031.994] lstrcmpiA (lpString1="..", lpString2="gTLi6wHcv") returned -1 [0031.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned 32 [0031.994] lstrlenA (lpString="\\") returned 1 [0031.994] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x667630 [0031.994] lstrcpyA (in: lpString1=0x667630, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" [0031.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" [0031.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned 33 [0031.994] lstrlenA (lpString="gTLi6wHcv") returned 9 [0031.994] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6676e0 [0031.994] lstrcpyA (in: lpString1=0x6676e0, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" [0031.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\", lpString2="gTLi6wHcv" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv" [0031.994] LocalFree (hMem=0x667630) returned 0x0 [0031.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv") returned 42 [0031.994] lstrlenA (lpString="\\*.*") returned 4 [0031.994] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x667798 [0031.994] lstrcpyA (in: lpString1=0x667798, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv" [0031.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv\\*.*") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv\\*.*" [0031.994] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\gTLi6wHcv\\*.*", lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 0x655788 [0031.994] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.994] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.994] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.994] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.994] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.994] StrStrIA (lpFirst="BvgnzXPqUVQGCtwGu.m4a", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="Im8g8t.mp3", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="ip4-IIxR4n NCQj.mp3", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="JIXqyV0.m4a", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="N3sbqiFpk7EyZmDipW.avi", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="TdDYftyj03rD.mkv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.995] StrStrIA (lpFirst="zMvJnkSx CeYvRDPys4.png", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 0 [0031.995] FindClose (in: hFindFile=0x655788 | out: hFindFile=0x655788) returned 1 [0031.995] LocalFree (hMem=0x667798) returned 0x0 [0031.995] LocalFree (hMem=0x6676e0) returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.995] StrStrIA (lpFirst="JXe-qRGw.m4a", lpSrch="SiteInfo.QFP") returned 0x0 [0031.995] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.995] lstrcmpiA (lpString1=".", lpString2="kwJm8SY40P") returned -1 [0031.995] lstrcmpiA (lpString1="..", lpString2="kwJm8SY40P") returned -1 [0031.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned 32 [0031.995] lstrlenA (lpString="\\") returned 1 [0031.995] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x667630 [0031.995] lstrcpyA (in: lpString1=0x667630, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh" [0031.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" [0031.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned 33 [0031.995] lstrlenA (lpString="kwJm8SY40P") returned 10 [0031.995] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x6676e0 [0031.995] lstrcpyA (in: lpString1=0x6676e0, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\" [0031.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\", lpString2="kwJm8SY40P" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P" [0031.995] LocalFree (hMem=0x667630) returned 0x0 [0031.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P") returned 43 [0031.995] lstrlenA (lpString="\\*.*") returned 4 [0031.995] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x667798 [0031.995] lstrcpyA (in: lpString1=0x667798, lpString2="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P" [0031.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P\\*.*") returned="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P\\*.*" [0031.995] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Desktop\\7r4iWh\\kwJm8SY40P\\*.*", lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 0x655788 [0031.995] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0031.996] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] StrStrIA (lpFirst="Aeh4XQAONb.jpg", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] StrStrIA (lpFirst="fJi HXQENg-bN1-W.ods", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] StrStrIA (lpFirst="gYLKaWP4gS.gif", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] StrStrIA (lpFirst="QM6or.rtf", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 1 [0031.996] StrStrIA (lpFirst="u2EF1d3.bmp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655788, lpFindFileData=0x19fa8e | out: lpFindFileData=0x19fa8e) returned 0 [0031.996] FindClose (in: hFindFile=0x655788 | out: hFindFile=0x655788) returned 1 [0031.996] LocalFree (hMem=0x667798) returned 0x0 [0031.996] LocalFree (hMem=0x6676e0) returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 1 [0031.996] StrStrIA (lpFirst="LU1o7WtNzBQqDyU0uFx.mkv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x655708, lpFindFileData=0x19fbfa | out: lpFindFileData=0x19fbfa) returned 0 [0031.996] FindClose (in: hFindFile=0x655708 | out: hFindFile=0x655708) returned 1 [0031.996] LocalFree (hMem=0x666d78) returned 0x0 [0031.996] LocalFree (hMem=0x661da8) returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="7vKqT1RiSYWUn.wav", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="7xmS3.bmp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="BBwC1d86SY4z.odp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="CEG5prBbetRVXfN.swf", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="desktop.ini", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="Fv7yR7gn1V6u.png", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="iNoCmkv pN-Cd_O3An4e.m4a", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="K4GUmY5tBsQBaENz.avi", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.996] StrStrIA (lpFirst="kJ3WEOsd.wav", lpSrch="SiteInfo.QFP") returned 0x0 [0031.996] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="Kn70HK2lHZ.mkv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="KorqZ1INT7ym8dUhF.m4a", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="MB0zLsUgscA_QpgM.swf", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="mH GP17b.mp3", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="musYXrQ3SIGO0t.avi", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="N wCG0I3CN.odp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="N1OYHSnZcP.mp4", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="ogOEwU2s1DNCz1W.flv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="p.exe", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="pUbPNpB9o6OR.bmp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="pvb77LB2sVUxDF-5mED2.png", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="U2aX7uM.mkv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="u60TNZew7Ds8n3VMVT.avi", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="Ugn5SWWQP0Hgganf.bmp", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="vK89F7H XVMrAU0-TD9.doc", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="XjZ6x6RP.gif", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="YW7byJYOTEFaxldgjqd.flv", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 1 [0031.997] StrStrIA (lpFirst="_LdVG8dYvsCZZa.docx", lpSrch="SiteInfo.QFP") returned 0x0 [0031.997] FindNextFileA (in: hFindFile=0x6556c8, lpFindFileData=0x19fd66 | out: lpFindFileData=0x19fd66) returned 0 [0031.997] FindClose (in: hFindFile=0x6556c8 | out: hFindFile=0x6556c8) returned 1 [0031.997] LocalFree (hMem=0x670a18) returned 0x0 [0031.997] LocalFree (hMem=0x66eb30) returned 0x0 [0031.997] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="Odin") returned 0x0 [0031.997] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="Odin") returned 0x0 [0031.997] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="Odin") returned 0x0 [0031.997] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="Odin") returned 0x0 [0031.998] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="Odin") returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.998] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.998] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.998] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0031.998] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0031.998] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0031.998] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x2b, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.999] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0031.999] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="WinFTP") returned 0x0 [0031.999] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="WinFTP") returned 0x0 [0031.999] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0031.999] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0031.999] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0031.999] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.000] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.000] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0032.000] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0032.000] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x2c, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.000] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.000] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\\InProcServer32", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0032.000] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\\InProcServer32", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0032.000] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="CLSID\\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\\InProcServer32", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.000] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0032.000] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.001] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.001] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0032.001] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.001] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.001] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0032.001] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0032.001] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x2d, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.001] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.001] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.001] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0032.001] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0032.001] lstrlenA (lpString="\\FTPGetter") returned 10 [0032.001] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x661da8 [0032.001] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0032.001] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\FTPGetter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter" [0032.001] LocalFree (hMem=0x66eb30) returned 0x0 [0032.001] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter") returned 43 [0032.001] lstrlenA (lpString="\\*.*") returned 4 [0032.001] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x66eb30 [0032.001] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter" [0032.001] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter\\*.*" [0032.001] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPGetter\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.001] LocalFree (hMem=0x66eb30) returned 0x0 [0032.001] LocalFree (hMem=0x661da8) returned 0x0 [0032.001] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.001] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0032.002] lstrlenA (lpString="C:\\ProgramData") returned 14 [0032.002] lstrlenA (lpString="\\FTPGetter") returned 10 [0032.002] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6719d8 [0032.002] lstrcpyA (in: lpString1=0x6719d8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0032.002] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\FTPGetter" | out: lpString1="C:\\ProgramData\\FTPGetter") returned="C:\\ProgramData\\FTPGetter" [0032.002] LocalFree (hMem=0x66eb30) returned 0x0 [0032.002] lstrlenA (lpString="C:\\ProgramData\\FTPGetter") returned 24 [0032.002] lstrlenA (lpString="\\*.*") returned 4 [0032.002] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6712a0 [0032.002] lstrcpyA (in: lpString1=0x6712a0, lpString2="C:\\ProgramData\\FTPGetter" | out: lpString1="C:\\ProgramData\\FTPGetter") returned="C:\\ProgramData\\FTPGetter" [0032.002] lstrcatA (in: lpString1="C:\\ProgramData\\FTPGetter", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\FTPGetter\\*.*") returned="C:\\ProgramData\\FTPGetter\\*.*" [0032.002] FindFirstFileA (in: lpFileName="C:\\ProgramData\\FTPGetter\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.002] LocalFree (hMem=0x6712a0) returned 0x0 [0032.002] LocalFree (hMem=0x6719d8) returned 0x0 [0032.002] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.002] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0032.002] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0032.002] lstrlenA (lpString="\\FTPGetter") returned 10 [0032.002] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x661da8 [0032.002] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0032.002] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\FTPGetter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter" [0032.002] LocalFree (hMem=0x66eb30) returned 0x0 [0032.002] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter") returned 41 [0032.002] lstrlenA (lpString="\\*.*") returned 4 [0032.002] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x66eb30 [0032.002] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter" [0032.002] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter\\*.*" [0032.002] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPGetter\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.002] LocalFree (hMem=0x66eb30) returned 0x0 [0032.002] LocalFree (hMem=0x661da8) returned 0x0 [0032.002] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.002] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.002] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0032.002] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.003] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.003] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0032.003] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.003] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.003] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0032.003] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0032.003] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x2e, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.003] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0032.003] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.003] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0032.003] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0032.003] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.003] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x661da8 [0032.003] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0032.003] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" [0032.003] LocalFree (hMem=0x66eb30) returned 0x0 [0032.003] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned 47 [0032.003] lstrlenA (lpString="\\*.*") returned 4 [0032.003] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x66eb30 [0032.003] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" [0032.003] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*" [0032.003] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.003] LocalFree (hMem=0x66eb30) returned 0x0 [0032.003] LocalFree (hMem=0x661da8) returned 0x0 [0032.003] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.004] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0032.004] lstrlenA (lpString="C:\\ProgramData") returned 14 [0032.004] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670430 [0032.004] lstrcpyA (in: lpString1=0x670430, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0032.004] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP") returned="C:\\ProgramData\\Estsoft\\ALFTP" [0032.004] LocalFree (hMem=0x66eb30) returned 0x0 [0032.004] lstrlenA (lpString="C:\\ProgramData\\Estsoft\\ALFTP") returned 28 [0032.004] lstrlenA (lpString="\\*.*") returned 4 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x666d78 [0032.004] lstrcpyA (in: lpString1=0x666d78, lpString2="C:\\ProgramData\\Estsoft\\ALFTP" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP") returned="C:\\ProgramData\\Estsoft\\ALFTP" [0032.004] lstrcatA (in: lpString1="C:\\ProgramData\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP\\*.*") returned="C:\\ProgramData\\Estsoft\\ALFTP\\*.*" [0032.004] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.004] LocalFree (hMem=0x666d78) returned 0x0 [0032.004] LocalFree (hMem=0x670430) returned 0x0 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.004] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0032.004] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0032.004] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x661da8 [0032.004] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0032.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" [0032.004] LocalFree (hMem=0x66eb30) returned 0x0 [0032.004] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned 45 [0032.004] lstrlenA (lpString="\\*.*") returned 4 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x66eb30 [0032.004] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" [0032.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*" [0032.004] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.004] LocalFree (hMem=0x66eb30) returned 0x0 [0032.004] LocalFree (hMem=0x661da8) returned 0x0 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.004] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0032.004] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0032.004] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.004] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x661da8 [0032.005] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0032.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" [0032.005] LocalFree (hMem=0x66eb30) returned 0x0 [0032.005] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned 47 [0032.005] lstrlenA (lpString="\\*.*") returned 4 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x66eb30 [0032.005] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP" [0032.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*" [0032.005] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.005] LocalFree (hMem=0x66eb30) returned 0x0 [0032.005] LocalFree (hMem=0x661da8) returned 0x0 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.005] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\ProgramData") returned 0x0 [0032.005] lstrlenA (lpString="C:\\ProgramData") returned 14 [0032.005] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6712a0 [0032.005] lstrcpyA (in: lpString1=0x6712a0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0032.005] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP") returned="C:\\ProgramData\\Estsoft\\ALFTP" [0032.005] LocalFree (hMem=0x66eb30) returned 0x0 [0032.005] lstrlenA (lpString="C:\\ProgramData\\Estsoft\\ALFTP") returned 28 [0032.005] lstrlenA (lpString="\\*.*") returned 4 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x666d78 [0032.005] lstrcpyA (in: lpString1=0x666d78, lpString2="C:\\ProgramData\\Estsoft\\ALFTP" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP") returned="C:\\ProgramData\\Estsoft\\ALFTP" [0032.005] lstrcatA (in: lpString1="C:\\ProgramData\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Estsoft\\ALFTP\\*.*") returned="C:\\ProgramData\\Estsoft\\ALFTP\\*.*" [0032.005] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.005] LocalFree (hMem=0x666d78) returned 0x0 [0032.005] LocalFree (hMem=0x6712a0) returned 0x0 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x66eb30 [0032.005] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x66eb30 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0032.005] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0032.005] lstrlenA (lpString="\\Estsoft\\ALFTP") returned 14 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x661da8 [0032.005] lstrcpyA (in: lpString1=0x661da8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0032.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" [0032.005] LocalFree (hMem=0x66eb30) returned 0x0 [0032.005] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned 45 [0032.005] lstrlenA (lpString="\\*.*") returned 4 [0032.005] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x66eb30 [0032.006] lstrcpyA (in: lpString1=0x66eb30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP" [0032.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*" [0032.006] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Estsoft\\ALFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0032.006] LocalFree (hMem=0x66eb30) returned 0x0 [0032.006] LocalFree (hMem=0x661da8) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.006] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0032.006] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.006] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0032.006] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0032.006] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0032.006] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x2f, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0032.006] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0032.006] PStoreCreateInstance () returned 0x80004001 [0032.007] CoCreateInstance (in: rclsid=0x4131e0*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x5, riid=0x4131f0*(Data1=0x3c374a41, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppv=0x19fed0 | out: ppv=0x19fed0*=0x657098) returned 0x0 [0037.324] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/JXe-qRGw.m4a", lpSrch="?") returned 0x0 [0037.325] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/JXe-qRGw.m4a") returned 53 [0037.344] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FD") returned 2 [0037.344] lstrlenA (lpString="") returned 0 [0037.344] lstrlenA (lpString="FD") returned 2 [0037.344] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2b90 [0037.344] lstrcpyA (in: lpString1=0x6a2b90, lpString2="" | out: lpString1="") returned="" [0037.344] lstrcatA (in: lpString1="", lpString2="FD" | out: lpString1="FD") returned="FD" [0037.344] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9C") returned 2 [0037.344] lstrlenA (lpString="FD") returned 2 [0037.344] lstrlenA (lpString="9C") returned 2 [0037.344] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a2f80 [0037.345] lstrcpyA (in: lpString1=0x6a2f80, lpString2="FD" | out: lpString1="FD") returned="FD" [0037.345] lstrcatA (in: lpString1="FD", lpString2="9C" | out: lpString1="FD9C") returned="FD9C" [0037.345] LocalFree (hMem=0x6a2b90) returned 0x0 [0037.345] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A2") returned 2 [0037.345] lstrlenA (lpString="FD9C") returned 4 [0037.345] lstrlenA (lpString="A2") returned 2 [0037.345] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2dd0 [0037.345] lstrcpyA (in: lpString1=0x6a2dd0, lpString2="FD9C" | out: lpString1="FD9C") returned="FD9C" [0037.345] lstrcatA (in: lpString1="FD9C", lpString2="A2" | out: lpString1="FD9CA2") returned="FD9CA2" [0037.345] LocalFree (hMem=0x6a2f80) returned 0x0 [0037.345] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0037.345] lstrlenA (lpString="FD9CA2") returned 6 [0037.345] lstrlenA (lpString="35") returned 2 [0037.345] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.345] lstrcpyA (in: lpString1=0x6519e0, lpString2="FD9CA2" | out: lpString1="FD9CA2") returned="FD9CA2" [0037.345] lstrcatA (in: lpString1="FD9CA2", lpString2="35" | out: lpString1="FD9CA235") returned="FD9CA235" [0037.345] LocalFree (hMem=0x6a2dd0) returned 0x0 [0037.345] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0037.345] lstrlenA (lpString="FD9CA235") returned 8 [0037.345] lstrlenA (lpString="18") returned 2 [0037.345] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.345] lstrcpyA (in: lpString1=0x651a78, lpString2="FD9CA235" | out: lpString1="FD9CA235") returned="FD9CA235" [0037.345] lstrcatA (in: lpString1="FD9CA235", lpString2="18" | out: lpString1="FD9CA23518") returned="FD9CA23518" [0037.345] LocalFree (hMem=0x6519e0) returned 0x0 [0037.345] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="17") returned 2 [0037.345] lstrlenA (lpString="FD9CA23518") returned 10 [0037.345] lstrlenA (lpString="17") returned 2 [0037.345] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.345] lstrcpyA (in: lpString1=0x6519e0, lpString2="FD9CA23518" | out: lpString1="FD9CA23518") returned="FD9CA23518" [0037.345] lstrcatA (in: lpString1="FD9CA23518", lpString2="17" | out: lpString1="FD9CA2351817") returned="FD9CA2351817" [0037.345] LocalFree (hMem=0x651a78) returned 0x0 [0037.345] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="33") returned 2 [0037.345] lstrlenA (lpString="FD9CA2351817") returned 12 [0037.345] lstrlenA (lpString="33") returned 2 [0037.345] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.345] lstrcpyA (in: lpString1=0x651a78, lpString2="FD9CA2351817" | out: lpString1="FD9CA2351817") returned="FD9CA2351817" [0037.345] lstrcatA (in: lpString1="FD9CA2351817", lpString2="33" | out: lpString1="FD9CA235181733") returned="FD9CA235181733" [0037.345] LocalFree (hMem=0x6519e0) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="45") returned 2 [0037.346] lstrlenA (lpString="FD9CA235181733") returned 14 [0037.346] lstrlenA (lpString="45") returned 2 [0037.346] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66db50 [0037.346] lstrcpyA (in: lpString1=0x66db50, lpString2="FD9CA235181733" | out: lpString1="FD9CA235181733") returned="FD9CA235181733" [0037.346] lstrcatA (in: lpString1="FD9CA235181733", lpString2="45" | out: lpString1="FD9CA23518173345") returned="FD9CA23518173345" [0037.346] LocalFree (hMem=0x651a78) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="06") returned 2 [0037.346] lstrlenA (lpString="FD9CA23518173345") returned 16 [0037.346] lstrlenA (lpString="06") returned 2 [0037.346] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e910 [0037.346] lstrcpyA (in: lpString1=0x66e910, lpString2="FD9CA23518173345" | out: lpString1="FD9CA23518173345") returned="FD9CA23518173345" [0037.346] lstrcatA (in: lpString1="FD9CA23518173345", lpString2="06" | out: lpString1="FD9CA2351817334506") returned="FD9CA2351817334506" [0037.346] LocalFree (hMem=0x66db50) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="20") returned 2 [0037.346] lstrlenA (lpString="FD9CA2351817334506") returned 18 [0037.346] lstrlenA (lpString="20") returned 2 [0037.346] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e730 [0037.346] lstrcpyA (in: lpString1=0x66e730, lpString2="FD9CA2351817334506" | out: lpString1="FD9CA2351817334506") returned="FD9CA2351817334506" [0037.346] lstrcatA (in: lpString1="FD9CA2351817334506", lpString2="20" | out: lpString1="FD9CA235181733450620") returned="FD9CA235181733450620" [0037.346] LocalFree (hMem=0x66e910) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1F") returned 2 [0037.346] lstrlenA (lpString="FD9CA235181733450620") returned 20 [0037.346] lstrlenA (lpString="1F") returned 2 [0037.346] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e0f0 [0037.346] lstrcpyA (in: lpString1=0x66e0f0, lpString2="FD9CA235181733450620" | out: lpString1="FD9CA235181733450620") returned="FD9CA235181733450620" [0037.346] lstrcatA (in: lpString1="FD9CA235181733450620", lpString2="1F" | out: lpString1="FD9CA2351817334506201F") returned="FD9CA2351817334506201F" [0037.346] LocalFree (hMem=0x66e730) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0037.346] lstrlenA (lpString="FD9CA2351817334506201F") returned 22 [0037.346] lstrlenA (lpString="CB") returned 2 [0037.346] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670b68 [0037.346] lstrcpyA (in: lpString1=0x670b68, lpString2="FD9CA2351817334506201F" | out: lpString1="FD9CA2351817334506201F") returned="FD9CA2351817334506201F" [0037.346] lstrcatA (in: lpString1="FD9CA2351817334506201F", lpString2="CB" | out: lpString1="FD9CA2351817334506201FCB") returned="FD9CA2351817334506201FCB" [0037.346] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.346] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6B") returned 2 [0037.346] lstrlenA (lpString="FD9CA2351817334506201FCB") returned 24 [0037.347] lstrlenA (lpString="6B") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0037.347] lstrcpyA (in: lpString1=0x66ff98, lpString2="FD9CA2351817334506201FCB" | out: lpString1="FD9CA2351817334506201FCB") returned="FD9CA2351817334506201FCB" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB", lpString2="6B" | out: lpString1="FD9CA2351817334506201FCB6B") returned="FD9CA2351817334506201FCB6B" [0037.347] LocalFree (hMem=0x670b68) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EC") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6B") returned 26 [0037.347] lstrlenA (lpString="EC") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0037.347] lstrcpyA (in: lpString1=0x670040, lpString2="FD9CA2351817334506201FCB6B" | out: lpString1="FD9CA2351817334506201FCB6B") returned="FD9CA2351817334506201FCB6B" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6B", lpString2="EC" | out: lpString1="FD9CA2351817334506201FCB6BEC") returned="FD9CA2351817334506201FCB6BEC" [0037.347] LocalFree (hMem=0x66ff98) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EF") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6BEC") returned 28 [0037.347] lstrlenA (lpString="EF") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670388 [0037.347] lstrcpyA (in: lpString1=0x670388, lpString2="FD9CA2351817334506201FCB6BEC" | out: lpString1="FD9CA2351817334506201FCB6BEC") returned="FD9CA2351817334506201FCB6BEC" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BEC", lpString2="EF" | out: lpString1="FD9CA2351817334506201FCB6BECEF") returned="FD9CA2351817334506201FCB6BECEF" [0037.347] LocalFree (hMem=0x670040) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="27") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF") returned 30 [0037.347] lstrlenA (lpString="27") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6519e0 [0037.347] lstrcpyA (in: lpString1=0x6519e0, lpString2="FD9CA2351817334506201FCB6BECEF" | out: lpString1="FD9CA2351817334506201FCB6BECEF") returned="FD9CA2351817334506201FCB6BECEF" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF", lpString2="27" | out: lpString1="FD9CA2351817334506201FCB6BECEF27") returned="FD9CA2351817334506201FCB6BECEF27" [0037.347] LocalFree (hMem=0x670388) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="83") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF27") returned 32 [0037.347] lstrlenA (lpString="83") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x651a90 [0037.347] lstrcpyA (in: lpString1=0x651a90, lpString2="FD9CA2351817334506201FCB6BECEF27" | out: lpString1="FD9CA2351817334506201FCB6BECEF27") returned="FD9CA2351817334506201FCB6BECEF27" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF27", lpString2="83" | out: lpString1="FD9CA2351817334506201FCB6BECEF2783") returned="FD9CA2351817334506201FCB6BECEF2783" [0037.347] LocalFree (hMem=0x6519e0) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="78") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF2783") returned 34 [0037.347] lstrlenA (lpString="78") returned 2 [0037.347] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679ba8 [0037.347] lstrcpyA (in: lpString1=0x679ba8, lpString2="FD9CA2351817334506201FCB6BECEF2783" | out: lpString1="FD9CA2351817334506201FCB6BECEF2783") returned="FD9CA2351817334506201FCB6BECEF2783" [0037.347] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF2783", lpString2="78" | out: lpString1="FD9CA2351817334506201FCB6BECEF278378") returned="FD9CA2351817334506201FCB6BECEF278378" [0037.347] LocalFree (hMem=0x651a90) returned 0x0 [0037.347] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="07") returned 2 [0037.347] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF278378") returned 36 [0037.348] lstrlenA (lpString="07") returned 2 [0037.348] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679af8 [0037.348] lstrcpyA (in: lpString1=0x679af8, lpString2="FD9CA2351817334506201FCB6BECEF278378" | out: lpString1="FD9CA2351817334506201FCB6BECEF278378") returned="FD9CA2351817334506201FCB6BECEF278378" [0037.348] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF278378", lpString2="07" | out: lpString1="FD9CA2351817334506201FCB6BECEF27837807") returned="FD9CA2351817334506201FCB6BECEF27837807" [0037.348] LocalFree (hMem=0x679ba8) returned 0x0 [0037.348] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0037.348] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF27837807") returned 38 [0037.348] lstrlenA (lpString="89") returned 2 [0037.348] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.348] lstrcpyA (in: lpString1=0x6519e0, lpString2="FD9CA2351817334506201FCB6BECEF27837807" | out: lpString1="FD9CA2351817334506201FCB6BECEF27837807") returned="FD9CA2351817334506201FCB6BECEF27837807" [0037.348] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF27837807", lpString2="89" | out: lpString1="FD9CA2351817334506201FCB6BECEF2783780789") returned="FD9CA2351817334506201FCB6BECEF2783780789" [0037.348] LocalFree (hMem=0x679af8) returned 0x0 [0037.348] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1F") returned 2 [0037.348] lstrlenA (lpString="FD9CA2351817334506201FCB6BECEF2783780789") returned 40 [0037.348] lstrlenA (lpString="1F") returned 2 [0037.348] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.348] lstrcpyA (in: lpString1=0x651a98, lpString2="FD9CA2351817334506201FCB6BECEF2783780789" | out: lpString1="FD9CA2351817334506201FCB6BECEF2783780789") returned="FD9CA2351817334506201FCB6BECEF2783780789" [0037.348] lstrcatA (in: lpString1="FD9CA2351817334506201FCB6BECEF2783780789", lpString2="1F" | out: lpString1="FD9CA2351817334506201FCB6BECEF27837807891F") returned="FD9CA2351817334506201FCB6BECEF27837807891F" [0037.348] LocalFree (hMem=0x6519e0) returned 0x0 [0037.348] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.348] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.348] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.348] LocalFree (hMem=0x651a98) returned 0x0 [0037.348] CoTaskMemFree (pv=0x662528) [0037.349] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Pictures/3LhrNA23bcfoH9yaX0/9O1YguwzmV0Xps.bmp", lpSrch="?") returned 0x0 [0037.349] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Pictures/3LhrNA23bcfoH9yaX0/9O1YguwzmV0Xps.bmp") returned 72 [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="48") returned 2 [0037.397] lstrlenA (lpString="") returned 0 [0037.397] lstrlenA (lpString="48") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3010 [0037.397] lstrcpyA (in: lpString1=0x6a3010, lpString2="" | out: lpString1="") returned="" [0037.397] lstrcatA (in: lpString1="", lpString2="48" | out: lpString1="48") returned="48" [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DC") returned 2 [0037.397] lstrlenA (lpString="48") returned 2 [0037.397] lstrlenA (lpString="DC") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3130 [0037.397] lstrcpyA (in: lpString1=0x6a3130, lpString2="48" | out: lpString1="48") returned="48" [0037.397] lstrcatA (in: lpString1="48", lpString2="DC" | out: lpString1="48DC") returned="48DC" [0037.397] LocalFree (hMem=0x6a3010) returned 0x0 [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9C") returned 2 [0037.397] lstrlenA (lpString="48DC") returned 4 [0037.397] lstrlenA (lpString="9C") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3010 [0037.397] lstrcpyA (in: lpString1=0x6a3010, lpString2="48DC" | out: lpString1="48DC") returned="48DC" [0037.397] lstrcatA (in: lpString1="48DC", lpString2="9C" | out: lpString1="48DC9C") returned="48DC9C" [0037.397] LocalFree (hMem=0x6a3130) returned 0x0 [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="47") returned 2 [0037.397] lstrlenA (lpString="48DC9C") returned 6 [0037.397] lstrlenA (lpString="47") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.397] lstrcpyA (in: lpString1=0x6519e0, lpString2="48DC9C" | out: lpString1="48DC9C") returned="48DC9C" [0037.397] lstrcatA (in: lpString1="48DC9C", lpString2="47" | out: lpString1="48DC9C47") returned="48DC9C47" [0037.397] LocalFree (hMem=0x6a3010) returned 0x0 [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="05") returned 2 [0037.397] lstrlenA (lpString="48DC9C47") returned 8 [0037.397] lstrlenA (lpString="05") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.397] lstrcpyA (in: lpString1=0x651a78, lpString2="48DC9C47" | out: lpString1="48DC9C47") returned="48DC9C47" [0037.397] lstrcatA (in: lpString1="48DC9C47", lpString2="05" | out: lpString1="48DC9C4705") returned="48DC9C4705" [0037.397] LocalFree (hMem=0x6519e0) returned 0x0 [0037.397] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="60") returned 2 [0037.397] lstrlenA (lpString="48DC9C4705") returned 10 [0037.397] lstrlenA (lpString="60") returned 2 [0037.397] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.397] lstrcpyA (in: lpString1=0x6519e0, lpString2="48DC9C4705" | out: lpString1="48DC9C4705") returned="48DC9C4705" [0037.398] lstrcatA (in: lpString1="48DC9C4705", lpString2="60" | out: lpString1="48DC9C470560") returned="48DC9C470560" [0037.398] LocalFree (hMem=0x651a78) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="13") returned 2 [0037.398] lstrlenA (lpString="48DC9C470560") returned 12 [0037.398] lstrlenA (lpString="13") returned 2 [0037.398] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.398] lstrcpyA (in: lpString1=0x651a78, lpString2="48DC9C470560" | out: lpString1="48DC9C470560") returned="48DC9C470560" [0037.398] lstrcatA (in: lpString1="48DC9C470560", lpString2="13" | out: lpString1="48DC9C47056013") returned="48DC9C47056013" [0037.398] LocalFree (hMem=0x6519e0) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="01") returned 2 [0037.398] lstrlenA (lpString="48DC9C47056013") returned 14 [0037.398] lstrlenA (lpString="01") returned 2 [0037.398] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e0f0 [0037.398] lstrcpyA (in: lpString1=0x66e0f0, lpString2="48DC9C47056013" | out: lpString1="48DC9C47056013") returned="48DC9C47056013" [0037.398] lstrcatA (in: lpString1="48DC9C47056013", lpString2="01" | out: lpString1="48DC9C4705601301") returned="48DC9C4705601301" [0037.398] LocalFree (hMem=0x651a78) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0037.398] lstrlenA (lpString="48DC9C4705601301") returned 16 [0037.398] lstrlenA (lpString="82") returned 2 [0037.398] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dd30 [0037.398] lstrcpyA (in: lpString1=0x66dd30, lpString2="48DC9C4705601301" | out: lpString1="48DC9C4705601301") returned="48DC9C4705601301" [0037.398] lstrcatA (in: lpString1="48DC9C4705601301", lpString2="82" | out: lpString1="48DC9C470560130182") returned="48DC9C470560130182" [0037.398] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0037.398] lstrlenA (lpString="48DC9C470560130182") returned 18 [0037.398] lstrlenA (lpString="CB") returned 2 [0037.398] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e370 [0037.398] lstrcpyA (in: lpString1=0x66e370, lpString2="48DC9C470560130182" | out: lpString1="48DC9C470560130182") returned="48DC9C470560130182" [0037.398] lstrcatA (in: lpString1="48DC9C470560130182", lpString2="CB" | out: lpString1="48DC9C470560130182CB") returned="48DC9C470560130182CB" [0037.398] LocalFree (hMem=0x66dd30) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="70") returned 2 [0037.398] lstrlenA (lpString="48DC9C470560130182CB") returned 20 [0037.398] lstrlenA (lpString="70") returned 2 [0037.398] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0037.398] lstrcpyA (in: lpString1=0x66e910, lpString2="48DC9C470560130182CB" | out: lpString1="48DC9C470560130182CB") returned="48DC9C470560130182CB" [0037.398] lstrcatA (in: lpString1="48DC9C470560130182CB", lpString2="70" | out: lpString1="48DC9C470560130182CB70") returned="48DC9C470560130182CB70" [0037.398] LocalFree (hMem=0x66e370) returned 0x0 [0037.398] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F1") returned 2 [0037.398] lstrlenA (lpString="48DC9C470560130182CB70") returned 22 [0037.398] lstrlenA (lpString="F1") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.399] lstrcpyA (in: lpString1=0x66ff98, lpString2="48DC9C470560130182CB70" | out: lpString1="48DC9C470560130182CB70") returned="48DC9C470560130182CB70" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70", lpString2="F1" | out: lpString1="48DC9C470560130182CB70F1") returned="48DC9C470560130182CB70F1" [0037.399] LocalFree (hMem=0x66e910) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F1") returned 24 [0037.399] lstrlenA (lpString="93") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670388 [0037.399] lstrcpyA (in: lpString1=0x670388, lpString2="48DC9C470560130182CB70F1" | out: lpString1="48DC9C470560130182CB70F1") returned="48DC9C470560130182CB70F1" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70F1", lpString2="93" | out: lpString1="48DC9C470560130182CB70F193") returned="48DC9C470560130182CB70F193" [0037.399] LocalFree (hMem=0x66ff98) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="10") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F193") returned 26 [0037.399] lstrlenA (lpString="10") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.399] lstrcpyA (in: lpString1=0x66ff98, lpString2="48DC9C470560130182CB70F193" | out: lpString1="48DC9C470560130182CB70F193") returned="48DC9C470560130182CB70F193" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70F193", lpString2="10" | out: lpString1="48DC9C470560130182CB70F19310") returned="48DC9C470560130182CB70F19310" [0037.399] LocalFree (hMem=0x670388) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E8") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F19310") returned 28 [0037.399] lstrlenA (lpString="E8") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6708c8 [0037.399] lstrcpyA (in: lpString1=0x6708c8, lpString2="48DC9C470560130182CB70F19310" | out: lpString1="48DC9C470560130182CB70F19310") returned="48DC9C470560130182CB70F19310" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310", lpString2="E8" | out: lpString1="48DC9C470560130182CB70F19310E8") returned="48DC9C470560130182CB70F19310E8" [0037.399] LocalFree (hMem=0x66ff98) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F19310E8") returned 30 [0037.399] lstrlenA (lpString="FF") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678ff8 [0037.399] lstrcpyA (in: lpString1=0x678ff8, lpString2="48DC9C470560130182CB70F19310E8" | out: lpString1="48DC9C470560130182CB70F19310E8") returned="48DC9C470560130182CB70F19310E8" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8", lpString2="FF" | out: lpString1="48DC9C470560130182CB70F19310E8FF") returned="48DC9C470560130182CB70F19310E8FF" [0037.399] LocalFree (hMem=0x6708c8) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="08") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F19310E8FF") returned 32 [0037.399] lstrlenA (lpString="08") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679418 [0037.399] lstrcpyA (in: lpString1=0x679418, lpString2="48DC9C470560130182CB70F19310E8FF" | out: lpString1="48DC9C470560130182CB70F19310E8FF") returned="48DC9C470560130182CB70F19310E8FF" [0037.399] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8FF", lpString2="08" | out: lpString1="48DC9C470560130182CB70F19310E8FF08") returned="48DC9C470560130182CB70F19310E8FF08" [0037.399] LocalFree (hMem=0x678ff8) returned 0x0 [0037.399] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A7") returned 2 [0037.399] lstrlenA (lpString="48DC9C470560130182CB70F19310E8FF08") returned 34 [0037.399] lstrlenA (lpString="A7") returned 2 [0037.399] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679628 [0037.399] lstrcpyA (in: lpString1=0x679628, lpString2="48DC9C470560130182CB70F19310E8FF08" | out: lpString1="48DC9C470560130182CB70F19310E8FF08") returned="48DC9C470560130182CB70F19310E8FF08" [0037.400] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8FF08", lpString2="A7" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A7") returned="48DC9C470560130182CB70F19310E8FF08A7" [0037.400] LocalFree (hMem=0x679418) returned 0x0 [0037.400] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="99") returned 2 [0037.400] lstrlenA (lpString="48DC9C470560130182CB70F19310E8FF08A7") returned 36 [0037.400] lstrlenA (lpString="99") returned 2 [0037.400] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679c58 [0037.400] lstrcpyA (in: lpString1=0x679c58, lpString2="48DC9C470560130182CB70F19310E8FF08A7" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A7") returned="48DC9C470560130182CB70F19310E8FF08A7" [0037.400] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8FF08A7", lpString2="99" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A799") returned="48DC9C470560130182CB70F19310E8FF08A799" [0037.400] LocalFree (hMem=0x679628) returned 0x0 [0037.400] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.400] lstrlenA (lpString="48DC9C470560130182CB70F19310E8FF08A799") returned 38 [0037.400] lstrlenA (lpString="94") returned 2 [0037.400] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.400] lstrcpyA (in: lpString1=0x6519e0, lpString2="48DC9C470560130182CB70F19310E8FF08A799" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A799") returned="48DC9C470560130182CB70F19310E8FF08A799" [0037.400] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8FF08A799", lpString2="94" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A79994") returned="48DC9C470560130182CB70F19310E8FF08A79994" [0037.400] LocalFree (hMem=0x679c58) returned 0x0 [0037.400] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.400] lstrlenA (lpString="48DC9C470560130182CB70F19310E8FF08A79994") returned 40 [0037.400] lstrlenA (lpString="94") returned 2 [0037.400] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.400] lstrcpyA (in: lpString1=0x651a98, lpString2="48DC9C470560130182CB70F19310E8FF08A79994" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A79994") returned="48DC9C470560130182CB70F19310E8FF08A79994" [0037.400] lstrcatA (in: lpString1="48DC9C470560130182CB70F19310E8FF08A79994", lpString2="94" | out: lpString1="48DC9C470560130182CB70F19310E8FF08A7999494") returned="48DC9C470560130182CB70F19310E8FF08A7999494" [0037.400] LocalFree (hMem=0x6519e0) returned 0x0 [0037.400] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.400] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.400] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.400] LocalFree (hMem=0x651a98) returned 0x0 [0037.400] CoTaskMemFree (pv=0x66e2d0) [0037.400] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/0i25tov2wpXGSaM.xlsx", lpSrch="?") returned 0x0 [0037.400] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/0i25tov2wpXGSaM.xlsx") returned 56 [0037.432] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C3") returned 2 [0037.432] lstrlenA (lpString="") returned 0 [0037.432] lstrlenA (lpString="C3") returned 2 [0037.432] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a31c0 [0037.432] lstrcpyA (in: lpString1=0x6a31c0, lpString2="" | out: lpString1="") returned="" [0037.432] lstrcatA (in: lpString1="", lpString2="C3" | out: lpString1="C3") returned="C3" [0037.432] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EC") returned 2 [0037.432] lstrlenA (lpString="C3") returned 2 [0037.432] lstrlenA (lpString="EC") returned 2 [0037.432] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3520 [0037.432] lstrcpyA (in: lpString1=0x6a3520, lpString2="C3" | out: lpString1="C3") returned="C3" [0037.432] lstrcatA (in: lpString1="C3", lpString2="EC" | out: lpString1="C3EC") returned="C3EC" [0037.432] LocalFree (hMem=0x6a31c0) returned 0x0 [0037.432] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0037.432] lstrlenA (lpString="C3EC") returned 4 [0037.432] lstrlenA (lpString="A3") returned 2 [0037.432] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a35b0 [0037.432] lstrcpyA (in: lpString1=0x6a35b0, lpString2="C3EC" | out: lpString1="C3EC") returned="C3EC" [0037.432] lstrcatA (in: lpString1="C3EC", lpString2="A3" | out: lpString1="C3ECA3") returned="C3ECA3" [0037.432] LocalFree (hMem=0x6a3520) returned 0x0 [0037.432] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CC") returned 2 [0037.432] lstrlenA (lpString="C3ECA3") returned 6 [0037.432] lstrlenA (lpString="CC") returned 2 [0037.432] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.432] lstrcpyA (in: lpString1=0x6519e0, lpString2="C3ECA3" | out: lpString1="C3ECA3") returned="C3ECA3" [0037.432] lstrcatA (in: lpString1="C3ECA3", lpString2="CC" | out: lpString1="C3ECA3CC") returned="C3ECA3CC" [0037.432] LocalFree (hMem=0x6a35b0) returned 0x0 [0037.432] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="53") returned 2 [0037.432] lstrlenA (lpString="C3ECA3CC") returned 8 [0037.432] lstrlenA (lpString="53") returned 2 [0037.432] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.432] lstrcpyA (in: lpString1=0x651a78, lpString2="C3ECA3CC" | out: lpString1="C3ECA3CC") returned="C3ECA3CC" [0037.432] lstrcatA (in: lpString1="C3ECA3CC", lpString2="53" | out: lpString1="C3ECA3CC53") returned="C3ECA3CC53" [0037.433] LocalFree (hMem=0x6519e0) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="08") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC53") returned 10 [0037.433] lstrlenA (lpString="08") returned 2 [0037.433] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.433] lstrcpyA (in: lpString1=0x6519e0, lpString2="C3ECA3CC53" | out: lpString1="C3ECA3CC53") returned="C3ECA3CC53" [0037.433] lstrcatA (in: lpString1="C3ECA3CC53", lpString2="08" | out: lpString1="C3ECA3CC5308") returned="C3ECA3CC5308" [0037.433] LocalFree (hMem=0x651a78) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="86") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC5308") returned 12 [0037.433] lstrlenA (lpString="86") returned 2 [0037.433] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.433] lstrcpyA (in: lpString1=0x651a78, lpString2="C3ECA3CC5308" | out: lpString1="C3ECA3CC5308") returned="C3ECA3CC5308" [0037.433] lstrcatA (in: lpString1="C3ECA3CC5308", lpString2="86" | out: lpString1="C3ECA3CC530886") returned="C3ECA3CC530886" [0037.433] LocalFree (hMem=0x6519e0) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E2") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC530886") returned 14 [0037.433] lstrlenA (lpString="E2") returned 2 [0037.433] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e0f0 [0037.433] lstrcpyA (in: lpString1=0x66e0f0, lpString2="C3ECA3CC530886" | out: lpString1="C3ECA3CC530886") returned="C3ECA3CC530886" [0037.433] lstrcatA (in: lpString1="C3ECA3CC530886", lpString2="E2" | out: lpString1="C3ECA3CC530886E2") returned="C3ECA3CC530886E2" [0037.433] LocalFree (hMem=0x651a78) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC530886E2") returned 16 [0037.433] lstrlenA (lpString="93") returned 2 [0037.433] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e910 [0037.433] lstrcpyA (in: lpString1=0x66e910, lpString2="C3ECA3CC530886E2" | out: lpString1="C3ECA3CC530886E2") returned="C3ECA3CC530886E2" [0037.433] lstrcatA (in: lpString1="C3ECA3CC530886E2", lpString2="93" | out: lpString1="C3ECA3CC530886E293") returned="C3ECA3CC530886E293" [0037.433] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4E") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC530886E293") returned 18 [0037.433] lstrlenA (lpString="4E") returned 2 [0037.433] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dbf0 [0037.433] lstrcpyA (in: lpString1=0x66dbf0, lpString2="C3ECA3CC530886E293" | out: lpString1="C3ECA3CC530886E293") returned="C3ECA3CC530886E293" [0037.433] lstrcatA (in: lpString1="C3ECA3CC530886E293", lpString2="4E" | out: lpString1="C3ECA3CC530886E2934E") returned="C3ECA3CC530886E2934E" [0037.433] LocalFree (hMem=0x66e910) returned 0x0 [0037.433] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5B") returned 2 [0037.433] lstrlenA (lpString="C3ECA3CC530886E2934E") returned 20 [0037.433] lstrlenA (lpString="5B") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0037.434] lstrcpyA (in: lpString1=0x66e910, lpString2="C3ECA3CC530886E2934E" | out: lpString1="C3ECA3CC530886E2934E") returned="C3ECA3CC530886E2934E" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E", lpString2="5B" | out: lpString1="C3ECA3CC530886E2934E5B") returned="C3ECA3CC530886E2934E5B" [0037.434] LocalFree (hMem=0x66dbf0) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BB") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5B") returned 22 [0037.434] lstrlenA (lpString="BB") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.434] lstrcpyA (in: lpString1=0x66ff98, lpString2="C3ECA3CC530886E2934E5B" | out: lpString1="C3ECA3CC530886E2934E5B") returned="C3ECA3CC530886E2934E5B" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5B", lpString2="BB" | out: lpString1="C3ECA3CC530886E2934E5BBB") returned="C3ECA3CC530886E2934E5BBB" [0037.434] LocalFree (hMem=0x66e910) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="71") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB") returned 24 [0037.434] lstrlenA (lpString="71") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6708c8 [0037.434] lstrcpyA (in: lpString1=0x6708c8, lpString2="C3ECA3CC530886E2934E5BBB" | out: lpString1="C3ECA3CC530886E2934E5BBB") returned="C3ECA3CC530886E2934E5BBB" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB", lpString2="71" | out: lpString1="C3ECA3CC530886E2934E5BBB71") returned="C3ECA3CC530886E2934E5BBB71" [0037.434] LocalFree (hMem=0x66ff98) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B9") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71") returned 26 [0037.434] lstrlenA (lpString="B9") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.434] lstrcpyA (in: lpString1=0x66ff98, lpString2="C3ECA3CC530886E2934E5BBB71" | out: lpString1="C3ECA3CC530886E2934E5BBB71") returned="C3ECA3CC530886E2934E5BBB71" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71", lpString2="B9" | out: lpString1="C3ECA3CC530886E2934E5BBB71B9") returned="C3ECA3CC530886E2934E5BBB71B9" [0037.434] LocalFree (hMem=0x6708c8) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="16") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B9") returned 28 [0037.434] lstrlenA (lpString="16") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670628 [0037.434] lstrcpyA (in: lpString1=0x670628, lpString2="C3ECA3CC530886E2934E5BBB71B9" | out: lpString1="C3ECA3CC530886E2934E5BBB71B9") returned="C3ECA3CC530886E2934E5BBB71B9" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B9", lpString2="16" | out: lpString1="C3ECA3CC530886E2934E5BBB71B916") returned="C3ECA3CC530886E2934E5BBB71B916" [0037.434] LocalFree (hMem=0x66ff98) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="56") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B916") returned 30 [0037.434] lstrlenA (lpString="56") returned 2 [0037.434] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6792b8 [0037.434] lstrcpyA (in: lpString1=0x6792b8, lpString2="C3ECA3CC530886E2934E5BBB71B916" | out: lpString1="C3ECA3CC530886E2934E5BBB71B916") returned="C3ECA3CC530886E2934E5BBB71B916" [0037.434] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B916", lpString2="56" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656") returned="C3ECA3CC530886E2934E5BBB71B91656" [0037.434] LocalFree (hMem=0x670628) returned 0x0 [0037.434] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B1") returned 2 [0037.434] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B91656") returned 32 [0037.435] lstrlenA (lpString="B1") returned 2 [0037.435] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679af8 [0037.435] lstrcpyA (in: lpString1=0x679af8, lpString2="C3ECA3CC530886E2934E5BBB71B91656" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656") returned="C3ECA3CC530886E2934E5BBB71B91656" [0037.435] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B91656", lpString2="B1" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B1") returned="C3ECA3CC530886E2934E5BBB71B91656B1" [0037.435] LocalFree (hMem=0x6792b8) returned 0x0 [0037.435] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0D") returned 2 [0037.435] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B91656B1") returned 34 [0037.435] lstrlenA (lpString="0D") returned 2 [0037.435] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679838 [0037.435] lstrcpyA (in: lpString1=0x679838, lpString2="C3ECA3CC530886E2934E5BBB71B91656B1" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B1") returned="C3ECA3CC530886E2934E5BBB71B91656B1" [0037.435] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B91656B1", lpString2="0D" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10D") returned="C3ECA3CC530886E2934E5BBB71B91656B10D" [0037.435] LocalFree (hMem=0x679af8) returned 0x0 [0037.435] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0037.435] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B91656B10D") returned 36 [0037.435] lstrlenA (lpString="C7") returned 2 [0037.435] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679af8 [0037.435] lstrcpyA (in: lpString1=0x679af8, lpString2="C3ECA3CC530886E2934E5BBB71B91656B10D" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10D") returned="C3ECA3CC530886E2934E5BBB71B91656B10D" [0037.435] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10D", lpString2="C7" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7") returned="C3ECA3CC530886E2934E5BBB71B91656B10DC7" [0037.435] LocalFree (hMem=0x679838) returned 0x0 [0037.435] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AF") returned 2 [0037.435] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B91656B10DC7") returned 38 [0037.435] lstrlenA (lpString="AF") returned 2 [0037.435] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.435] lstrcpyA (in: lpString1=0x6519e0, lpString2="C3ECA3CC530886E2934E5BBB71B91656B10DC7" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7") returned="C3ECA3CC530886E2934E5BBB71B91656B10DC7" [0037.435] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7", lpString2="AF" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF") returned="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF" [0037.435] LocalFree (hMem=0x679af8) returned 0x0 [0037.435] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A2") returned 2 [0037.435] lstrlenA (lpString="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF") returned 40 [0037.435] lstrlenA (lpString="A2") returned 2 [0037.435] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.435] lstrcpyA (in: lpString1=0x651a98, lpString2="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF") returned="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF" [0037.435] lstrcatA (in: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7AF", lpString2="A2" | out: lpString1="C3ECA3CC530886E2934E5BBB71B91656B10DC7AFA2") returned="C3ECA3CC530886E2934E5BBB71B91656B10DC7AFA2" [0037.435] LocalFree (hMem=0x6519e0) returned 0x0 [0037.435] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.435] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.435] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.436] LocalFree (hMem=0x651a98) returned 0x0 [0037.436] CoTaskMemFree (pv=0x64f1d8) [0037.436] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/xUJQqtrrL.mp3", lpSrch="?") returned 0x0 [0037.436] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/xUJQqtrrL.mp3") returned 55 [0037.454] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0037.454] lstrlenA (lpString="") returned 0 [0037.454] lstrlenA (lpString="A3") returned 2 [0037.454] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a36d0 [0037.454] lstrcpyA (in: lpString1=0x6a36d0, lpString2="" | out: lpString1="") returned="" [0037.454] lstrcatA (in: lpString1="", lpString2="A3" | out: lpString1="A3") returned="A3" [0037.454] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="53") returned 2 [0037.454] lstrlenA (lpString="A3") returned 2 [0037.454] lstrlenA (lpString="53") returned 2 [0037.454] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a35b0 [0037.454] lstrcpyA (in: lpString1=0x6a35b0, lpString2="A3" | out: lpString1="A3") returned="A3" [0037.454] lstrcatA (in: lpString1="A3", lpString2="53" | out: lpString1="A353") returned="A353" [0037.454] LocalFree (hMem=0x6a36d0) returned 0x0 [0037.454] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0037.454] lstrlenA (lpString="A353") returned 4 [0037.454] lstrlenA (lpString="18") returned 2 [0037.454] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a39a0 [0037.454] lstrcpyA (in: lpString1=0x6a39a0, lpString2="A353" | out: lpString1="A353") returned="A353" [0037.454] lstrcatA (in: lpString1="A353", lpString2="18" | out: lpString1="A35318") returned="A35318" [0037.454] LocalFree (hMem=0x6a35b0) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.455] lstrlenA (lpString="A35318") returned 6 [0037.455] lstrlenA (lpString="54") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.455] lstrcpyA (in: lpString1=0x6519e0, lpString2="A35318" | out: lpString1="A35318") returned="A35318" [0037.455] lstrcatA (in: lpString1="A35318", lpString2="54" | out: lpString1="A3531854") returned="A3531854" [0037.455] LocalFree (hMem=0x6a39a0) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9E") returned 2 [0037.455] lstrlenA (lpString="A3531854") returned 8 [0037.455] lstrlenA (lpString="9E") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.455] lstrcpyA (in: lpString1=0x651a78, lpString2="A3531854" | out: lpString1="A3531854") returned="A3531854" [0037.455] lstrcatA (in: lpString1="A3531854", lpString2="9E" | out: lpString1="A35318549E") returned="A35318549E" [0037.455] LocalFree (hMem=0x6519e0) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F9") returned 2 [0037.455] lstrlenA (lpString="A35318549E") returned 10 [0037.455] lstrlenA (lpString="F9") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.455] lstrcpyA (in: lpString1=0x6519e0, lpString2="A35318549E" | out: lpString1="A35318549E") returned="A35318549E" [0037.455] lstrcatA (in: lpString1="A35318549E", lpString2="F9" | out: lpString1="A35318549EF9") returned="A35318549EF9" [0037.455] LocalFree (hMem=0x651a78) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="11") returned 2 [0037.455] lstrlenA (lpString="A35318549EF9") returned 12 [0037.455] lstrlenA (lpString="11") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.455] lstrcpyA (in: lpString1=0x651a78, lpString2="A35318549EF9" | out: lpString1="A35318549EF9") returned="A35318549EF9" [0037.455] lstrcatA (in: lpString1="A35318549EF9", lpString2="11" | out: lpString1="A35318549EF911") returned="A35318549EF911" [0037.455] LocalFree (hMem=0x6519e0) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E0") returned 2 [0037.455] lstrlenA (lpString="A35318549EF911") returned 14 [0037.455] lstrlenA (lpString="E0") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e550 [0037.455] lstrcpyA (in: lpString1=0x66e550, lpString2="A35318549EF911" | out: lpString1="A35318549EF911") returned="A35318549EF911" [0037.455] lstrcatA (in: lpString1="A35318549EF911", lpString2="E0" | out: lpString1="A35318549EF911E0") returned="A35318549EF911E0" [0037.455] LocalFree (hMem=0x651a78) returned 0x0 [0037.455] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A4") returned 2 [0037.455] lstrlenA (lpString="A35318549EF911E0") returned 16 [0037.455] lstrlenA (lpString="A4") returned 2 [0037.455] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e0f0 [0037.456] lstrcpyA (in: lpString1=0x66e0f0, lpString2="A35318549EF911E0" | out: lpString1="A35318549EF911E0") returned="A35318549EF911E0" [0037.456] lstrcatA (in: lpString1="A35318549EF911E0", lpString2="A4" | out: lpString1="A35318549EF911E0A4") returned="A35318549EF911E0A4" [0037.456] LocalFree (hMem=0x66e550) returned 0x0 [0037.456] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5C") returned 2 [0037.456] lstrlenA (lpString="A35318549EF911E0A4") returned 18 [0037.456] lstrlenA (lpString="5C") returned 2 [0037.456] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66ea50 [0037.456] lstrcpyA (in: lpString1=0x66ea50, lpString2="A35318549EF911E0A4" | out: lpString1="A35318549EF911E0A4") returned="A35318549EF911E0A4" [0037.456] lstrcatA (in: lpString1="A35318549EF911E0A4", lpString2="5C" | out: lpString1="A35318549EF911E0A45C") returned="A35318549EF911E0A45C" [0037.456] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.456] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DA") returned 2 [0037.456] lstrlenA (lpString="A35318549EF911E0A45C") returned 20 [0037.456] lstrlenA (lpString="DA") returned 2 [0037.456] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e0f0 [0037.456] lstrcpyA (in: lpString1=0x66e0f0, lpString2="A35318549EF911E0A45C" | out: lpString1="A35318549EF911E0A45C") returned="A35318549EF911E0A45C" [0037.456] lstrcatA (in: lpString1="A35318549EF911E0A45C", lpString2="DA" | out: lpString1="A35318549EF911E0A45CDA") returned="A35318549EF911E0A45CDA" [0037.456] LocalFree (hMem=0x66ea50) returned 0x0 [0037.456] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.456] lstrlenA (lpString="A35318549EF911E0A45CDA") returned 22 [0037.456] lstrlenA (lpString="42") returned 2 [0037.456] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.456] lstrcpyA (in: lpString1=0x66ff98, lpString2="A35318549EF911E0A45CDA" | out: lpString1="A35318549EF911E0A45CDA") returned="A35318549EF911E0A45CDA" [0037.456] lstrcatA (in: lpString1="A35318549EF911E0A45CDA", lpString2="42" | out: lpString1="A35318549EF911E0A45CDA42") returned="A35318549EF911E0A45CDA42" [0037.456] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.456] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="07") returned 2 [0037.456] lstrlenA (lpString="A35318549EF911E0A45CDA42") returned 24 [0037.456] lstrlenA (lpString="07") returned 2 [0037.456] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.456] lstrcpyA (in: lpString1=0x670628, lpString2="A35318549EF911E0A45CDA42" | out: lpString1="A35318549EF911E0A45CDA42") returned="A35318549EF911E0A45CDA42" [0037.456] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42", lpString2="07" | out: lpString1="A35318549EF911E0A45CDA4207") returned="A35318549EF911E0A45CDA4207" [0037.456] LocalFree (hMem=0x66ff98) returned 0x0 [0037.456] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.456] lstrlenA (lpString="A35318549EF911E0A45CDA4207") returned 26 [0037.456] lstrlenA (lpString="2E") returned 2 [0037.456] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670ac0 [0037.457] lstrcpyA (in: lpString1=0x670ac0, lpString2="A35318549EF911E0A45CDA4207" | out: lpString1="A35318549EF911E0A45CDA4207") returned="A35318549EF911E0A45CDA4207" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA4207", lpString2="2E" | out: lpString1="A35318549EF911E0A45CDA42072E") returned="A35318549EF911E0A45CDA42072E" [0037.457] LocalFree (hMem=0x670628) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6F") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E") returned 28 [0037.457] lstrlenA (lpString="6F") returned 2 [0037.457] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6708c8 [0037.457] lstrcpyA (in: lpString1=0x6708c8, lpString2="A35318549EF911E0A45CDA42072E" | out: lpString1="A35318549EF911E0A45CDA42072E") returned="A35318549EF911E0A45CDA42072E" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E", lpString2="6F" | out: lpString1="A35318549EF911E0A45CDA42072E6F") returned="A35318549EF911E0A45CDA42072E6F" [0037.457] LocalFree (hMem=0x670ac0) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B4") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6F") returned 30 [0037.457] lstrlenA (lpString="B4") returned 2 [0037.457] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679788 [0037.457] lstrcpyA (in: lpString1=0x679788, lpString2="A35318549EF911E0A45CDA42072E6F" | out: lpString1="A35318549EF911E0A45CDA42072E6F") returned="A35318549EF911E0A45CDA42072E6F" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6F", lpString2="B4" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4") returned="A35318549EF911E0A45CDA42072E6FB4" [0037.457] LocalFree (hMem=0x6708c8) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="78") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6FB4") returned 32 [0037.457] lstrlenA (lpString="78") returned 2 [0037.457] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678f48 [0037.457] lstrcpyA (in: lpString1=0x678f48, lpString2="A35318549EF911E0A45CDA42072E6FB4" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4") returned="A35318549EF911E0A45CDA42072E6FB4" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6FB4", lpString2="78" | out: lpString1="A35318549EF911E0A45CDA42072E6FB478") returned="A35318549EF911E0A45CDA42072E6FB478" [0037.457] LocalFree (hMem=0x679788) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="85") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6FB478") returned 34 [0037.457] lstrlenA (lpString="85") returned 2 [0037.457] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679998 [0037.457] lstrcpyA (in: lpString1=0x679998, lpString2="A35318549EF911E0A45CDA42072E6FB478" | out: lpString1="A35318549EF911E0A45CDA42072E6FB478") returned="A35318549EF911E0A45CDA42072E6FB478" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6FB478", lpString2="85" | out: lpString1="A35318549EF911E0A45CDA42072E6FB47885") returned="A35318549EF911E0A45CDA42072E6FB47885" [0037.457] LocalFree (hMem=0x678f48) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="98") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6FB47885") returned 36 [0037.457] lstrlenA (lpString="98") returned 2 [0037.457] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679418 [0037.457] lstrcpyA (in: lpString1=0x679418, lpString2="A35318549EF911E0A45CDA42072E6FB47885" | out: lpString1="A35318549EF911E0A45CDA42072E6FB47885") returned="A35318549EF911E0A45CDA42072E6FB47885" [0037.457] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6FB47885", lpString2="98" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4788598") returned="A35318549EF911E0A45CDA42072E6FB4788598" [0037.457] LocalFree (hMem=0x679998) returned 0x0 [0037.457] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C2") returned 2 [0037.457] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6FB4788598") returned 38 [0037.457] lstrlenA (lpString="C2") returned 2 [0037.458] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.458] lstrcpyA (in: lpString1=0x6519e0, lpString2="A35318549EF911E0A45CDA42072E6FB4788598" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4788598") returned="A35318549EF911E0A45CDA42072E6FB4788598" [0037.458] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6FB4788598", lpString2="C2" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4788598C2") returned="A35318549EF911E0A45CDA42072E6FB4788598C2" [0037.458] LocalFree (hMem=0x679418) returned 0x0 [0037.458] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B5") returned 2 [0037.458] lstrlenA (lpString="A35318549EF911E0A45CDA42072E6FB4788598C2") returned 40 [0037.458] lstrlenA (lpString="B5") returned 2 [0037.458] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.458] lstrcpyA (in: lpString1=0x651a98, lpString2="A35318549EF911E0A45CDA42072E6FB4788598C2" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4788598C2") returned="A35318549EF911E0A45CDA42072E6FB4788598C2" [0037.458] lstrcatA (in: lpString1="A35318549EF911E0A45CDA42072E6FB4788598C2", lpString2="B5" | out: lpString1="A35318549EF911E0A45CDA42072E6FB4788598C2B5") returned="A35318549EF911E0A45CDA42072E6FB4788598C2B5" [0037.458] LocalFree (hMem=0x6519e0) returned 0x0 [0037.458] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.458] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.458] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.458] LocalFree (hMem=0x651a98) returned 0x0 [0037.458] CoTaskMemFree (pv=0x6624b0) [0037.458] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/As6JX.pdf", lpSrch="?") returned 0x0 [0037.458] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/As6JX.pdf") returned 45 [0037.477] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0037.477] lstrlenA (lpString="") returned 0 [0037.477] lstrlenA (lpString="D4") returned 2 [0037.477] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a30a0 [0037.477] lstrcpyA (in: lpString1=0x6a30a0, lpString2="" | out: lpString1="") returned="" [0037.477] lstrcatA (in: lpString1="", lpString2="D4" | out: lpString1="D4") returned="D4" [0037.477] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5E") returned 2 [0037.477] lstrlenA (lpString="D4") returned 2 [0037.477] lstrlenA (lpString="5E") returned 2 [0037.477] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3400 [0037.477] lstrcpyA (in: lpString1=0x6a3400, lpString2="D4" | out: lpString1="D4") returned="D4" [0037.477] lstrcatA (in: lpString1="D4", lpString2="5E" | out: lpString1="D45E") returned="D45E" [0037.477] LocalFree (hMem=0x6a30a0) returned 0x0 [0037.477] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C0") returned 2 [0037.477] lstrlenA (lpString="D45E") returned 4 [0037.477] lstrlenA (lpString="C0") returned 2 [0037.477] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a37f0 [0037.477] lstrcpyA (in: lpString1=0x6a37f0, lpString2="D45E" | out: lpString1="D45E") returned="D45E" [0037.477] lstrcatA (in: lpString1="D45E", lpString2="C0" | out: lpString1="D45EC0") returned="D45EC0" [0037.477] LocalFree (hMem=0x6a3400) returned 0x0 [0037.477] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3E") returned 2 [0037.477] lstrlenA (lpString="D45EC0") returned 6 [0037.478] lstrlenA (lpString="3E") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.478] lstrcpyA (in: lpString1=0x6519e0, lpString2="D45EC0" | out: lpString1="D45EC0") returned="D45EC0" [0037.478] lstrcatA (in: lpString1="D45EC0", lpString2="3E" | out: lpString1="D45EC03E") returned="D45EC03E" [0037.478] LocalFree (hMem=0x6a37f0) returned 0x0 [0037.478] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4A") returned 2 [0037.478] lstrlenA (lpString="D45EC03E") returned 8 [0037.478] lstrlenA (lpString="4A") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.478] lstrcpyA (in: lpString1=0x651a78, lpString2="D45EC03E" | out: lpString1="D45EC03E") returned="D45EC03E" [0037.478] lstrcatA (in: lpString1="D45EC03E", lpString2="4A" | out: lpString1="D45EC03E4A") returned="D45EC03E4A" [0037.478] LocalFree (hMem=0x6519e0) returned 0x0 [0037.478] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0037.478] lstrlenA (lpString="D45EC03E4A") returned 10 [0037.478] lstrlenA (lpString="89") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.478] lstrcpyA (in: lpString1=0x6519e0, lpString2="D45EC03E4A" | out: lpString1="D45EC03E4A") returned="D45EC03E4A" [0037.478] lstrcatA (in: lpString1="D45EC03E4A", lpString2="89" | out: lpString1="D45EC03E4A89") returned="D45EC03E4A89" [0037.478] LocalFree (hMem=0x651a78) returned 0x0 [0037.478] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="90") returned 2 [0037.478] lstrlenA (lpString="D45EC03E4A89") returned 12 [0037.478] lstrlenA (lpString="90") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.478] lstrcpyA (in: lpString1=0x651a78, lpString2="D45EC03E4A89" | out: lpString1="D45EC03E4A89") returned="D45EC03E4A89" [0037.478] lstrcatA (in: lpString1="D45EC03E4A89", lpString2="90" | out: lpString1="D45EC03E4A8990") returned="D45EC03E4A8990" [0037.478] LocalFree (hMem=0x6519e0) returned 0x0 [0037.478] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0A") returned 2 [0037.478] lstrlenA (lpString="D45EC03E4A8990") returned 14 [0037.478] lstrlenA (lpString="0A") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0037.478] lstrcpyA (in: lpString1=0x66e2d0, lpString2="D45EC03E4A8990" | out: lpString1="D45EC03E4A8990") returned="D45EC03E4A8990" [0037.478] lstrcatA (in: lpString1="D45EC03E4A8990", lpString2="0A" | out: lpString1="D45EC03E4A89900A") returned="D45EC03E4A89900A" [0037.478] LocalFree (hMem=0x651a78) returned 0x0 [0037.478] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BA") returned 2 [0037.478] lstrlenA (lpString="D45EC03E4A89900A") returned 16 [0037.478] lstrlenA (lpString="BA") returned 2 [0037.478] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dd30 [0037.478] lstrcpyA (in: lpString1=0x66dd30, lpString2="D45EC03E4A89900A" | out: lpString1="D45EC03E4A89900A") returned="D45EC03E4A89900A" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900A", lpString2="BA" | out: lpString1="D45EC03E4A89900ABA") returned="D45EC03E4A89900ABA" [0037.479] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D9") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABA") returned 18 [0037.479] lstrlenA (lpString="D9") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dc90 [0037.479] lstrcpyA (in: lpString1=0x66dc90, lpString2="D45EC03E4A89900ABA" | out: lpString1="D45EC03E4A89900ABA") returned="D45EC03E4A89900ABA" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900ABA", lpString2="D9" | out: lpString1="D45EC03E4A89900ABAD9") returned="D45EC03E4A89900ABAD9" [0037.479] LocalFree (hMem=0x66dd30) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABAD9") returned 20 [0037.479] lstrlenA (lpString="A3") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0037.479] lstrcpyA (in: lpString1=0x66e2d0, lpString2="D45EC03E4A89900ABAD9" | out: lpString1="D45EC03E4A89900ABAD9") returned="D45EC03E4A89900ABAD9" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9", lpString2="A3" | out: lpString1="D45EC03E4A89900ABAD9A3") returned="D45EC03E4A89900ABAD9A3" [0037.479] LocalFree (hMem=0x66dc90) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="63") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABAD9A3") returned 22 [0037.479] lstrlenA (lpString="63") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6706d0 [0037.479] lstrcpyA (in: lpString1=0x6706d0, lpString2="D45EC03E4A89900ABAD9A3" | out: lpString1="D45EC03E4A89900ABAD9A3") returned="D45EC03E4A89900ABAD9A3" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A3", lpString2="63" | out: lpString1="D45EC03E4A89900ABAD9A363") returned="D45EC03E4A89900ABAD9A363" [0037.479] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C6") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABAD9A363") returned 24 [0037.479] lstrlenA (lpString="C6") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.479] lstrcpyA (in: lpString1=0x670628, lpString2="D45EC03E4A89900ABAD9A363" | out: lpString1="D45EC03E4A89900ABAD9A363") returned="D45EC03E4A89900ABAD9A363" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363", lpString2="C6" | out: lpString1="D45EC03E4A89900ABAD9A363C6") returned="D45EC03E4A89900ABAD9A363C6" [0037.479] LocalFree (hMem=0x6706d0) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B5") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6") returned 26 [0037.479] lstrlenA (lpString="B5") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0037.479] lstrcpyA (in: lpString1=0x670040, lpString2="D45EC03E4A89900ABAD9A363C6" | out: lpString1="D45EC03E4A89900ABAD9A363C6") returned="D45EC03E4A89900ABAD9A363C6" [0037.479] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6", lpString2="B5" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5") returned="D45EC03E4A89900ABAD9A363C6B5" [0037.479] LocalFree (hMem=0x670628) returned 0x0 [0037.479] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0037.479] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5") returned 28 [0037.479] lstrlenA (lpString="D4") returned 2 [0037.479] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670628 [0037.480] lstrcpyA (in: lpString1=0x670628, lpString2="D45EC03E4A89900ABAD9A363C6B5" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5") returned="D45EC03E4A89900ABAD9A363C6B5" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5", lpString2="D4" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4") returned="D45EC03E4A89900ABAD9A363C6B5D4" [0037.480] LocalFree (hMem=0x670040) returned 0x0 [0037.480] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F8") returned 2 [0037.480] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4") returned 30 [0037.480] lstrlenA (lpString="F8") returned 2 [0037.480] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679c58 [0037.480] lstrcpyA (in: lpString1=0x679c58, lpString2="D45EC03E4A89900ABAD9A363C6B5D4" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4") returned="D45EC03E4A89900ABAD9A363C6B5D4" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4", lpString2="F8" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8") returned="D45EC03E4A89900ABAD9A363C6B5D4F8" [0037.480] LocalFree (hMem=0x670628) returned 0x0 [0037.480] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A1") returned 2 [0037.480] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4F8") returned 32 [0037.480] lstrlenA (lpString="A1") returned 2 [0037.480] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6796d8 [0037.480] lstrcpyA (in: lpString1=0x6796d8, lpString2="D45EC03E4A89900ABAD9A363C6B5D4F8" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8") returned="D45EC03E4A89900ABAD9A363C6B5D4F8" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8", lpString2="A1" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1" [0037.480] LocalFree (hMem=0x679c58) returned 0x0 [0037.480] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="87") returned 2 [0037.480] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4F8A1") returned 34 [0037.480] lstrlenA (lpString="87") returned 2 [0037.480] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679368 [0037.480] lstrcpyA (in: lpString1=0x679368, lpString2="D45EC03E4A89900ABAD9A363C6B5D4F8A1" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1", lpString2="87" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A187") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A187" [0037.480] LocalFree (hMem=0x6796d8) returned 0x0 [0037.480] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0037.480] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4F8A187") returned 36 [0037.480] lstrlenA (lpString="3C") returned 2 [0037.480] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679af8 [0037.480] lstrcpyA (in: lpString1=0x679af8, lpString2="D45EC03E4A89900ABAD9A363C6B5D4F8A187" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A187") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A187" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A187", lpString2="3C" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C" [0037.480] LocalFree (hMem=0x679368) returned 0x0 [0037.480] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1E") returned 2 [0037.480] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C") returned 38 [0037.480] lstrlenA (lpString="1E") returned 2 [0037.480] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.480] lstrcpyA (in: lpString1=0x6519e0, lpString2="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C" [0037.480] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C", lpString2="1E" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E" [0037.480] LocalFree (hMem=0x679af8) returned 0x0 [0037.481] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0037.481] lstrlenA (lpString="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E") returned 40 [0037.481] lstrlenA (lpString="FF") returned 2 [0037.481] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0037.481] lstrcpyA (in: lpString1=0x6771d8, lpString2="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E" [0037.481] lstrcatA (in: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1E", lpString2="FF" | out: lpString1="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1EFF") returned="D45EC03E4A89900ABAD9A363C6B5D4F8A1873C1EFF" [0037.481] LocalFree (hMem=0x6519e0) returned 0x0 [0037.481] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.481] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.481] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.481] LocalFree (hMem=0x6771d8) returned 0x0 [0037.481] CoTaskMemFree (pv=0x651b18) [0037.481] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/gTLi6wHcv/BvgnzXPqUVQGCtwGu.m4a", lpSrch="?") returned 0x0 [0037.481] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/gTLi6wHcv/BvgnzXPqUVQGCtwGu.m4a") returned 72 [0037.508] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.508] lstrlenA (lpString="") returned 0 [0037.508] lstrlenA (lpString="F7") returned 2 [0037.508] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2dd0 [0037.508] lstrcpyA (in: lpString1=0x6a2dd0, lpString2="" | out: lpString1="") returned="" [0037.508] lstrcatA (in: lpString1="", lpString2="F7" | out: lpString1="F7") returned="F7" [0037.508] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="16") returned 2 [0037.508] lstrlenA (lpString="F7") returned 2 [0037.508] lstrlenA (lpString="16") returned 2 [0037.508] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3400 [0037.508] lstrcpyA (in: lpString1=0x6a3400, lpString2="F7" | out: lpString1="F7") returned="F7" [0037.508] lstrcatA (in: lpString1="F7", lpString2="16" | out: lpString1="F716") returned="F716" [0037.508] LocalFree (hMem=0x6a2dd0) returned 0x0 [0037.508] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="78") returned 2 [0037.508] lstrlenA (lpString="F716") returned 4 [0037.508] lstrlenA (lpString="78") returned 2 [0037.508] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3520 [0037.508] lstrcpyA (in: lpString1=0x6a3520, lpString2="F716" | out: lpString1="F716") returned="F716" [0037.509] lstrcatA (in: lpString1="F716", lpString2="78" | out: lpString1="F71678") returned="F71678" [0037.509] LocalFree (hMem=0x6a3400) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="52") returned 2 [0037.509] lstrlenA (lpString="F71678") returned 6 [0037.509] lstrlenA (lpString="52") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.509] lstrcpyA (in: lpString1=0x6519e0, lpString2="F71678" | out: lpString1="F71678") returned="F71678" [0037.509] lstrcatA (in: lpString1="F71678", lpString2="52" | out: lpString1="F7167852") returned="F7167852" [0037.509] LocalFree (hMem=0x6a3520) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="10") returned 2 [0037.509] lstrlenA (lpString="F7167852") returned 8 [0037.509] lstrlenA (lpString="10") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.509] lstrcpyA (in: lpString1=0x651a78, lpString2="F7167852" | out: lpString1="F7167852") returned="F7167852" [0037.509] lstrcatA (in: lpString1="F7167852", lpString2="10" | out: lpString1="F716785210") returned="F716785210" [0037.509] LocalFree (hMem=0x6519e0) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6C") returned 2 [0037.509] lstrlenA (lpString="F716785210") returned 10 [0037.509] lstrlenA (lpString="6C") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.509] lstrcpyA (in: lpString1=0x6519e0, lpString2="F716785210" | out: lpString1="F716785210") returned="F716785210" [0037.509] lstrcatA (in: lpString1="F716785210", lpString2="6C" | out: lpString1="F7167852106C") returned="F7167852106C" [0037.509] LocalFree (hMem=0x651a78) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AE") returned 2 [0037.509] lstrlenA (lpString="F7167852106C") returned 12 [0037.509] lstrlenA (lpString="AE") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.509] lstrcpyA (in: lpString1=0x651a78, lpString2="F7167852106C" | out: lpString1="F7167852106C") returned="F7167852106C" [0037.509] lstrcatA (in: lpString1="F7167852106C", lpString2="AE" | out: lpString1="F7167852106CAE") returned="F7167852106CAE" [0037.509] LocalFree (hMem=0x6519e0) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="41") returned 2 [0037.509] lstrlenA (lpString="F7167852106CAE") returned 14 [0037.509] lstrlenA (lpString="41") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e4b0 [0037.509] lstrcpyA (in: lpString1=0x66e4b0, lpString2="F7167852106CAE" | out: lpString1="F7167852106CAE") returned="F7167852106CAE" [0037.509] lstrcatA (in: lpString1="F7167852106CAE", lpString2="41" | out: lpString1="F7167852106CAE41") returned="F7167852106CAE41" [0037.509] LocalFree (hMem=0x651a78) returned 0x0 [0037.509] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0C") returned 2 [0037.509] lstrlenA (lpString="F7167852106CAE41") returned 16 [0037.509] lstrlenA (lpString="0C") returned 2 [0037.509] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66ea50 [0037.509] lstrcpyA (in: lpString1=0x66ea50, lpString2="F7167852106CAE41" | out: lpString1="F7167852106CAE41") returned="F7167852106CAE41" [0037.509] lstrcatA (in: lpString1="F7167852106CAE41", lpString2="0C" | out: lpString1="F7167852106CAE410C") returned="F7167852106CAE410C" [0037.510] LocalFree (hMem=0x66e4b0) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="99") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C") returned 18 [0037.510] lstrlenA (lpString="99") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0037.510] lstrcpyA (in: lpString1=0x66e0f0, lpString2="F7167852106CAE410C" | out: lpString1="F7167852106CAE410C") returned="F7167852106CAE410C" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C", lpString2="99" | out: lpString1="F7167852106CAE410C99") returned="F7167852106CAE410C99" [0037.510] LocalFree (hMem=0x66ea50) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C99") returned 20 [0037.510] lstrlenA (lpString="7A") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0037.510] lstrcpyA (in: lpString1=0x66e2d0, lpString2="F7167852106CAE410C99" | out: lpString1="F7167852106CAE410C99") returned="F7167852106CAE410C99" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C99", lpString2="7A" | out: lpString1="F7167852106CAE410C997A") returned="F7167852106CAE410C997A" [0037.510] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DF") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C997A") returned 22 [0037.510] lstrlenA (lpString="DF") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.510] lstrcpyA (in: lpString1=0x66ff98, lpString2="F7167852106CAE410C997A" | out: lpString1="F7167852106CAE410C997A") returned="F7167852106CAE410C997A" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C997A", lpString2="DF" | out: lpString1="F7167852106CAE410C997ADF") returned="F7167852106CAE410C997ADF" [0037.510] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A9") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C997ADF") returned 24 [0037.510] lstrlenA (lpString="A9") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0037.510] lstrcpyA (in: lpString1=0x670040, lpString2="F7167852106CAE410C997ADF" | out: lpString1="F7167852106CAE410C997ADF") returned="F7167852106CAE410C997ADF" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C997ADF", lpString2="A9" | out: lpString1="F7167852106CAE410C997ADFA9") returned="F7167852106CAE410C997ADFA9" [0037.510] LocalFree (hMem=0x66ff98) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="32") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C997ADFA9") returned 26 [0037.510] lstrlenA (lpString="32") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6700e8 [0037.510] lstrcpyA (in: lpString1=0x6700e8, lpString2="F7167852106CAE410C997ADFA9" | out: lpString1="F7167852106CAE410C997ADFA9") returned="F7167852106CAE410C997ADFA9" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA9", lpString2="32" | out: lpString1="F7167852106CAE410C997ADFA932") returned="F7167852106CAE410C997ADFA932" [0037.510] LocalFree (hMem=0x670040) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DD") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C997ADFA932") returned 28 [0037.510] lstrlenA (lpString="DD") returned 2 [0037.510] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.510] lstrcpyA (in: lpString1=0x66ff98, lpString2="F7167852106CAE410C997ADFA932" | out: lpString1="F7167852106CAE410C997ADFA932") returned="F7167852106CAE410C997ADFA932" [0037.510] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932", lpString2="DD" | out: lpString1="F7167852106CAE410C997ADFA932DD") returned="F7167852106CAE410C997ADFA932DD" [0037.510] LocalFree (hMem=0x6700e8) returned 0x0 [0037.510] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8D") returned 2 [0037.510] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD") returned 30 [0037.511] lstrlenA (lpString="8D") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679788 [0037.511] lstrcpyA (in: lpString1=0x679788, lpString2="F7167852106CAE410C997ADFA932DD" | out: lpString1="F7167852106CAE410C997ADFA932DD") returned="F7167852106CAE410C997ADFA932DD" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD", lpString2="8D" | out: lpString1="F7167852106CAE410C997ADFA932DD8D") returned="F7167852106CAE410C997ADFA932DD8D" [0037.511] LocalFree (hMem=0x66ff98) returned 0x0 [0037.511] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="36") returned 2 [0037.511] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD8D") returned 32 [0037.511] lstrlenA (lpString="36") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679c58 [0037.511] lstrcpyA (in: lpString1=0x679c58, lpString2="F7167852106CAE410C997ADFA932DD8D" | out: lpString1="F7167852106CAE410C997ADFA932DD8D") returned="F7167852106CAE410C997ADFA932DD8D" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD8D", lpString2="36" | out: lpString1="F7167852106CAE410C997ADFA932DD8D36") returned="F7167852106CAE410C997ADFA932DD8D36" [0037.511] LocalFree (hMem=0x679788) returned 0x0 [0037.511] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1B") returned 2 [0037.511] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD8D36") returned 34 [0037.511] lstrlenA (lpString="1B") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678de8 [0037.511] lstrcpyA (in: lpString1=0x678de8, lpString2="F7167852106CAE410C997ADFA932DD8D36" | out: lpString1="F7167852106CAE410C997ADFA932DD8D36") returned="F7167852106CAE410C997ADFA932DD8D36" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD8D36", lpString2="1B" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B") returned="F7167852106CAE410C997ADFA932DD8D361B" [0037.511] LocalFree (hMem=0x679c58) returned 0x0 [0037.511] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="22") returned 2 [0037.511] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD8D361B") returned 36 [0037.511] lstrlenA (lpString="22") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679af8 [0037.511] lstrcpyA (in: lpString1=0x679af8, lpString2="F7167852106CAE410C997ADFA932DD8D361B" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B") returned="F7167852106CAE410C997ADFA932DD8D361B" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD8D361B", lpString2="22" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B22") returned="F7167852106CAE410C997ADFA932DD8D361B22" [0037.511] LocalFree (hMem=0x678de8) returned 0x0 [0037.511] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="59") returned 2 [0037.511] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD8D361B22") returned 38 [0037.511] lstrlenA (lpString="59") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.511] lstrcpyA (in: lpString1=0x6519e0, lpString2="F7167852106CAE410C997ADFA932DD8D361B22" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B22") returned="F7167852106CAE410C997ADFA932DD8D361B22" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD8D361B22", lpString2="59" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B2259") returned="F7167852106CAE410C997ADFA932DD8D361B2259" [0037.511] LocalFree (hMem=0x679af8) returned 0x0 [0037.511] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="51") returned 2 [0037.511] lstrlenA (lpString="F7167852106CAE410C997ADFA932DD8D361B2259") returned 40 [0037.511] lstrlenA (lpString="51") returned 2 [0037.511] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.511] lstrcpyA (in: lpString1=0x651a98, lpString2="F7167852106CAE410C997ADFA932DD8D361B2259" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B2259") returned="F7167852106CAE410C997ADFA932DD8D361B2259" [0037.511] lstrcatA (in: lpString1="F7167852106CAE410C997ADFA932DD8D361B2259", lpString2="51" | out: lpString1="F7167852106CAE410C997ADFA932DD8D361B225951") returned="F7167852106CAE410C997ADFA932DD8D361B225951" [0037.511] LocalFree (hMem=0x6519e0) returned 0x0 [0037.511] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.512] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.512] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.512] LocalFree (hMem=0x651a98) returned 0x0 [0037.512] CoTaskMemFree (pv=0x66db50) [0037.512] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/iNoCmkv%20pN-Cd_O3An4e.m4a", lpSrch="?") returned 0x0 [0037.512] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/iNoCmkv%20pN-Cd_O3An4e.m4a") returned 60 [0037.554] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E6") returned 2 [0037.554] lstrlenA (lpString="") returned 0 [0037.554] lstrlenA (lpString="E6") returned 2 [0037.554] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3c70 [0037.554] lstrcpyA (in: lpString1=0x6a3c70, lpString2="" | out: lpString1="") returned="" [0037.554] lstrcatA (in: lpString1="", lpString2="E6" | out: lpString1="E6") returned="E6" [0037.554] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="36") returned 2 [0037.554] lstrlenA (lpString="E6") returned 2 [0037.554] lstrlenA (lpString="36") returned 2 [0037.554] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a2f80 [0037.554] lstrcpyA (in: lpString1=0x6a2f80, lpString2="E6" | out: lpString1="E6") returned="E6" [0037.554] lstrcatA (in: lpString1="E6", lpString2="36" | out: lpString1="E636") returned="E636" [0037.554] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.554] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="08") returned 2 [0037.554] lstrlenA (lpString="E636") returned 4 [0037.554] lstrlenA (lpString="08") returned 2 [0037.554] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3400 [0037.554] lstrcpyA (in: lpString1=0x6a3400, lpString2="E636" | out: lpString1="E636") returned="E636" [0037.554] lstrcatA (in: lpString1="E636", lpString2="08" | out: lpString1="E63608") returned="E63608" [0037.554] LocalFree (hMem=0x6a2f80) returned 0x0 [0037.554] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0037.554] lstrlenA (lpString="E63608") returned 6 [0037.554] lstrlenA (lpString="3C") returned 2 [0037.554] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.554] lstrcpyA (in: lpString1=0x6519e0, lpString2="E63608" | out: lpString1="E63608") returned="E63608" [0037.555] lstrcatA (in: lpString1="E63608", lpString2="3C" | out: lpString1="E636083C") returned="E636083C" [0037.555] LocalFree (hMem=0x6a3400) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6F") returned 2 [0037.555] lstrlenA (lpString="E636083C") returned 8 [0037.555] lstrlenA (lpString="6F") returned 2 [0037.555] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.555] lstrcpyA (in: lpString1=0x651a78, lpString2="E636083C" | out: lpString1="E636083C") returned="E636083C" [0037.555] lstrcatA (in: lpString1="E636083C", lpString2="6F" | out: lpString1="E636083C6F") returned="E636083C6F" [0037.555] LocalFree (hMem=0x6519e0) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0037.555] lstrlenA (lpString="E636083C6F") returned 10 [0037.555] lstrlenA (lpString="89") returned 2 [0037.555] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.555] lstrcpyA (in: lpString1=0x6519e0, lpString2="E636083C6F" | out: lpString1="E636083C6F") returned="E636083C6F" [0037.555] lstrcatA (in: lpString1="E636083C6F", lpString2="89" | out: lpString1="E636083C6F89") returned="E636083C6F89" [0037.555] LocalFree (hMem=0x651a78) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="36") returned 2 [0037.555] lstrlenA (lpString="E636083C6F89") returned 12 [0037.555] lstrlenA (lpString="36") returned 2 [0037.555] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.555] lstrcpyA (in: lpString1=0x651a78, lpString2="E636083C6F89" | out: lpString1="E636083C6F89") returned="E636083C6F89" [0037.555] lstrcatA (in: lpString1="E636083C6F89", lpString2="36" | out: lpString1="E636083C6F8936") returned="E636083C6F8936" [0037.555] LocalFree (hMem=0x6519e0) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E1") returned 2 [0037.555] lstrlenA (lpString="E636083C6F8936") returned 14 [0037.555] lstrlenA (lpString="E1") returned 2 [0037.555] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e910 [0037.555] lstrcpyA (in: lpString1=0x66e910, lpString2="E636083C6F8936" | out: lpString1="E636083C6F8936") returned="E636083C6F8936" [0037.555] lstrcatA (in: lpString1="E636083C6F8936", lpString2="E1" | out: lpString1="E636083C6F8936E1") returned="E636083C6F8936E1" [0037.555] LocalFree (hMem=0x651a78) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.555] lstrlenA (lpString="E636083C6F8936E1") returned 16 [0037.555] lstrlenA (lpString="94") returned 2 [0037.555] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66ea50 [0037.555] lstrcpyA (in: lpString1=0x66ea50, lpString2="E636083C6F8936E1" | out: lpString1="E636083C6F8936E1") returned="E636083C6F8936E1" [0037.555] lstrcatA (in: lpString1="E636083C6F8936E1", lpString2="94" | out: lpString1="E636083C6F8936E194") returned="E636083C6F8936E194" [0037.555] LocalFree (hMem=0x66e910) returned 0x0 [0037.555] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="86") returned 2 [0037.555] lstrlenA (lpString="E636083C6F8936E194") returned 18 [0037.555] lstrlenA (lpString="86") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e910 [0037.556] lstrcpyA (in: lpString1=0x66e910, lpString2="E636083C6F8936E194" | out: lpString1="E636083C6F8936E194") returned="E636083C6F8936E194" [0037.556] lstrcatA (in: lpString1="E636083C6F8936E194", lpString2="86" | out: lpString1="E636083C6F8936E19486") returned="E636083C6F8936E19486" [0037.556] LocalFree (hMem=0x66ea50) returned 0x0 [0037.556] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EF") returned 2 [0037.556] lstrlenA (lpString="E636083C6F8936E19486") returned 20 [0037.556] lstrlenA (lpString="EF") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e0f0 [0037.556] lstrcpyA (in: lpString1=0x66e0f0, lpString2="E636083C6F8936E19486" | out: lpString1="E636083C6F8936E19486") returned="E636083C6F8936E19486" [0037.556] lstrcatA (in: lpString1="E636083C6F8936E19486", lpString2="EF" | out: lpString1="E636083C6F8936E19486EF") returned="E636083C6F8936E19486EF" [0037.556] LocalFree (hMem=0x66e910) returned 0x0 [0037.556] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B5") returned 2 [0037.556] lstrlenA (lpString="E636083C6F8936E19486EF") returned 22 [0037.556] lstrlenA (lpString="B5") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.556] lstrcpyA (in: lpString1=0x66ff98, lpString2="E636083C6F8936E19486EF" | out: lpString1="E636083C6F8936E19486EF") returned="E636083C6F8936E19486EF" [0037.556] lstrcatA (in: lpString1="E636083C6F8936E19486EF", lpString2="B5" | out: lpString1="E636083C6F8936E19486EFB5") returned="E636083C6F8936E19486EFB5" [0037.556] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.556] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0B") returned 2 [0037.556] lstrlenA (lpString="E636083C6F8936E19486EFB5") returned 24 [0037.556] lstrlenA (lpString="0B") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670ac0 [0037.556] lstrcpyA (in: lpString1=0x670ac0, lpString2="E636083C6F8936E19486EFB5" | out: lpString1="E636083C6F8936E19486EFB5") returned="E636083C6F8936E19486EFB5" [0037.556] lstrcatA (in: lpString1="E636083C6F8936E19486EFB5", lpString2="0B" | out: lpString1="E636083C6F8936E19486EFB50B") returned="E636083C6F8936E19486EFB50B" [0037.556] LocalFree (hMem=0x66ff98) returned 0x0 [0037.556] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DD") returned 2 [0037.556] lstrlenA (lpString="E636083C6F8936E19486EFB50B") returned 26 [0037.556] lstrlenA (lpString="DD") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.556] lstrcpyA (in: lpString1=0x66ff98, lpString2="E636083C6F8936E19486EFB50B" | out: lpString1="E636083C6F8936E19486EFB50B") returned="E636083C6F8936E19486EFB50B" [0037.556] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50B", lpString2="DD" | out: lpString1="E636083C6F8936E19486EFB50BDD") returned="E636083C6F8936E19486EFB50BDD" [0037.556] LocalFree (hMem=0x670ac0) returned 0x0 [0037.556] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1A") returned 2 [0037.556] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD") returned 28 [0037.556] lstrlenA (lpString="1A") returned 2 [0037.556] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0037.556] lstrcpyA (in: lpString1=0x670040, lpString2="E636083C6F8936E19486EFB50BDD" | out: lpString1="E636083C6F8936E19486EFB50BDD") returned="E636083C6F8936E19486EFB50BDD" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD", lpString2="1A" | out: lpString1="E636083C6F8936E19486EFB50BDD1A") returned="E636083C6F8936E19486EFB50BDD1A" [0037.557] LocalFree (hMem=0x66ff98) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="40") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A") returned 30 [0037.557] lstrlenA (lpString="40") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678d38 [0037.557] lstrcpyA (in: lpString1=0x678d38, lpString2="E636083C6F8936E19486EFB50BDD1A" | out: lpString1="E636083C6F8936E19486EFB50BDD1A") returned="E636083C6F8936E19486EFB50BDD1A" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A", lpString2="40" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40") returned="E636083C6F8936E19486EFB50BDD1A40" [0037.557] LocalFree (hMem=0x670040) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B8") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A40") returned 32 [0037.557] lstrlenA (lpString="B8") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678ff8 [0037.557] lstrcpyA (in: lpString1=0x678ff8, lpString2="E636083C6F8936E19486EFB50BDD1A40" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40") returned="E636083C6F8936E19486EFB50BDD1A40" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A40", lpString2="B8" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8") returned="E636083C6F8936E19486EFB50BDD1A40B8" [0037.557] LocalFree (hMem=0x678d38) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EC") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A40B8") returned 34 [0037.557] lstrlenA (lpString="EC") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679998 [0037.557] lstrcpyA (in: lpString1=0x679998, lpString2="E636083C6F8936E19486EFB50BDD1A40B8" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8") returned="E636083C6F8936E19486EFB50BDD1A40B8" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A40B8", lpString2="EC" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8EC") returned="E636083C6F8936E19486EFB50BDD1A40B8EC" [0037.557] LocalFree (hMem=0x678ff8) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E0") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A40B8EC") returned 36 [0037.557] lstrlenA (lpString="E0") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679a48 [0037.557] lstrcpyA (in: lpString1=0x679a48, lpString2="E636083C6F8936E19486EFB50BDD1A40B8EC" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8EC") returned="E636083C6F8936E19486EFB50BDD1A40B8EC" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A40B8EC", lpString2="E0" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE0") returned="E636083C6F8936E19486EFB50BDD1A40B8ECE0" [0037.557] LocalFree (hMem=0x679998) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="07") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A40B8ECE0") returned 38 [0037.557] lstrlenA (lpString="07") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.557] lstrcpyA (in: lpString1=0x6519e0, lpString2="E636083C6F8936E19486EFB50BDD1A40B8ECE0" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE0") returned="E636083C6F8936E19486EFB50BDD1A40B8ECE0" [0037.557] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE0", lpString2="07" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE007") returned="E636083C6F8936E19486EFB50BDD1A40B8ECE007" [0037.557] LocalFree (hMem=0x679a48) returned 0x0 [0037.557] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FA") returned 2 [0037.557] lstrlenA (lpString="E636083C6F8936E19486EFB50BDD1A40B8ECE007") returned 40 [0037.557] lstrlenA (lpString="FA") returned 2 [0037.557] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.558] lstrcpyA (in: lpString1=0x651a98, lpString2="E636083C6F8936E19486EFB50BDD1A40B8ECE007" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE007") returned="E636083C6F8936E19486EFB50BDD1A40B8ECE007" [0037.558] lstrcatA (in: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE007", lpString2="FA" | out: lpString1="E636083C6F8936E19486EFB50BDD1A40B8ECE007FA") returned="E636083C6F8936E19486EFB50BDD1A40B8ECE007FA" [0037.558] LocalFree (hMem=0x6519e0) returned 0x0 [0037.558] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.558] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.558] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.558] LocalFree (hMem=0x651a98) returned 0x0 [0037.558] CoTaskMemFree (pv=0x668738) [0037.558] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/yVfYXYTWRodOY8I%209WP2.pptx", lpSrch="?") returned 0x0 [0037.558] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/yVfYXYTWRodOY8I%209WP2.pptx") returned 63 [0037.584] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="ED") returned 2 [0037.584] lstrlenA (lpString="") returned 0 [0037.584] lstrlenA (lpString="ED") returned 2 [0037.584] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a39a0 [0037.584] lstrcpyA (in: lpString1=0x6a39a0, lpString2="" | out: lpString1="") returned="" [0037.584] lstrcatA (in: lpString1="", lpString2="ED" | out: lpString1="ED") returned="ED" [0037.584] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0037.584] lstrlenA (lpString="ED") returned 2 [0037.584] lstrlenA (lpString="93") returned 2 [0037.584] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a2e60 [0037.584] lstrcpyA (in: lpString1=0x6a2e60, lpString2="ED" | out: lpString1="ED") returned="ED" [0037.584] lstrcatA (in: lpString1="ED", lpString2="93" | out: lpString1="ED93") returned="ED93" [0037.584] LocalFree (hMem=0x6a39a0) returned 0x0 [0037.584] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F1") returned 2 [0037.584] lstrlenA (lpString="ED93") returned 4 [0037.584] lstrlenA (lpString="F1") returned 2 [0037.584] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3c70 [0037.584] lstrcpyA (in: lpString1=0x6a3c70, lpString2="ED93" | out: lpString1="ED93") returned="ED93" [0037.584] lstrcatA (in: lpString1="ED93", lpString2="F1" | out: lpString1="ED93F1") returned="ED93F1" [0037.585] LocalFree (hMem=0x6a2e60) returned 0x0 [0037.585] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="64") returned 2 [0037.585] lstrlenA (lpString="ED93F1") returned 6 [0037.585] lstrlenA (lpString="64") returned 2 [0037.585] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.585] lstrcpyA (in: lpString1=0x6519e0, lpString2="ED93F1" | out: lpString1="ED93F1") returned="ED93F1" [0037.585] lstrcatA (in: lpString1="ED93F1", lpString2="64" | out: lpString1="ED93F164") returned="ED93F164" [0037.585] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.585] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="19") returned 2 [0037.585] lstrlenA (lpString="ED93F164") returned 8 [0037.585] lstrlenA (lpString="19") returned 2 [0037.585] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.585] lstrcpyA (in: lpString1=0x651a78, lpString2="ED93F164" | out: lpString1="ED93F164") returned="ED93F164" [0037.585] lstrcatA (in: lpString1="ED93F164", lpString2="19" | out: lpString1="ED93F16419") returned="ED93F16419" [0037.585] LocalFree (hMem=0x6519e0) returned 0x0 [0037.585] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="40") returned 2 [0037.585] lstrlenA (lpString="ED93F16419") returned 10 [0037.585] lstrlenA (lpString="40") returned 2 [0037.585] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.585] lstrcpyA (in: lpString1=0x6519e0, lpString2="ED93F16419" | out: lpString1="ED93F16419") returned="ED93F16419" [0037.585] lstrcatA (in: lpString1="ED93F16419", lpString2="40" | out: lpString1="ED93F1641940") returned="ED93F1641940" [0037.585] LocalFree (hMem=0x651a78) returned 0x0 [0037.585] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C5") returned 2 [0037.585] lstrlenA (lpString="ED93F1641940") returned 12 [0037.585] lstrlenA (lpString="C5") returned 2 [0037.585] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.585] lstrcpyA (in: lpString1=0x651a78, lpString2="ED93F1641940" | out: lpString1="ED93F1641940") returned="ED93F1641940" [0037.586] lstrcatA (in: lpString1="ED93F1641940", lpString2="C5" | out: lpString1="ED93F1641940C5") returned="ED93F1641940C5" [0037.586] LocalFree (hMem=0x6519e0) returned 0x0 [0037.586] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BE") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5") returned 14 [0037.587] lstrlenA (lpString="BE") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0037.587] lstrcpyA (in: lpString1=0x66e2d0, lpString2="ED93F1641940C5" | out: lpString1="ED93F1641940C5") returned="ED93F1641940C5" [0037.587] lstrcatA (in: lpString1="ED93F1641940C5", lpString2="BE" | out: lpString1="ED93F1641940C5BE") returned="ED93F1641940C5BE" [0037.587] LocalFree (hMem=0x651a78) returned 0x0 [0037.587] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="37") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5BE") returned 16 [0037.587] lstrlenA (lpString="37") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e410 [0037.587] lstrcpyA (in: lpString1=0x66e410, lpString2="ED93F1641940C5BE" | out: lpString1="ED93F1641940C5BE") returned="ED93F1641940C5BE" [0037.587] lstrcatA (in: lpString1="ED93F1641940C5BE", lpString2="37" | out: lpString1="ED93F1641940C5BE37") returned="ED93F1641940C5BE37" [0037.587] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.587] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3F") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5BE37") returned 18 [0037.587] lstrlenA (lpString="3F") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e370 [0037.587] lstrcpyA (in: lpString1=0x66e370, lpString2="ED93F1641940C5BE37" | out: lpString1="ED93F1641940C5BE37") returned="ED93F1641940C5BE37" [0037.587] lstrcatA (in: lpString1="ED93F1641940C5BE37", lpString2="3F" | out: lpString1="ED93F1641940C5BE373F") returned="ED93F1641940C5BE373F" [0037.587] LocalFree (hMem=0x66e410) returned 0x0 [0037.587] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="32") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5BE373F") returned 20 [0037.587] lstrlenA (lpString="32") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e690 [0037.587] lstrcpyA (in: lpString1=0x66e690, lpString2="ED93F1641940C5BE373F" | out: lpString1="ED93F1641940C5BE373F") returned="ED93F1641940C5BE373F" [0037.587] lstrcatA (in: lpString1="ED93F1641940C5BE373F", lpString2="32" | out: lpString1="ED93F1641940C5BE373F32") returned="ED93F1641940C5BE373F32" [0037.587] LocalFree (hMem=0x66e370) returned 0x0 [0037.587] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5BE373F32") returned 22 [0037.587] lstrlenA (lpString="CB") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.587] lstrcpyA (in: lpString1=0x66ff98, lpString2="ED93F1641940C5BE373F32" | out: lpString1="ED93F1641940C5BE373F32") returned="ED93F1641940C5BE373F32" [0037.587] lstrcatA (in: lpString1="ED93F1641940C5BE373F32", lpString2="CB" | out: lpString1="ED93F1641940C5BE373F32CB") returned="ED93F1641940C5BE373F32CB" [0037.587] LocalFree (hMem=0x66e690) returned 0x0 [0037.587] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="88") returned 2 [0037.587] lstrlenA (lpString="ED93F1641940C5BE373F32CB") returned 24 [0037.587] lstrlenA (lpString="88") returned 2 [0037.587] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.587] lstrcpyA (in: lpString1=0x670628, lpString2="ED93F1641940C5BE373F32CB" | out: lpString1="ED93F1641940C5BE373F32CB") returned="ED93F1641940C5BE373F32CB" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB", lpString2="88" | out: lpString1="ED93F1641940C5BE373F32CB88") returned="ED93F1641940C5BE373F32CB88" [0037.588] LocalFree (hMem=0x66ff98) returned 0x0 [0037.588] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.588] lstrlenA (lpString="ED93F1641940C5BE373F32CB88") returned 26 [0037.588] lstrlenA (lpString="7A") returned 2 [0037.588] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6708c8 [0037.588] lstrcpyA (in: lpString1=0x6708c8, lpString2="ED93F1641940C5BE373F32CB88" | out: lpString1="ED93F1641940C5BE373F32CB88") returned="ED93F1641940C5BE373F32CB88" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB88", lpString2="7A" | out: lpString1="ED93F1641940C5BE373F32CB887A") returned="ED93F1641940C5BE373F32CB887A" [0037.588] LocalFree (hMem=0x670628) returned 0x0 [0037.588] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F8") returned 2 [0037.588] lstrlenA (lpString="ED93F1641940C5BE373F32CB887A") returned 28 [0037.588] lstrlenA (lpString="F8") returned 2 [0037.588] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.588] lstrcpyA (in: lpString1=0x66ff98, lpString2="ED93F1641940C5BE373F32CB887A" | out: lpString1="ED93F1641940C5BE373F32CB887A") returned="ED93F1641940C5BE373F32CB887A" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887A", lpString2="F8" | out: lpString1="ED93F1641940C5BE373F32CB887AF8") returned="ED93F1641940C5BE373F32CB887AF8" [0037.588] LocalFree (hMem=0x6708c8) returned 0x0 [0037.588] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DF") returned 2 [0037.588] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8") returned 30 [0037.588] lstrlenA (lpString="DF") returned 2 [0037.588] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679208 [0037.588] lstrcpyA (in: lpString1=0x679208, lpString2="ED93F1641940C5BE373F32CB887AF8" | out: lpString1="ED93F1641940C5BE373F32CB887AF8") returned="ED93F1641940C5BE373F32CB887AF8" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8", lpString2="DF" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DF") returned="ED93F1641940C5BE373F32CB887AF8DF" [0037.588] LocalFree (hMem=0x66ff98) returned 0x0 [0037.588] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E0") returned 2 [0037.588] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8DF") returned 32 [0037.588] lstrlenA (lpString="E0") returned 2 [0037.588] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679a48 [0037.588] lstrcpyA (in: lpString1=0x679a48, lpString2="ED93F1641940C5BE373F32CB887AF8DF" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DF") returned="ED93F1641940C5BE373F32CB887AF8DF" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8DF", lpString2="E0" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0") returned="ED93F1641940C5BE373F32CB887AF8DFE0" [0037.588] LocalFree (hMem=0x679208) returned 0x0 [0037.588] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="55") returned 2 [0037.588] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8DFE0") returned 34 [0037.588] lstrlenA (lpString="55") returned 2 [0037.588] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6796d8 [0037.588] lstrcpyA (in: lpString1=0x6796d8, lpString2="ED93F1641940C5BE373F32CB887AF8DFE0" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0") returned="ED93F1641940C5BE373F32CB887AF8DFE0" [0037.588] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0", lpString2="55" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE055") returned="ED93F1641940C5BE373F32CB887AF8DFE055" [0037.588] LocalFree (hMem=0x679a48) returned 0x0 [0037.589] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="07") returned 2 [0037.589] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8DFE055") returned 36 [0037.589] lstrlenA (lpString="07") returned 2 [0037.589] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679998 [0037.589] lstrcpyA (in: lpString1=0x679998, lpString2="ED93F1641940C5BE373F32CB887AF8DFE055" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE055") returned="ED93F1641940C5BE373F32CB887AF8DFE055" [0037.589] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8DFE055", lpString2="07" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE05507") returned="ED93F1641940C5BE373F32CB887AF8DFE05507" [0037.589] LocalFree (hMem=0x6796d8) returned 0x0 [0037.589] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="36") returned 2 [0037.589] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8DFE05507") returned 38 [0037.589] lstrlenA (lpString="36") returned 2 [0037.589] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.589] lstrcpyA (in: lpString1=0x6519e0, lpString2="ED93F1641940C5BE373F32CB887AF8DFE05507" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE05507") returned="ED93F1641940C5BE373F32CB887AF8DFE05507" [0037.589] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8DFE05507", lpString2="36" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0550736") returned="ED93F1641940C5BE373F32CB887AF8DFE0550736" [0037.589] LocalFree (hMem=0x679998) returned 0x0 [0037.589] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6F") returned 2 [0037.589] lstrlenA (lpString="ED93F1641940C5BE373F32CB887AF8DFE0550736") returned 40 [0037.589] lstrlenA (lpString="6F") returned 2 [0037.589] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.589] lstrcpyA (in: lpString1=0x651a98, lpString2="ED93F1641940C5BE373F32CB887AF8DFE0550736" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0550736") returned="ED93F1641940C5BE373F32CB887AF8DFE0550736" [0037.589] lstrcatA (in: lpString1="ED93F1641940C5BE373F32CB887AF8DFE0550736", lpString2="6F" | out: lpString1="ED93F1641940C5BE373F32CB887AF8DFE05507366F") returned="ED93F1641940C5BE373F32CB887AF8DFE05507366F" [0037.589] LocalFree (hMem=0x6519e0) returned 0x0 [0037.589] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.589] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.589] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.589] LocalFree (hMem=0x651a98) returned 0x0 [0037.589] CoTaskMemFree (pv=0x669260) [0037.589] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/gTLi6wHcv/Im8g8t.mp3", lpSrch="?") returned 0x0 [0037.589] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/gTLi6wHcv/Im8g8t.mp3") returned 61 [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0A") returned 2 [0037.615] lstrlenA (lpString="") returned 0 [0037.615] lstrlenA (lpString="0A") returned 2 [0037.615] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3910 [0037.615] lstrcpyA (in: lpString1=0x6a3910, lpString2="" | out: lpString1="") returned="" [0037.615] lstrcatA (in: lpString1="", lpString2="0A" | out: lpString1="0A") returned="0A" [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="58") returned 2 [0037.615] lstrlenA (lpString="0A") returned 2 [0037.615] lstrlenA (lpString="58") returned 2 [0037.615] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a2b90 [0037.615] lstrcpyA (in: lpString1=0x6a2b90, lpString2="0A" | out: lpString1="0A") returned="0A" [0037.615] lstrcatA (in: lpString1="0A", lpString2="58" | out: lpString1="0A58") returned="0A58" [0037.615] LocalFree (hMem=0x6a3910) returned 0x0 [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0037.615] lstrlenA (lpString="0A58") returned 4 [0037.615] lstrlenA (lpString="35") returned 2 [0037.615] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2c20 [0037.615] lstrcpyA (in: lpString1=0x6a2c20, lpString2="0A58" | out: lpString1="0A58") returned="0A58" [0037.615] lstrcatA (in: lpString1="0A58", lpString2="35" | out: lpString1="0A5835") returned="0A5835" [0037.615] LocalFree (hMem=0x6a2b90) returned 0x0 [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.615] lstrlenA (lpString="0A5835") returned 6 [0037.615] lstrlenA (lpString="42") returned 2 [0037.615] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.615] lstrcpyA (in: lpString1=0x6519e0, lpString2="0A5835" | out: lpString1="0A5835") returned="0A5835" [0037.615] lstrcatA (in: lpString1="0A5835", lpString2="42" | out: lpString1="0A583542") returned="0A583542" [0037.615] LocalFree (hMem=0x6a2c20) returned 0x0 [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0037.615] lstrlenA (lpString="0A583542") returned 8 [0037.615] lstrlenA (lpString="35") returned 2 [0037.615] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.615] lstrcpyA (in: lpString1=0x651a78, lpString2="0A583542" | out: lpString1="0A583542") returned="0A583542" [0037.615] lstrcatA (in: lpString1="0A583542", lpString2="35" | out: lpString1="0A58354235") returned="0A58354235" [0037.615] LocalFree (hMem=0x6519e0) returned 0x0 [0037.615] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="24") returned 2 [0037.615] lstrlenA (lpString="0A58354235") returned 10 [0037.615] lstrlenA (lpString="24") returned 2 [0037.616] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.616] lstrcpyA (in: lpString1=0x6519e0, lpString2="0A58354235" | out: lpString1="0A58354235") returned="0A58354235" [0037.616] lstrcatA (in: lpString1="0A58354235", lpString2="24" | out: lpString1="0A5835423524") returned="0A5835423524" [0037.616] LocalFree (hMem=0x651a78) returned 0x0 [0037.616] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.616] lstrlenA (lpString="0A5835423524") returned 12 [0037.616] lstrlenA (lpString="54") returned 2 [0037.616] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.616] lstrcpyA (in: lpString1=0x651a78, lpString2="0A5835423524" | out: lpString1="0A5835423524") returned="0A5835423524" [0037.616] lstrcatA (in: lpString1="0A5835423524", lpString2="54" | out: lpString1="0A583542352454") returned="0A583542352454" [0037.616] LocalFree (hMem=0x6519e0) returned 0x0 [0037.616] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D0") returned 2 [0037.616] lstrlenA (lpString="0A583542352454") returned 14 [0037.616] lstrlenA (lpString="D0") returned 2 [0037.616] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66de70 [0037.616] lstrcpyA (in: lpString1=0x66de70, lpString2="0A583542352454" | out: lpString1="0A583542352454") returned="0A583542352454" [0037.616] lstrcatA (in: lpString1="0A583542352454", lpString2="D0" | out: lpString1="0A583542352454D0") returned="0A583542352454D0" [0037.616] LocalFree (hMem=0x651a78) returned 0x0 [0037.616] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="49") returned 2 [0037.616] lstrlenA (lpString="0A583542352454D0") returned 16 [0037.616] lstrlenA (lpString="49") returned 2 [0037.616] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dd30 [0037.616] lstrcpyA (in: lpString1=0x66dd30, lpString2="0A583542352454D0" | out: lpString1="0A583542352454D0") returned="0A583542352454D0" [0037.616] lstrcatA (in: lpString1="0A583542352454D0", lpString2="49" | out: lpString1="0A583542352454D049") returned="0A583542352454D049" [0037.616] LocalFree (hMem=0x66de70) returned 0x0 [0037.616] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="26") returned 2 [0037.616] lstrlenA (lpString="0A583542352454D049") returned 18 [0037.616] lstrlenA (lpString="26") returned 2 [0037.616] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66db50 [0037.616] lstrcpyA (in: lpString1=0x66db50, lpString2="0A583542352454D049" | out: lpString1="0A583542352454D049") returned="0A583542352454D049" [0037.617] lstrcatA (in: lpString1="0A583542352454D049", lpString2="26" | out: lpString1="0A583542352454D04926") returned="0A583542352454D04926" [0037.617] LocalFree (hMem=0x66dd30) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DB") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926") returned 20 [0037.617] lstrlenA (lpString="DB") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0037.617] lstrcpyA (in: lpString1=0x66e910, lpString2="0A583542352454D04926" | out: lpString1="0A583542352454D04926") returned="0A583542352454D04926" [0037.617] lstrcatA (in: lpString1="0A583542352454D04926", lpString2="DB" | out: lpString1="0A583542352454D04926DB") returned="0A583542352454D04926DB" [0037.617] LocalFree (hMem=0x66db50) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5F") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926DB") returned 22 [0037.617] lstrlenA (lpString="5F") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.617] lstrcpyA (in: lpString1=0x66ff98, lpString2="0A583542352454D04926DB" | out: lpString1="0A583542352454D04926DB") returned="0A583542352454D04926DB" [0037.617] lstrcatA (in: lpString1="0A583542352454D04926DB", lpString2="5F" | out: lpString1="0A583542352454D04926DB5F") returned="0A583542352454D04926DB5F" [0037.617] LocalFree (hMem=0x66e910) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="52") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926DB5F") returned 24 [0037.617] lstrlenA (lpString="52") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6702e0 [0037.617] lstrcpyA (in: lpString1=0x6702e0, lpString2="0A583542352454D04926DB5F" | out: lpString1="0A583542352454D04926DB5F") returned="0A583542352454D04926DB5F" [0037.617] lstrcatA (in: lpString1="0A583542352454D04926DB5F", lpString2="52" | out: lpString1="0A583542352454D04926DB5F52") returned="0A583542352454D04926DB5F52" [0037.617] LocalFree (hMem=0x66ff98) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="99") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926DB5F52") returned 26 [0037.617] lstrlenA (lpString="99") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670b68 [0037.617] lstrcpyA (in: lpString1=0x670b68, lpString2="0A583542352454D04926DB5F52" | out: lpString1="0A583542352454D04926DB5F52") returned="0A583542352454D04926DB5F52" [0037.617] lstrcatA (in: lpString1="0A583542352454D04926DB5F52", lpString2="99" | out: lpString1="0A583542352454D04926DB5F5299") returned="0A583542352454D04926DB5F5299" [0037.617] LocalFree (hMem=0x6702e0) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E4") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926DB5F5299") returned 28 [0037.617] lstrlenA (lpString="E4") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.617] lstrcpyA (in: lpString1=0x66ff98, lpString2="0A583542352454D04926DB5F5299" | out: lpString1="0A583542352454D04926DB5F5299") returned="0A583542352454D04926DB5F5299" [0037.617] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299", lpString2="E4" | out: lpString1="0A583542352454D04926DB5F5299E4") returned="0A583542352454D04926DB5F5299E4" [0037.617] LocalFree (hMem=0x670b68) returned 0x0 [0037.617] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="20") returned 2 [0037.617] lstrlenA (lpString="0A583542352454D04926DB5F5299E4") returned 30 [0037.617] lstrlenA (lpString="20") returned 2 [0037.617] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678f48 [0037.617] lstrcpyA (in: lpString1=0x678f48, lpString2="0A583542352454D04926DB5F5299E4" | out: lpString1="0A583542352454D04926DB5F5299E4") returned="0A583542352454D04926DB5F5299E4" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E4", lpString2="20" | out: lpString1="0A583542352454D04926DB5F5299E420") returned="0A583542352454D04926DB5F5299E420" [0037.618] LocalFree (hMem=0x66ff98) returned 0x0 [0037.618] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C5") returned 2 [0037.618] lstrlenA (lpString="0A583542352454D04926DB5F5299E420") returned 32 [0037.618] lstrlenA (lpString="C5") returned 2 [0037.618] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679208 [0037.618] lstrcpyA (in: lpString1=0x679208, lpString2="0A583542352454D04926DB5F5299E420" | out: lpString1="0A583542352454D04926DB5F5299E420") returned="0A583542352454D04926DB5F5299E420" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E420", lpString2="C5" | out: lpString1="0A583542352454D04926DB5F5299E420C5") returned="0A583542352454D04926DB5F5299E420C5" [0037.618] LocalFree (hMem=0x678f48) returned 0x0 [0037.618] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CD") returned 2 [0037.618] lstrlenA (lpString="0A583542352454D04926DB5F5299E420C5") returned 34 [0037.618] lstrlenA (lpString="CD") returned 2 [0037.618] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6792b8 [0037.618] lstrcpyA (in: lpString1=0x6792b8, lpString2="0A583542352454D04926DB5F5299E420C5" | out: lpString1="0A583542352454D04926DB5F5299E420C5") returned="0A583542352454D04926DB5F5299E420C5" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E420C5", lpString2="CD" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD") returned="0A583542352454D04926DB5F5299E420C5CD" [0037.618] LocalFree (hMem=0x679208) returned 0x0 [0037.618] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2D") returned 2 [0037.618] lstrlenA (lpString="0A583542352454D04926DB5F5299E420C5CD") returned 36 [0037.618] lstrlenA (lpString="2D") returned 2 [0037.618] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679628 [0037.618] lstrcpyA (in: lpString1=0x679628, lpString2="0A583542352454D04926DB5F5299E420C5CD" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD") returned="0A583542352454D04926DB5F5299E420C5CD" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E420C5CD", lpString2="2D" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD2D") returned="0A583542352454D04926DB5F5299E420C5CD2D" [0037.618] LocalFree (hMem=0x6792b8) returned 0x0 [0037.618] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9F") returned 2 [0037.618] lstrlenA (lpString="0A583542352454D04926DB5F5299E420C5CD2D") returned 38 [0037.618] lstrlenA (lpString="9F") returned 2 [0037.618] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.618] lstrcpyA (in: lpString1=0x6519e0, lpString2="0A583542352454D04926DB5F5299E420C5CD2D" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD2D") returned="0A583542352454D04926DB5F5299E420C5CD2D" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E420C5CD2D", lpString2="9F" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD2D9F") returned="0A583542352454D04926DB5F5299E420C5CD2D9F" [0037.618] LocalFree (hMem=0x679628) returned 0x0 [0037.618] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4C") returned 2 [0037.618] lstrlenA (lpString="0A583542352454D04926DB5F5299E420C5CD2D9F") returned 40 [0037.618] lstrlenA (lpString="4C") returned 2 [0037.618] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.618] lstrcpyA (in: lpString1=0x651a98, lpString2="0A583542352454D04926DB5F5299E420C5CD2D9F" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD2D9F") returned="0A583542352454D04926DB5F5299E420C5CD2D9F" [0037.618] lstrcatA (in: lpString1="0A583542352454D04926DB5F5299E420C5CD2D9F", lpString2="4C" | out: lpString1="0A583542352454D04926DB5F5299E420C5CD2D9F4C") returned="0A583542352454D04926DB5F5299E420C5CD2D9F4C" [0037.619] LocalFree (hMem=0x6519e0) returned 0x0 [0037.619] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.619] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.619] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.619] LocalFree (hMem=0x651a98) returned 0x0 [0037.619] CoTaskMemFree (pv=0x6690c8) [0037.619] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt/H-ameGtBiEF.ots", lpSrch="?") returned 0x0 [0037.619] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt/H-ameGtBiEF.ots") returned 61 [0037.646] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9D") returned 2 [0037.646] lstrlenA (lpString="") returned 0 [0037.646] lstrlenA (lpString="9D") returned 2 [0037.646] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3010 [0037.646] lstrcpyA (in: lpString1=0x6a3010, lpString2="" | out: lpString1="") returned="" [0037.646] lstrcatA (in: lpString1="", lpString2="9D" | out: lpString1="9D") returned="9D" [0037.646] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A8") returned 2 [0037.646] lstrlenA (lpString="9D") returned 2 [0037.646] lstrlenA (lpString="A8") returned 2 [0037.646] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3130 [0037.647] lstrcpyA (in: lpString1=0x6a3130, lpString2="9D" | out: lpString1="9D") returned="9D" [0037.647] lstrcatA (in: lpString1="9D", lpString2="A8" | out: lpString1="9DA8") returned="9DA8" [0037.647] LocalFree (hMem=0x6a3010) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="22") returned 2 [0037.647] lstrlenA (lpString="9DA8") returned 4 [0037.647] lstrlenA (lpString="22") returned 2 [0037.647] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3010 [0037.647] lstrcpyA (in: lpString1=0x6a3010, lpString2="9DA8" | out: lpString1="9DA8") returned="9DA8" [0037.647] lstrcatA (in: lpString1="9DA8", lpString2="22" | out: lpString1="9DA822") returned="9DA822" [0037.647] LocalFree (hMem=0x6a3130) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5B") returned 2 [0037.647] lstrlenA (lpString="9DA822") returned 6 [0037.647] lstrlenA (lpString="5B") returned 2 [0037.647] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.647] lstrcpyA (in: lpString1=0x6519e0, lpString2="9DA822" | out: lpString1="9DA822") returned="9DA822" [0037.647] lstrcatA (in: lpString1="9DA822", lpString2="5B" | out: lpString1="9DA8225B") returned="9DA8225B" [0037.647] LocalFree (hMem=0x6a3010) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="03") returned 2 [0037.647] lstrlenA (lpString="9DA8225B") returned 8 [0037.647] lstrlenA (lpString="03") returned 2 [0037.647] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.647] lstrcpyA (in: lpString1=0x651a78, lpString2="9DA8225B" | out: lpString1="9DA8225B") returned="9DA8225B" [0037.647] lstrcatA (in: lpString1="9DA8225B", lpString2="03" | out: lpString1="9DA8225B03") returned="9DA8225B03" [0037.647] LocalFree (hMem=0x6519e0) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DC") returned 2 [0037.647] lstrlenA (lpString="9DA8225B03") returned 10 [0037.647] lstrlenA (lpString="DC") returned 2 [0037.647] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.647] lstrcpyA (in: lpString1=0x6519e0, lpString2="9DA8225B03" | out: lpString1="9DA8225B03") returned="9DA8225B03" [0037.647] lstrcatA (in: lpString1="9DA8225B03", lpString2="DC" | out: lpString1="9DA8225B03DC") returned="9DA8225B03DC" [0037.647] LocalFree (hMem=0x651a78) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9C") returned 2 [0037.647] lstrlenA (lpString="9DA8225B03DC") returned 12 [0037.647] lstrlenA (lpString="9C") returned 2 [0037.647] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.647] lstrcpyA (in: lpString1=0x651a78, lpString2="9DA8225B03DC" | out: lpString1="9DA8225B03DC") returned="9DA8225B03DC" [0037.647] lstrcatA (in: lpString1="9DA8225B03DC", lpString2="9C" | out: lpString1="9DA8225B03DC9C") returned="9DA8225B03DC9C" [0037.647] LocalFree (hMem=0x6519e0) returned 0x0 [0037.647] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="70") returned 2 [0037.647] lstrlenA (lpString="9DA8225B03DC9C") returned 14 [0037.648] lstrlenA (lpString="70") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e0f0 [0037.648] lstrcpyA (in: lpString1=0x66e0f0, lpString2="9DA8225B03DC9C" | out: lpString1="9DA8225B03DC9C") returned="9DA8225B03DC9C" [0037.648] lstrcatA (in: lpString1="9DA8225B03DC9C", lpString2="70" | out: lpString1="9DA8225B03DC9C70") returned="9DA8225B03DC9C70" [0037.648] LocalFree (hMem=0x651a78) returned 0x0 [0037.648] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4B") returned 2 [0037.648] lstrlenA (lpString="9DA8225B03DC9C70") returned 16 [0037.648] lstrlenA (lpString="4B") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dd30 [0037.648] lstrcpyA (in: lpString1=0x66dd30, lpString2="9DA8225B03DC9C70" | out: lpString1="9DA8225B03DC9C70") returned="9DA8225B03DC9C70" [0037.648] lstrcatA (in: lpString1="9DA8225B03DC9C70", lpString2="4B" | out: lpString1="9DA8225B03DC9C704B") returned="9DA8225B03DC9C704B" [0037.648] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.648] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0037.648] lstrlenA (lpString="9DA8225B03DC9C704B") returned 18 [0037.648] lstrlenA (lpString="18") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e2d0 [0037.648] lstrcpyA (in: lpString1=0x66e2d0, lpString2="9DA8225B03DC9C704B" | out: lpString1="9DA8225B03DC9C704B") returned="9DA8225B03DC9C704B" [0037.648] lstrcatA (in: lpString1="9DA8225B03DC9C704B", lpString2="18" | out: lpString1="9DA8225B03DC9C704B18") returned="9DA8225B03DC9C704B18" [0037.648] LocalFree (hMem=0x66dd30) returned 0x0 [0037.648] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8C") returned 2 [0037.648] lstrlenA (lpString="9DA8225B03DC9C704B18") returned 20 [0037.648] lstrlenA (lpString="8C") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0037.648] lstrcpyA (in: lpString1=0x66e910, lpString2="9DA8225B03DC9C704B18" | out: lpString1="9DA8225B03DC9C704B18") returned="9DA8225B03DC9C704B18" [0037.648] lstrcatA (in: lpString1="9DA8225B03DC9C704B18", lpString2="8C" | out: lpString1="9DA8225B03DC9C704B188C") returned="9DA8225B03DC9C704B188C" [0037.648] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.648] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F8") returned 2 [0037.648] lstrlenA (lpString="9DA8225B03DC9C704B188C") returned 22 [0037.648] lstrlenA (lpString="F8") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.648] lstrcpyA (in: lpString1=0x66ff98, lpString2="9DA8225B03DC9C704B188C" | out: lpString1="9DA8225B03DC9C704B188C") returned="9DA8225B03DC9C704B188C" [0037.648] lstrcatA (in: lpString1="9DA8225B03DC9C704B188C", lpString2="F8" | out: lpString1="9DA8225B03DC9C704B188CF8") returned="9DA8225B03DC9C704B188CF8" [0037.648] LocalFree (hMem=0x66e910) returned 0x0 [0037.648] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D3") returned 2 [0037.648] lstrlenA (lpString="9DA8225B03DC9C704B188CF8") returned 24 [0037.648] lstrlenA (lpString="D3") returned 2 [0037.648] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670388 [0037.648] lstrcpyA (in: lpString1=0x670388, lpString2="9DA8225B03DC9C704B188CF8" | out: lpString1="9DA8225B03DC9C704B188CF8") returned="9DA8225B03DC9C704B188CF8" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8", lpString2="D3" | out: lpString1="9DA8225B03DC9C704B188CF8D3") returned="9DA8225B03DC9C704B188CF8D3" [0037.649] LocalFree (hMem=0x66ff98) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4C") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D3") returned 26 [0037.649] lstrlenA (lpString="4C") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.649] lstrcpyA (in: lpString1=0x66ff98, lpString2="9DA8225B03DC9C704B188CF8D3" | out: lpString1="9DA8225B03DC9C704B188CF8D3") returned="9DA8225B03DC9C704B188CF8D3" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D3", lpString2="4C" | out: lpString1="9DA8225B03DC9C704B188CF8D34C") returned="9DA8225B03DC9C704B188CF8D34C" [0037.649] LocalFree (hMem=0x670388) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B7") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34C") returned 28 [0037.649] lstrlenA (lpString="B7") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6708c8 [0037.649] lstrcpyA (in: lpString1=0x6708c8, lpString2="9DA8225B03DC9C704B188CF8D34C" | out: lpString1="9DA8225B03DC9C704B188CF8D34C") returned="9DA8225B03DC9C704B188CF8D34C" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34C", lpString2="B7" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB7") returned="9DA8225B03DC9C704B188CF8D34CB7" [0037.649] LocalFree (hMem=0x66ff98) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5B") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB7") returned 30 [0037.649] lstrlenA (lpString="5B") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678ff8 [0037.649] lstrcpyA (in: lpString1=0x678ff8, lpString2="9DA8225B03DC9C704B188CF8D34CB7" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB7") returned="9DA8225B03DC9C704B188CF8D34CB7" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB7", lpString2="5B" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75B") returned="9DA8225B03DC9C704B188CF8D34CB75B" [0037.649] LocalFree (hMem=0x6708c8) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FD") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB75B") returned 32 [0037.649] lstrlenA (lpString="FD") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679418 [0037.649] lstrcpyA (in: lpString1=0x679418, lpString2="9DA8225B03DC9C704B188CF8D34CB75B" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75B") returned="9DA8225B03DC9C704B188CF8D34CB75B" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB75B", lpString2="FD" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD") returned="9DA8225B03DC9C704B188CF8D34CB75BFD" [0037.649] LocalFree (hMem=0x678ff8) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB75BFD") returned 34 [0037.649] lstrlenA (lpString="2F") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679628 [0037.649] lstrcpyA (in: lpString1=0x679628, lpString2="9DA8225B03DC9C704B188CF8D34CB75BFD" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD") returned="9DA8225B03DC9C704B188CF8D34CB75BFD" [0037.649] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD", lpString2="2F" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2F") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2F" [0037.649] LocalFree (hMem=0x679418) returned 0x0 [0037.649] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F5") returned 2 [0037.649] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB75BFD2F") returned 36 [0037.649] lstrlenA (lpString="F5") returned 2 [0037.649] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679c58 [0037.650] lstrcpyA (in: lpString1=0x679c58, lpString2="9DA8225B03DC9C704B188CF8D34CB75BFD2F" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2F") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2F" [0037.650] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2F", lpString2="F5" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5" [0037.650] LocalFree (hMem=0x679628) returned 0x0 [0037.650] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1E") returned 2 [0037.650] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5") returned 38 [0037.650] lstrlenA (lpString="1E") returned 2 [0037.650] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.650] lstrcpyA (in: lpString1=0x6519e0, lpString2="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5" [0037.650] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF5", lpString2="1E" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E" [0037.650] LocalFree (hMem=0x679c58) returned 0x0 [0037.650] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="04") returned 2 [0037.650] lstrlenA (lpString="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E") returned 40 [0037.650] lstrlenA (lpString="04") returned 2 [0037.650] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.650] lstrcpyA (in: lpString1=0x651a98, lpString2="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E" [0037.650] lstrcatA (in: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E", lpString2="04" | out: lpString1="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E04") returned="9DA8225B03DC9C704B188CF8D34CB75BFD2FF51E04" [0037.650] LocalFree (hMem=0x6519e0) returned 0x0 [0037.650] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.650] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.650] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.650] LocalFree (hMem=0x651a98) returned 0x0 [0037.650] CoTaskMemFree (pv=0x668c00) [0037.650] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/v%20DRdGXtvkYLmR2Vnz.flv", lpSrch="?") returned 0x0 [0037.650] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/v%20DRdGXtvkYLmR2Vnz.flv") returned 66 [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="90") returned 2 [0037.679] lstrlenA (lpString="") returned 0 [0037.679] lstrlenA (lpString="90") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a37f0 [0037.679] lstrcpyA (in: lpString1=0x6a37f0, lpString2="" | out: lpString1="") returned="" [0037.679] lstrcatA (in: lpString1="", lpString2="90" | out: lpString1="90") returned="90" [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2B") returned 2 [0037.679] lstrlenA (lpString="90") returned 2 [0037.679] lstrlenA (lpString="2B") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a31c0 [0037.679] lstrcpyA (in: lpString1=0x6a31c0, lpString2="90" | out: lpString1="90") returned="90" [0037.679] lstrcatA (in: lpString1="90", lpString2="2B" | out: lpString1="902B") returned="902B" [0037.679] LocalFree (hMem=0x6a37f0) returned 0x0 [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0037.679] lstrlenA (lpString="902B") returned 4 [0037.679] lstrlenA (lpString="A3") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3520 [0037.679] lstrcpyA (in: lpString1=0x6a3520, lpString2="902B" | out: lpString1="902B") returned="902B" [0037.679] lstrcatA (in: lpString1="902B", lpString2="A3" | out: lpString1="902BA3") returned="902BA3" [0037.679] LocalFree (hMem=0x6a31c0) returned 0x0 [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3A") returned 2 [0037.679] lstrlenA (lpString="902BA3") returned 6 [0037.679] lstrlenA (lpString="3A") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.679] lstrcpyA (in: lpString1=0x6519e0, lpString2="902BA3" | out: lpString1="902BA3") returned="902BA3" [0037.679] lstrcatA (in: lpString1="902BA3", lpString2="3A" | out: lpString1="902BA33A") returned="902BA33A" [0037.679] LocalFree (hMem=0x6a3520) returned 0x0 [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.679] lstrlenA (lpString="902BA33A") returned 8 [0037.679] lstrlenA (lpString="54") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.679] lstrcpyA (in: lpString1=0x651a78, lpString2="902BA33A" | out: lpString1="902BA33A") returned="902BA33A" [0037.679] lstrcatA (in: lpString1="902BA33A", lpString2="54" | out: lpString1="902BA33A54") returned="902BA33A54" [0037.679] LocalFree (hMem=0x6519e0) returned 0x0 [0037.679] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AD") returned 2 [0037.679] lstrlenA (lpString="902BA33A54") returned 10 [0037.679] lstrlenA (lpString="AD") returned 2 [0037.679] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.679] lstrcpyA (in: lpString1=0x6519e0, lpString2="902BA33A54" | out: lpString1="902BA33A54") returned="902BA33A54" [0037.679] lstrcatA (in: lpString1="902BA33A54", lpString2="AD" | out: lpString1="902BA33A54AD") returned="902BA33A54AD" [0037.680] LocalFree (hMem=0x651a78) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FE") returned 2 [0037.680] lstrlenA (lpString="902BA33A54AD") returned 12 [0037.680] lstrlenA (lpString="FE") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.680] lstrcpyA (in: lpString1=0x651a78, lpString2="902BA33A54AD" | out: lpString1="902BA33A54AD") returned="902BA33A54AD" [0037.680] lstrcatA (in: lpString1="902BA33A54AD", lpString2="FE" | out: lpString1="902BA33A54ADFE") returned="902BA33A54ADFE" [0037.680] LocalFree (hMem=0x6519e0) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="04") returned 2 [0037.680] lstrlenA (lpString="902BA33A54ADFE") returned 14 [0037.680] lstrlenA (lpString="04") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e410 [0037.680] lstrcpyA (in: lpString1=0x66e410, lpString2="902BA33A54ADFE" | out: lpString1="902BA33A54ADFE") returned="902BA33A54ADFE" [0037.680] lstrcatA (in: lpString1="902BA33A54ADFE", lpString2="04" | out: lpString1="902BA33A54ADFE04") returned="902BA33A54ADFE04" [0037.680] LocalFree (hMem=0x651a78) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C8") returned 2 [0037.680] lstrlenA (lpString="902BA33A54ADFE04") returned 16 [0037.680] lstrlenA (lpString="C8") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e0f0 [0037.680] lstrcpyA (in: lpString1=0x66e0f0, lpString2="902BA33A54ADFE04" | out: lpString1="902BA33A54ADFE04") returned="902BA33A54ADFE04" [0037.680] lstrcatA (in: lpString1="902BA33A54ADFE04", lpString2="C8" | out: lpString1="902BA33A54ADFE04C8") returned="902BA33A54ADFE04C8" [0037.680] LocalFree (hMem=0x66e410) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BA") returned 2 [0037.680] lstrlenA (lpString="902BA33A54ADFE04C8") returned 18 [0037.680] lstrlenA (lpString="BA") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e910 [0037.680] lstrcpyA (in: lpString1=0x66e910, lpString2="902BA33A54ADFE04C8" | out: lpString1="902BA33A54ADFE04C8") returned="902BA33A54ADFE04C8" [0037.680] lstrcatA (in: lpString1="902BA33A54ADFE04C8", lpString2="BA" | out: lpString1="902BA33A54ADFE04C8BA") returned="902BA33A54ADFE04C8BA" [0037.680] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.680] lstrlenA (lpString="902BA33A54ADFE04C8BA") returned 20 [0037.680] lstrlenA (lpString="7A") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dbf0 [0037.680] lstrcpyA (in: lpString1=0x66dbf0, lpString2="902BA33A54ADFE04C8BA" | out: lpString1="902BA33A54ADFE04C8BA") returned="902BA33A54ADFE04C8BA" [0037.680] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA", lpString2="7A" | out: lpString1="902BA33A54ADFE04C8BA7A") returned="902BA33A54ADFE04C8BA7A" [0037.680] LocalFree (hMem=0x66e910) returned 0x0 [0037.680] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0037.680] lstrlenA (lpString="902BA33A54ADFE04C8BA7A") returned 22 [0037.680] lstrlenA (lpString="97") returned 2 [0037.680] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.680] lstrcpyA (in: lpString1=0x66ff98, lpString2="902BA33A54ADFE04C8BA7A" | out: lpString1="902BA33A54ADFE04C8BA7A") returned="902BA33A54ADFE04C8BA7A" [0037.680] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A", lpString2="97" | out: lpString1="902BA33A54ADFE04C8BA7A97") returned="902BA33A54ADFE04C8BA7A97" [0037.681] LocalFree (hMem=0x66dbf0) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C8") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97") returned 24 [0037.681] lstrlenA (lpString="C8") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0037.681] lstrcpyA (in: lpString1=0x670040, lpString2="902BA33A54ADFE04C8BA7A97" | out: lpString1="902BA33A54ADFE04C8BA7A97") returned="902BA33A54ADFE04C8BA7A97" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97", lpString2="C8" | out: lpString1="902BA33A54ADFE04C8BA7A97C8") returned="902BA33A54ADFE04C8BA7A97C8" [0037.681] LocalFree (hMem=0x66ff98) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D5") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8") returned 26 [0037.681] lstrlenA (lpString="D5") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6708c8 [0037.681] lstrcpyA (in: lpString1=0x6708c8, lpString2="902BA33A54ADFE04C8BA7A97C8" | out: lpString1="902BA33A54ADFE04C8BA7A97C8") returned="902BA33A54ADFE04C8BA7A97C8" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8", lpString2="D5" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D5") returned="902BA33A54ADFE04C8BA7A97C8D5" [0037.681] LocalFree (hMem=0x670040) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D5") returned 28 [0037.681] lstrlenA (lpString="2E") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.681] lstrcpyA (in: lpString1=0x66ff98, lpString2="902BA33A54ADFE04C8BA7A97C8D5" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D5") returned="902BA33A54ADFE04C8BA7A97C8D5" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D5", lpString2="2E" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52E") returned="902BA33A54ADFE04C8BA7A97C8D52E" [0037.681] LocalFree (hMem=0x6708c8) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52E") returned 30 [0037.681] lstrlenA (lpString="FF") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679418 [0037.681] lstrcpyA (in: lpString1=0x679418, lpString2="902BA33A54ADFE04C8BA7A97C8D52E" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52E") returned="902BA33A54ADFE04C8BA7A97C8D52E" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52E", lpString2="FF" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF") returned="902BA33A54ADFE04C8BA7A97C8D52EFF" [0037.681] LocalFree (hMem=0x66ff98) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1C") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52EFF") returned 32 [0037.681] lstrlenA (lpString="1C") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6792b8 [0037.681] lstrcpyA (in: lpString1=0x6792b8, lpString2="902BA33A54ADFE04C8BA7A97C8D52EFF" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF") returned="902BA33A54ADFE04C8BA7A97C8D52EFF" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF", lpString2="1C" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1C") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1C" [0037.681] LocalFree (hMem=0x679418) returned 0x0 [0037.681] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.681] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52EFF1C") returned 34 [0037.681] lstrlenA (lpString="F7") returned 2 [0037.681] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679af8 [0037.681] lstrcpyA (in: lpString1=0x679af8, lpString2="902BA33A54ADFE04C8BA7A97C8D52EFF1C" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1C") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1C" [0037.681] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1C", lpString2="F7" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7" [0037.681] LocalFree (hMem=0x6792b8) returned 0x0 [0037.682] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0F") returned 2 [0037.682] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7") returned 36 [0037.682] lstrlenA (lpString="0F") returned 2 [0037.682] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679838 [0037.682] lstrcpyA (in: lpString1=0x679838, lpString2="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7" [0037.682] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF7", lpString2="0F" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F" [0037.682] LocalFree (hMem=0x679af8) returned 0x0 [0037.682] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0037.682] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F") returned 38 [0037.682] lstrlenA (lpString="82") returned 2 [0037.682] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.682] lstrcpyA (in: lpString1=0x6519e0, lpString2="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F" [0037.682] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F", lpString2="82" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82" [0037.682] LocalFree (hMem=0x679838) returned 0x0 [0037.682] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9C") returned 2 [0037.682] lstrlenA (lpString="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82") returned 40 [0037.682] lstrlenA (lpString="9C") returned 2 [0037.682] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.682] lstrcpyA (in: lpString1=0x651a98, lpString2="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82" [0037.682] lstrcatA (in: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F82", lpString2="9C" | out: lpString1="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F829C") returned="902BA33A54ADFE04C8BA7A97C8D52EFF1CF70F829C" [0037.682] LocalFree (hMem=0x6519e0) returned 0x0 [0037.682] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.682] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.682] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.682] LocalFree (hMem=0x651a98) returned 0x0 [0037.682] CoTaskMemFree (pv=0x6a3880) [0037.682] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/YoqRgtzEJJFhTLYe9D6.pptx", lpSrch="?") returned 0x0 [0037.682] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/YoqRgtzEJJFhTLYe9D6.pptx") returned 60 [0037.709] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F0") returned 2 [0037.709] lstrlenA (lpString="") returned 0 [0037.709] lstrlenA (lpString="F0") returned 2 [0037.709] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2b90 [0037.709] lstrcpyA (in: lpString1=0x6a2b90, lpString2="" | out: lpString1="") returned="" [0037.709] lstrcatA (in: lpString1="", lpString2="F0" | out: lpString1="F0") returned="F0" [0037.709] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4B") returned 2 [0037.709] lstrlenA (lpString="F0") returned 2 [0037.709] lstrlenA (lpString="4B") returned 2 [0037.709] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a36d0 [0037.709] lstrcpyA (in: lpString1=0x6a36d0, lpString2="F0" | out: lpString1="F0") returned="F0" [0037.709] lstrcatA (in: lpString1="F0", lpString2="4B" | out: lpString1="F04B") returned="F04B" [0037.709] LocalFree (hMem=0x6a2b90) returned 0x0 [0037.709] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.710] lstrlenA (lpString="F04B") returned 4 [0037.710] lstrlenA (lpString="54") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a35b0 [0037.710] lstrcpyA (in: lpString1=0x6a35b0, lpString2="F04B" | out: lpString1="F04B") returned="F04B" [0037.710] lstrcatA (in: lpString1="F04B", lpString2="54" | out: lpString1="F04B54") returned="F04B54" [0037.710] LocalFree (hMem=0x6a36d0) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EF") returned 2 [0037.710] lstrlenA (lpString="F04B54") returned 6 [0037.710] lstrlenA (lpString="EF") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.710] lstrcpyA (in: lpString1=0x6519e0, lpString2="F04B54" | out: lpString1="F04B54") returned="F04B54" [0037.710] lstrcatA (in: lpString1="F04B54", lpString2="EF" | out: lpString1="F04B54EF") returned="F04B54EF" [0037.710] LocalFree (hMem=0x6a35b0) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5A") returned 2 [0037.710] lstrlenA (lpString="F04B54EF") returned 8 [0037.710] lstrlenA (lpString="5A") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.710] lstrcpyA (in: lpString1=0x651a78, lpString2="F04B54EF" | out: lpString1="F04B54EF") returned="F04B54EF" [0037.710] lstrcatA (in: lpString1="F04B54EF", lpString2="5A" | out: lpString1="F04B54EF5A") returned="F04B54EF5A" [0037.710] LocalFree (hMem=0x6519e0) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0037.710] lstrlenA (lpString="F04B54EF5A") returned 10 [0037.710] lstrlenA (lpString="57") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.710] lstrcpyA (in: lpString1=0x6519e0, lpString2="F04B54EF5A" | out: lpString1="F04B54EF5A") returned="F04B54EF5A" [0037.710] lstrcatA (in: lpString1="F04B54EF5A", lpString2="57" | out: lpString1="F04B54EF5A57") returned="F04B54EF5A57" [0037.710] LocalFree (hMem=0x651a78) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="60") returned 2 [0037.710] lstrlenA (lpString="F04B54EF5A57") returned 12 [0037.710] lstrlenA (lpString="60") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.710] lstrcpyA (in: lpString1=0x651a78, lpString2="F04B54EF5A57" | out: lpString1="F04B54EF5A57") returned="F04B54EF5A57" [0037.710] lstrcatA (in: lpString1="F04B54EF5A57", lpString2="60" | out: lpString1="F04B54EF5A5760") returned="F04B54EF5A5760" [0037.710] LocalFree (hMem=0x6519e0) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0037.710] lstrlenA (lpString="F04B54EF5A5760") returned 14 [0037.710] lstrlenA (lpString="FF") returned 2 [0037.710] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e730 [0037.710] lstrcpyA (in: lpString1=0x66e730, lpString2="F04B54EF5A5760" | out: lpString1="F04B54EF5A5760") returned="F04B54EF5A5760" [0037.710] lstrcatA (in: lpString1="F04B54EF5A5760", lpString2="FF" | out: lpString1="F04B54EF5A5760FF") returned="F04B54EF5A5760FF" [0037.710] LocalFree (hMem=0x651a78) returned 0x0 [0037.710] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF") returned 16 [0037.711] lstrlenA (lpString="97") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e550 [0037.711] lstrcpyA (in: lpString1=0x66e550, lpString2="F04B54EF5A5760FF" | out: lpString1="F04B54EF5A5760FF") returned="F04B54EF5A5760FF" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF", lpString2="97" | out: lpString1="F04B54EF5A5760FF97") returned="F04B54EF5A5760FF97" [0037.711] LocalFree (hMem=0x66e730) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="80") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF97") returned 18 [0037.711] lstrlenA (lpString="80") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0037.711] lstrcpyA (in: lpString1=0x66e0f0, lpString2="F04B54EF5A5760FF97" | out: lpString1="F04B54EF5A5760FF97") returned="F04B54EF5A5760FF97" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF97", lpString2="80" | out: lpString1="F04B54EF5A5760FF9780") returned="F04B54EF5A5760FF9780" [0037.711] LocalFree (hMem=0x66e550) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="28") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF9780") returned 20 [0037.711] lstrlenA (lpString="28") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ea50 [0037.711] lstrcpyA (in: lpString1=0x66ea50, lpString2="F04B54EF5A5760FF9780" | out: lpString1="F04B54EF5A5760FF9780") returned="F04B54EF5A5760FF9780" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF9780", lpString2="28" | out: lpString1="F04B54EF5A5760FF978028") returned="F04B54EF5A5760FF978028" [0037.711] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="38") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF978028") returned 22 [0037.711] lstrlenA (lpString="38") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6702e0 [0037.711] lstrcpyA (in: lpString1=0x6702e0, lpString2="F04B54EF5A5760FF978028" | out: lpString1="F04B54EF5A5760FF978028") returned="F04B54EF5A5760FF978028" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF978028", lpString2="38" | out: lpString1="F04B54EF5A5760FF97802838") returned="F04B54EF5A5760FF97802838" [0037.711] LocalFree (hMem=0x66ea50) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="51") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF97802838") returned 24 [0037.711] lstrlenA (lpString="51") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0037.711] lstrcpyA (in: lpString1=0x66ff98, lpString2="F04B54EF5A5760FF97802838" | out: lpString1="F04B54EF5A5760FF97802838") returned="F04B54EF5A5760FF97802838" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838", lpString2="51" | out: lpString1="F04B54EF5A5760FF9780283851") returned="F04B54EF5A5760FF9780283851" [0037.711] LocalFree (hMem=0x6702e0) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4D") returned 2 [0037.711] lstrlenA (lpString="F04B54EF5A5760FF9780283851") returned 26 [0037.711] lstrlenA (lpString="4D") returned 2 [0037.711] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670628 [0037.711] lstrcpyA (in: lpString1=0x670628, lpString2="F04B54EF5A5760FF9780283851" | out: lpString1="F04B54EF5A5760FF9780283851") returned="F04B54EF5A5760FF9780283851" [0037.711] lstrcatA (in: lpString1="F04B54EF5A5760FF9780283851", lpString2="4D" | out: lpString1="F04B54EF5A5760FF97802838514D") returned="F04B54EF5A5760FF97802838514D" [0037.711] LocalFree (hMem=0x66ff98) returned 0x0 [0037.711] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="88") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D") returned 28 [0037.712] lstrlenA (lpString="88") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670ac0 [0037.712] lstrcpyA (in: lpString1=0x670ac0, lpString2="F04B54EF5A5760FF97802838514D" | out: lpString1="F04B54EF5A5760FF97802838514D") returned="F04B54EF5A5760FF97802838514D" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D", lpString2="88" | out: lpString1="F04B54EF5A5760FF97802838514D88") returned="F04B54EF5A5760FF97802838514D88" [0037.712] LocalFree (hMem=0x670628) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88") returned 30 [0037.712] lstrlenA (lpString="CB") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679578 [0037.712] lstrcpyA (in: lpString1=0x679578, lpString2="F04B54EF5A5760FF97802838514D88" | out: lpString1="F04B54EF5A5760FF97802838514D88") returned="F04B54EF5A5760FF97802838514D88" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88", lpString2="CB" | out: lpString1="F04B54EF5A5760FF97802838514D88CB") returned="F04B54EF5A5760FF97802838514D88CB" [0037.712] LocalFree (hMem=0x670ac0) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CD") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88CB") returned 32 [0037.712] lstrlenA (lpString="CD") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679788 [0037.712] lstrcpyA (in: lpString1=0x679788, lpString2="F04B54EF5A5760FF97802838514D88CB" | out: lpString1="F04B54EF5A5760FF97802838514D88CB") returned="F04B54EF5A5760FF97802838514D88CB" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88CB", lpString2="CD" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD") returned="F04B54EF5A5760FF97802838514D88CBCD" [0037.712] LocalFree (hMem=0x679578) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4E") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88CBCD") returned 34 [0037.712] lstrlenA (lpString="4E") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678f48 [0037.712] lstrcpyA (in: lpString1=0x678f48, lpString2="F04B54EF5A5760FF97802838514D88CBCD" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD") returned="F04B54EF5A5760FF97802838514D88CBCD" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88CBCD", lpString2="4E" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4E") returned="F04B54EF5A5760FF97802838514D88CBCD4E" [0037.712] LocalFree (hMem=0x679788) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A1") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88CBCD4E") returned 36 [0037.712] lstrlenA (lpString="A1") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679998 [0037.712] lstrcpyA (in: lpString1=0x679998, lpString2="F04B54EF5A5760FF97802838514D88CBCD4E" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4E") returned="F04B54EF5A5760FF97802838514D88CBCD4E" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88CBCD4E", lpString2="A1" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA1") returned="F04B54EF5A5760FF97802838514D88CBCD4EA1" [0037.712] LocalFree (hMem=0x678f48) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="68") returned 2 [0037.712] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88CBCD4EA1") returned 38 [0037.712] lstrlenA (lpString="68") returned 2 [0037.712] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.712] lstrcpyA (in: lpString1=0x6519e0, lpString2="F04B54EF5A5760FF97802838514D88CBCD4EA1" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA1") returned="F04B54EF5A5760FF97802838514D88CBCD4EA1" [0037.712] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA1", lpString2="68" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA168") returned="F04B54EF5A5760FF97802838514D88CBCD4EA168" [0037.712] LocalFree (hMem=0x679998) returned 0x0 [0037.712] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1A") returned 2 [0037.713] lstrlenA (lpString="F04B54EF5A5760FF97802838514D88CBCD4EA168") returned 40 [0037.713] lstrlenA (lpString="1A") returned 2 [0037.713] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.713] lstrcpyA (in: lpString1=0x651a98, lpString2="F04B54EF5A5760FF97802838514D88CBCD4EA168" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA168") returned="F04B54EF5A5760FF97802838514D88CBCD4EA168" [0037.713] lstrcatA (in: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA168", lpString2="1A" | out: lpString1="F04B54EF5A5760FF97802838514D88CBCD4EA1681A") returned="F04B54EF5A5760FF97802838514D88CBCD4EA1681A" [0037.713] LocalFree (hMem=0x6519e0) returned 0x0 [0037.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.713] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.713] LocalFree (hMem=0x651a98) returned 0x0 [0037.713] CoTaskMemFree (pv=0x6690c8) [0037.713] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/jskaQmXDP3lZ60E.flv", lpSrch="?") returned 0x0 [0037.713] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/jskaQmXDP3lZ60E.flv") returned 61 [0037.742] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0037.742] lstrlenA (lpString="") returned 0 [0037.742] lstrlenA (lpString="C7") returned 2 [0037.742] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2d40 [0037.743] lstrcpyA (in: lpString1=0x6a2d40, lpString2="" | out: lpString1="") returned="" [0037.743] lstrcatA (in: lpString1="", lpString2="C7" | out: lpString1="C7") returned="C7" [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D2") returned 2 [0037.743] lstrlenA (lpString="C7") returned 2 [0037.743] lstrlenA (lpString="D2") returned 2 [0037.743] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a32e0 [0037.743] lstrcpyA (in: lpString1=0x6a32e0, lpString2="C7" | out: lpString1="C7") returned="C7" [0037.743] lstrcatA (in: lpString1="C7", lpString2="D2" | out: lpString1="C7D2") returned="C7D2" [0037.743] LocalFree (hMem=0x6a2d40) returned 0x0 [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="44") returned 2 [0037.743] lstrlenA (lpString="C7D2") returned 4 [0037.743] lstrlenA (lpString="44") returned 2 [0037.743] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3400 [0037.743] lstrcpyA (in: lpString1=0x6a3400, lpString2="C7D2" | out: lpString1="C7D2") returned="C7D2" [0037.743] lstrcatA (in: lpString1="C7D2", lpString2="44" | out: lpString1="C7D244") returned="C7D244" [0037.743] LocalFree (hMem=0x6a32e0) returned 0x0 [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3F") returned 2 [0037.743] lstrlenA (lpString="C7D244") returned 6 [0037.743] lstrlenA (lpString="3F") returned 2 [0037.743] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.743] lstrcpyA (in: lpString1=0x6519e0, lpString2="C7D244" | out: lpString1="C7D244") returned="C7D244" [0037.743] lstrcatA (in: lpString1="C7D244", lpString2="3F" | out: lpString1="C7D2443F") returned="C7D2443F" [0037.743] LocalFree (hMem=0x6a3400) returned 0x0 [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="91") returned 2 [0037.743] lstrlenA (lpString="C7D2443F") returned 8 [0037.743] lstrlenA (lpString="91") returned 2 [0037.743] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.743] lstrcpyA (in: lpString1=0x651a78, lpString2="C7D2443F" | out: lpString1="C7D2443F") returned="C7D2443F" [0037.743] lstrcatA (in: lpString1="C7D2443F", lpString2="91" | out: lpString1="C7D2443F91") returned="C7D2443F91" [0037.743] LocalFree (hMem=0x6519e0) returned 0x0 [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C6") returned 2 [0037.743] lstrlenA (lpString="C7D2443F91") returned 10 [0037.743] lstrlenA (lpString="C6") returned 2 [0037.743] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.743] lstrcpyA (in: lpString1=0x6519e0, lpString2="C7D2443F91" | out: lpString1="C7D2443F91") returned="C7D2443F91" [0037.743] lstrcatA (in: lpString1="C7D2443F91", lpString2="C6" | out: lpString1="C7D2443F91C6") returned="C7D2443F91C6" [0037.743] LocalFree (hMem=0x651a78) returned 0x0 [0037.743] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6") returned 12 [0037.744] lstrlenA (lpString="C7") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.744] lstrcpyA (in: lpString1=0x651a78, lpString2="C7D2443F91C6" | out: lpString1="C7D2443F91C6") returned="C7D2443F91C6" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6", lpString2="C7" | out: lpString1="C7D2443F91C6C7") returned="C7D2443F91C6C7" [0037.744] LocalFree (hMem=0x6519e0) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0D") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6C7") returned 14 [0037.744] lstrlenA (lpString="0D") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0037.744] lstrcpyA (in: lpString1=0x66e2d0, lpString2="C7D2443F91C6C7" | out: lpString1="C7D2443F91C6C7") returned="C7D2443F91C6C7" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6C7", lpString2="0D" | out: lpString1="C7D2443F91C6C70D") returned="C7D2443F91C6C70D" [0037.744] LocalFree (hMem=0x651a78) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D8") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6C70D") returned 16 [0037.744] lstrlenA (lpString="D8") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66ddd0 [0037.744] lstrcpyA (in: lpString1=0x66ddd0, lpString2="C7D2443F91C6C70D" | out: lpString1="C7D2443F91C6C70D") returned="C7D2443F91C6C70D" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6C70D", lpString2="D8" | out: lpString1="C7D2443F91C6C70DD8") returned="C7D2443F91C6C70DD8" [0037.744] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="80") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6C70DD8") returned 18 [0037.744] lstrlenA (lpString="80") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e2d0 [0037.744] lstrcpyA (in: lpString1=0x66e2d0, lpString2="C7D2443F91C6C70DD8" | out: lpString1="C7D2443F91C6C70DD8") returned="C7D2443F91C6C70DD8" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6C70DD8", lpString2="80" | out: lpString1="C7D2443F91C6C70DD880") returned="C7D2443F91C6C70DD880" [0037.744] LocalFree (hMem=0x66ddd0) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6C70DD880") returned 20 [0037.744] lstrlenA (lpString="54") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ea50 [0037.744] lstrcpyA (in: lpString1=0x66ea50, lpString2="C7D2443F91C6C70DD880" | out: lpString1="C7D2443F91C6C70DD880") returned="C7D2443F91C6C70DD880" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6C70DD880", lpString2="54" | out: lpString1="C7D2443F91C6C70DD88054") returned="C7D2443F91C6C70DD88054" [0037.744] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="79") returned 2 [0037.744] lstrlenA (lpString="C7D2443F91C6C70DD88054") returned 22 [0037.744] lstrlenA (lpString="79") returned 2 [0037.744] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670a18 [0037.744] lstrcpyA (in: lpString1=0x670a18, lpString2="C7D2443F91C6C70DD88054" | out: lpString1="C7D2443F91C6C70DD88054") returned="C7D2443F91C6C70DD88054" [0037.744] lstrcatA (in: lpString1="C7D2443F91C6C70DD88054", lpString2="79" | out: lpString1="C7D2443F91C6C70DD8805479") returned="C7D2443F91C6C70DD8805479" [0037.744] LocalFree (hMem=0x66ea50) returned 0x0 [0037.744] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D9") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479") returned 24 [0037.745] lstrlenA (lpString="D9") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.745] lstrcpyA (in: lpString1=0x670628, lpString2="C7D2443F91C6C70DD8805479" | out: lpString1="C7D2443F91C6C70DD8805479") returned="C7D2443F91C6C70DD8805479" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479", lpString2="D9" | out: lpString1="C7D2443F91C6C70DD8805479D9") returned="C7D2443F91C6C70DD8805479D9" [0037.745] LocalFree (hMem=0x670a18) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="ED") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9") returned 26 [0037.745] lstrlenA (lpString="ED") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.745] lstrcpyA (in: lpString1=0x66ff98, lpString2="C7D2443F91C6C70DD8805479D9" | out: lpString1="C7D2443F91C6C70DD8805479D9") returned="C7D2443F91C6C70DD8805479D9" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9", lpString2="ED" | out: lpString1="C7D2443F91C6C70DD8805479D9ED") returned="C7D2443F91C6C70DD8805479D9ED" [0037.745] LocalFree (hMem=0x670628) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C1") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9ED") returned 28 [0037.745] lstrlenA (lpString="C1") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0037.745] lstrcpyA (in: lpString1=0x670040, lpString2="C7D2443F91C6C70DD8805479D9ED" | out: lpString1="C7D2443F91C6C70DD8805479D9ED") returned="C7D2443F91C6C70DD8805479D9ED" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9ED", lpString2="C1" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1") returned="C7D2443F91C6C70DD8805479D9EDC1" [0037.745] LocalFree (hMem=0x66ff98) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F1") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1") returned 30 [0037.745] lstrlenA (lpString="F1") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679368 [0037.745] lstrcpyA (in: lpString1=0x679368, lpString2="C7D2443F91C6C70DD8805479D9EDC1" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1") returned="C7D2443F91C6C70DD8805479D9EDC1" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1", lpString2="F1" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1") returned="C7D2443F91C6C70DD8805479D9EDC1F1" [0037.745] LocalFree (hMem=0x670040) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1F1") returned 32 [0037.745] lstrlenA (lpString="54") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678de8 [0037.745] lstrcpyA (in: lpString1=0x678de8, lpString2="C7D2443F91C6C70DD8805479D9EDC1F1" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1") returned="C7D2443F91C6C70DD8805479D9EDC1F1" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1", lpString2="54" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F154") returned="C7D2443F91C6C70DD8805479D9EDC1F154" [0037.745] LocalFree (hMem=0x679368) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="60") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1F154") returned 34 [0037.745] lstrlenA (lpString="60") returned 2 [0037.745] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679158 [0037.745] lstrcpyA (in: lpString1=0x679158, lpString2="C7D2443F91C6C70DD8805479D9EDC1F154" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F154") returned="C7D2443F91C6C70DD8805479D9EDC1F154" [0037.745] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1F154", lpString2="60" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460") returned="C7D2443F91C6C70DD8805479D9EDC1F15460" [0037.745] LocalFree (hMem=0x678de8) returned 0x0 [0037.745] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="16") returned 2 [0037.745] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1F15460") returned 36 [0037.746] lstrlenA (lpString="16") returned 2 [0037.746] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679628 [0037.746] lstrcpyA (in: lpString1=0x679628, lpString2="C7D2443F91C6C70DD8805479D9EDC1F15460" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460") returned="C7D2443F91C6C70DD8805479D9EDC1F15460" [0037.746] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460", lpString2="16" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1546016") returned="C7D2443F91C6C70DD8805479D9EDC1F1546016" [0037.746] LocalFree (hMem=0x679158) returned 0x0 [0037.746] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4F") returned 2 [0037.746] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1F1546016") returned 38 [0037.746] lstrlenA (lpString="4F") returned 2 [0037.746] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.746] lstrcpyA (in: lpString1=0x6519e0, lpString2="C7D2443F91C6C70DD8805479D9EDC1F1546016" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1546016") returned="C7D2443F91C6C70DD8805479D9EDC1F1546016" [0037.746] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1F1546016", lpString2="4F" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460164F") returned="C7D2443F91C6C70DD8805479D9EDC1F15460164F" [0037.746] LocalFree (hMem=0x679628) returned 0x0 [0037.746] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FD") returned 2 [0037.746] lstrlenA (lpString="C7D2443F91C6C70DD8805479D9EDC1F15460164F") returned 40 [0037.746] lstrlenA (lpString="FD") returned 2 [0037.746] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.746] lstrcpyA (in: lpString1=0x651a98, lpString2="C7D2443F91C6C70DD8805479D9EDC1F15460164F" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460164F") returned="C7D2443F91C6C70DD8805479D9EDC1F15460164F" [0037.746] lstrcatA (in: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460164F", lpString2="FD" | out: lpString1="C7D2443F91C6C70DD8805479D9EDC1F15460164FFD") returned="C7D2443F91C6C70DD8805479D9EDC1F15460164FFD" [0037.746] LocalFree (hMem=0x6519e0) returned 0x0 [0037.746] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.746] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.746] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.746] LocalFree (hMem=0x651a98) returned 0x0 [0037.746] CoTaskMemFree (pv=0x6689e0) [0037.746] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/Kn70HK2lHZ.mkv", lpSrch="?") returned 0x0 [0037.746] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/Kn70HK2lHZ.mkv") returned 48 [0037.765] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5F") returned 2 [0037.765] lstrlenA (lpString="") returned 0 [0037.765] lstrlenA (lpString="5F") returned 2 [0037.765] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3400 [0037.765] lstrcpyA (in: lpString1=0x6a3400, lpString2="" | out: lpString1="") returned="" [0037.765] lstrcatA (in: lpString1="", lpString2="5F" | out: lpString1="5F") returned="5F" [0037.765] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="85") returned 2 [0037.765] lstrlenA (lpString="5F") returned 2 [0037.765] lstrlenA (lpString="85") returned 2 [0037.765] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3520 [0037.765] lstrcpyA (in: lpString1=0x6a3520, lpString2="5F" | out: lpString1="5F") returned="5F" [0037.765] lstrcatA (in: lpString1="5F", lpString2="85" | out: lpString1="5F85") returned="5F85" [0037.765] LocalFree (hMem=0x6a3400) returned 0x0 [0037.765] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="61") returned 2 [0037.765] lstrlenA (lpString="5F85") returned 4 [0037.765] lstrlenA (lpString="61") returned 2 [0037.765] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3640 [0037.765] lstrcpyA (in: lpString1=0x6a3640, lpString2="5F85" | out: lpString1="5F85") returned="5F85" [0037.765] lstrcatA (in: lpString1="5F85", lpString2="61" | out: lpString1="5F8561") returned="5F8561" [0037.765] LocalFree (hMem=0x6a3520) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="50") returned 2 [0037.766] lstrlenA (lpString="5F8561") returned 6 [0037.766] lstrlenA (lpString="50") returned 2 [0037.766] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.766] lstrcpyA (in: lpString1=0x6519e0, lpString2="5F8561" | out: lpString1="5F8561") returned="5F8561" [0037.766] lstrcatA (in: lpString1="5F8561", lpString2="50" | out: lpString1="5F856150") returned="5F856150" [0037.766] LocalFree (hMem=0x6a3640) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="23") returned 2 [0037.766] lstrlenA (lpString="5F856150") returned 8 [0037.766] lstrlenA (lpString="23") returned 2 [0037.766] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.766] lstrcpyA (in: lpString1=0x651a78, lpString2="5F856150" | out: lpString1="5F856150") returned="5F856150" [0037.766] lstrcatA (in: lpString1="5F856150", lpString2="23" | out: lpString1="5F85615023") returned="5F85615023" [0037.766] LocalFree (hMem=0x6519e0) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F3") returned 2 [0037.766] lstrlenA (lpString="5F85615023") returned 10 [0037.766] lstrlenA (lpString="F3") returned 2 [0037.766] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.766] lstrcpyA (in: lpString1=0x6519e0, lpString2="5F85615023" | out: lpString1="5F85615023") returned="5F85615023" [0037.766] lstrcatA (in: lpString1="5F85615023", lpString2="F3" | out: lpString1="5F85615023F3") returned="5F85615023F3" [0037.766] LocalFree (hMem=0x651a78) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E5") returned 2 [0037.766] lstrlenA (lpString="5F85615023F3") returned 12 [0037.766] lstrlenA (lpString="E5") returned 2 [0037.766] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.766] lstrcpyA (in: lpString1=0x651a78, lpString2="5F85615023F3" | out: lpString1="5F85615023F3") returned="5F85615023F3" [0037.766] lstrcatA (in: lpString1="5F85615023F3", lpString2="E5" | out: lpString1="5F85615023F3E5") returned="5F85615023F3E5" [0037.766] LocalFree (hMem=0x6519e0) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="23") returned 2 [0037.766] lstrlenA (lpString="5F85615023F3E5") returned 14 [0037.766] lstrlenA (lpString="23") returned 2 [0037.766] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e9b0 [0037.766] lstrcpyA (in: lpString1=0x66e9b0, lpString2="5F85615023F3E5" | out: lpString1="5F85615023F3E5") returned="5F85615023F3E5" [0037.766] lstrcatA (in: lpString1="5F85615023F3E5", lpString2="23" | out: lpString1="5F85615023F3E523") returned="5F85615023F3E523" [0037.766] LocalFree (hMem=0x651a78) returned 0x0 [0037.766] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3E") returned 2 [0037.766] lstrlenA (lpString="5F85615023F3E523") returned 16 [0037.766] lstrlenA (lpString="3E") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66df10 [0037.767] lstrcpyA (in: lpString1=0x66df10, lpString2="5F85615023F3E523" | out: lpString1="5F85615023F3E523") returned="5F85615023F3E523" [0037.767] lstrcatA (in: lpString1="5F85615023F3E523", lpString2="3E" | out: lpString1="5F85615023F3E5233E") returned="5F85615023F3E5233E" [0037.767] LocalFree (hMem=0x66e9b0) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0D") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E") returned 18 [0037.767] lstrlenA (lpString="0D") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0037.767] lstrcpyA (in: lpString1=0x66e0f0, lpString2="5F85615023F3E5233E" | out: lpString1="5F85615023F3E5233E") returned="5F85615023F3E5233E" [0037.767] lstrcatA (in: lpString1="5F85615023F3E5233E", lpString2="0D" | out: lpString1="5F85615023F3E5233E0D") returned="5F85615023F3E5233E0D" [0037.767] LocalFree (hMem=0x66df10) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E0D") returned 20 [0037.767] lstrlenA (lpString="7A") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dbf0 [0037.767] lstrcpyA (in: lpString1=0x66dbf0, lpString2="5F85615023F3E5233E0D" | out: lpString1="5F85615023F3E5233E0D") returned="5F85615023F3E5233E0D" [0037.767] lstrcatA (in: lpString1="5F85615023F3E5233E0D", lpString2="7A" | out: lpString1="5F85615023F3E5233E0D7A") returned="5F85615023F3E5233E0D7A" [0037.767] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8B") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E0D7A") returned 22 [0037.767] lstrlenA (lpString="8B") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.767] lstrcpyA (in: lpString1=0x66ff98, lpString2="5F85615023F3E5233E0D7A" | out: lpString1="5F85615023F3E5233E0D7A") returned="5F85615023F3E5233E0D7A" [0037.767] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A", lpString2="8B" | out: lpString1="5F85615023F3E5233E0D7A8B") returned="5F85615023F3E5233E0D7A8B" [0037.767] LocalFree (hMem=0x66dbf0) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="84") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E0D7A8B") returned 24 [0037.767] lstrlenA (lpString="84") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6700e8 [0037.767] lstrcpyA (in: lpString1=0x6700e8, lpString2="5F85615023F3E5233E0D7A8B" | out: lpString1="5F85615023F3E5233E0D7A8B") returned="5F85615023F3E5233E0D7A8B" [0037.767] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B", lpString2="84" | out: lpString1="5F85615023F3E5233E0D7A8B84") returned="5F85615023F3E5233E0D7A8B84" [0037.767] LocalFree (hMem=0x66ff98) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0D") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E0D7A8B84") returned 26 [0037.767] lstrlenA (lpString="0D") returned 2 [0037.767] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.767] lstrcpyA (in: lpString1=0x66ff98, lpString2="5F85615023F3E5233E0D7A8B84" | out: lpString1="5F85615023F3E5233E0D7A8B84") returned="5F85615023F3E5233E0D7A8B84" [0037.767] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B84", lpString2="0D" | out: lpString1="5F85615023F3E5233E0D7A8B840D") returned="5F85615023F3E5233E0D7A8B840D" [0037.767] LocalFree (hMem=0x6700e8) returned 0x0 [0037.767] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.767] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840D") returned 28 [0037.768] lstrlenA (lpString="F7") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670ac0 [0037.768] lstrcpyA (in: lpString1=0x670ac0, lpString2="5F85615023F3E5233E0D7A8B840D" | out: lpString1="5F85615023F3E5233E0D7A8B840D") returned="5F85615023F3E5233E0D7A8B840D" [0037.768] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840D", lpString2="F7" | out: lpString1="5F85615023F3E5233E0D7A8B840DF7") returned="5F85615023F3E5233E0D7A8B840DF7" [0037.768] LocalFree (hMem=0x66ff98) returned 0x0 [0037.768] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0037.768] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF7") returned 30 [0037.768] lstrlenA (lpString="35") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679c58 [0037.768] lstrcpyA (in: lpString1=0x679c58, lpString2="5F85615023F3E5233E0D7A8B840DF7" | out: lpString1="5F85615023F3E5233E0D7A8B840DF7") returned="5F85615023F3E5233E0D7A8B840DF7" [0037.768] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF7", lpString2="35" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735") returned="5F85615023F3E5233E0D7A8B840DF735" [0037.768] LocalFree (hMem=0x670ac0) returned 0x0 [0037.768] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F2") returned 2 [0037.768] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF735") returned 32 [0037.768] lstrlenA (lpString="F2") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678de8 [0037.768] lstrcpyA (in: lpString1=0x678de8, lpString2="5F85615023F3E5233E0D7A8B840DF735" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735") returned="5F85615023F3E5233E0D7A8B840DF735" [0037.768] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF735", lpString2="F2" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F2") returned="5F85615023F3E5233E0D7A8B840DF735F2" [0037.768] LocalFree (hMem=0x679c58) returned 0x0 [0037.768] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="44") returned 2 [0037.768] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF735F2") returned 34 [0037.768] lstrlenA (lpString="44") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679af8 [0037.768] lstrcpyA (in: lpString1=0x679af8, lpString2="5F85615023F3E5233E0D7A8B840DF735F2" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F2") returned="5F85615023F3E5233E0D7A8B840DF735F2" [0037.768] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF735F2", lpString2="44" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F244") returned="5F85615023F3E5233E0D7A8B840DF735F244" [0037.768] LocalFree (hMem=0x678de8) returned 0x0 [0037.768] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0037.768] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF735F244") returned 36 [0037.768] lstrlenA (lpString="82") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679c58 [0037.768] lstrcpyA (in: lpString1=0x679c58, lpString2="5F85615023F3E5233E0D7A8B840DF735F244" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F244") returned="5F85615023F3E5233E0D7A8B840DF735F244" [0037.768] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF735F244", lpString2="82" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F24482") returned="5F85615023F3E5233E0D7A8B840DF735F24482" [0037.768] LocalFree (hMem=0x679af8) returned 0x0 [0037.768] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="78") returned 2 [0037.768] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF735F24482") returned 38 [0037.768] lstrlenA (lpString="78") returned 2 [0037.768] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.768] lstrcpyA (in: lpString1=0x6519e0, lpString2="5F85615023F3E5233E0D7A8B840DF735F24482" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F24482") returned="5F85615023F3E5233E0D7A8B840DF735F24482" [0037.769] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF735F24482", lpString2="78" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F2448278") returned="5F85615023F3E5233E0D7A8B840DF735F2448278" [0037.769] LocalFree (hMem=0x679c58) returned 0x0 [0037.769] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F0") returned 2 [0037.769] lstrlenA (lpString="5F85615023F3E5233E0D7A8B840DF735F2448278") returned 40 [0037.769] lstrlenA (lpString="F0") returned 2 [0037.769] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0037.769] lstrcpyA (in: lpString1=0x6771d8, lpString2="5F85615023F3E5233E0D7A8B840DF735F2448278" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F2448278") returned="5F85615023F3E5233E0D7A8B840DF735F2448278" [0037.769] lstrcatA (in: lpString1="5F85615023F3E5233E0D7A8B840DF735F2448278", lpString2="F0" | out: lpString1="5F85615023F3E5233E0D7A8B840DF735F2448278F0") returned="5F85615023F3E5233E0D7A8B840DF735F2448278F0" [0037.769] LocalFree (hMem=0x6519e0) returned 0x0 [0037.769] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.769] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.769] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.769] LocalFree (hMem=0x6771d8) returned 0x0 [0037.769] CoTaskMemFree (pv=0x651b30) [0037.769] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/D8VzqR.xlsx", lpSrch="?") returned 0x0 [0037.769] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/D8VzqR.xlsx") returned 47 [0037.794] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5B") returned 2 [0037.794] lstrlenA (lpString="") returned 0 [0037.794] lstrlenA (lpString="5B") returned 2 [0037.794] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2e60 [0037.794] lstrcpyA (in: lpString1=0x6a2e60, lpString2="" | out: lpString1="") returned="" [0037.794] lstrcatA (in: lpString1="", lpString2="5B" | out: lpString1="5B") returned="5B" [0037.794] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DA") returned 2 [0037.794] lstrlenA (lpString="5B") returned 2 [0037.794] lstrlenA (lpString="DA") returned 2 [0037.794] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a31c0 [0037.794] lstrcpyA (in: lpString1=0x6a31c0, lpString2="5B" | out: lpString1="5B") returned="5B" [0037.795] lstrcatA (in: lpString1="5B", lpString2="DA" | out: lpString1="5BDA") returned="5BDA" [0037.795] LocalFree (hMem=0x6a2e60) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.795] lstrlenA (lpString="5BDA") returned 4 [0037.795] lstrlenA (lpString="F7") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3880 [0037.795] lstrcpyA (in: lpString1=0x6a3880, lpString2="5BDA" | out: lpString1="5BDA") returned="5BDA" [0037.795] lstrcatA (in: lpString1="5BDA", lpString2="F7" | out: lpString1="5BDAF7") returned="5BDAF7" [0037.795] LocalFree (hMem=0x6a31c0) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="22") returned 2 [0037.795] lstrlenA (lpString="5BDAF7") returned 6 [0037.795] lstrlenA (lpString="22") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.795] lstrcpyA (in: lpString1=0x6519e0, lpString2="5BDAF7" | out: lpString1="5BDAF7") returned="5BDAF7" [0037.795] lstrcatA (in: lpString1="5BDAF7", lpString2="22" | out: lpString1="5BDAF722") returned="5BDAF722" [0037.795] LocalFree (hMem=0x6a3880) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4D") returned 2 [0037.795] lstrlenA (lpString="5BDAF722") returned 8 [0037.795] lstrlenA (lpString="4D") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.795] lstrcpyA (in: lpString1=0x651a78, lpString2="5BDAF722" | out: lpString1="5BDAF722") returned="5BDAF722" [0037.795] lstrcatA (in: lpString1="5BDAF722", lpString2="4D" | out: lpString1="5BDAF7224D") returned="5BDAF7224D" [0037.795] LocalFree (hMem=0x6519e0) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8A") returned 2 [0037.795] lstrlenA (lpString="5BDAF7224D") returned 10 [0037.795] lstrlenA (lpString="8A") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.795] lstrcpyA (in: lpString1=0x6519e0, lpString2="5BDAF7224D" | out: lpString1="5BDAF7224D") returned="5BDAF7224D" [0037.795] lstrcatA (in: lpString1="5BDAF7224D", lpString2="8A" | out: lpString1="5BDAF7224D8A") returned="5BDAF7224D8A" [0037.795] LocalFree (hMem=0x651a78) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="51") returned 2 [0037.795] lstrlenA (lpString="5BDAF7224D8A") returned 12 [0037.795] lstrlenA (lpString="51") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.795] lstrcpyA (in: lpString1=0x651a78, lpString2="5BDAF7224D8A" | out: lpString1="5BDAF7224D8A") returned="5BDAF7224D8A" [0037.795] lstrcatA (in: lpString1="5BDAF7224D8A", lpString2="51" | out: lpString1="5BDAF7224D8A51") returned="5BDAF7224D8A51" [0037.795] LocalFree (hMem=0x6519e0) returned 0x0 [0037.795] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EE") returned 2 [0037.795] lstrlenA (lpString="5BDAF7224D8A51") returned 14 [0037.795] lstrlenA (lpString="EE") returned 2 [0037.795] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0037.795] lstrcpyA (in: lpString1=0x66e2d0, lpString2="5BDAF7224D8A51" | out: lpString1="5BDAF7224D8A51") returned="5BDAF7224D8A51" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51", lpString2="EE" | out: lpString1="5BDAF7224D8A51EE") returned="5BDAF7224D8A51EE" [0037.796] LocalFree (hMem=0x651a78) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8C") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE") returned 16 [0037.796] lstrlenA (lpString="8C") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e9b0 [0037.796] lstrcpyA (in: lpString1=0x66e9b0, lpString2="5BDAF7224D8A51EE" | out: lpString1="5BDAF7224D8A51EE") returned="5BDAF7224D8A51EE" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51EE", lpString2="8C" | out: lpString1="5BDAF7224D8A51EE8C") returned="5BDAF7224D8A51EE8C" [0037.796] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE8C") returned 18 [0037.796] lstrlenA (lpString="7A") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e910 [0037.796] lstrcpyA (in: lpString1=0x66e910, lpString2="5BDAF7224D8A51EE8C" | out: lpString1="5BDAF7224D8A51EE8C") returned="5BDAF7224D8A51EE8C" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C", lpString2="7A" | out: lpString1="5BDAF7224D8A51EE8C7A") returned="5BDAF7224D8A51EE8C7A" [0037.796] LocalFree (hMem=0x66e9b0) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1F") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE8C7A") returned 20 [0037.796] lstrlenA (lpString="1F") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66de70 [0037.796] lstrcpyA (in: lpString1=0x66de70, lpString2="5BDAF7224D8A51EE8C7A" | out: lpString1="5BDAF7224D8A51EE8C7A") returned="5BDAF7224D8A51EE8C7A" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A", lpString2="1F" | out: lpString1="5BDAF7224D8A51EE8C7A1F") returned="5BDAF7224D8A51EE8C7A1F" [0037.796] LocalFree (hMem=0x66e910) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="50") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F") returned 22 [0037.796] lstrlenA (lpString="50") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670628 [0037.796] lstrcpyA (in: lpString1=0x670628, lpString2="5BDAF7224D8A51EE8C7A1F" | out: lpString1="5BDAF7224D8A51EE8C7A1F") returned="5BDAF7224D8A51EE8C7A1F" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F", lpString2="50" | out: lpString1="5BDAF7224D8A51EE8C7A1F50") returned="5BDAF7224D8A51EE8C7A1F50" [0037.796] LocalFree (hMem=0x66de70) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F50") returned 24 [0037.796] lstrlenA (lpString="7A") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0037.796] lstrcpyA (in: lpString1=0x66ff98, lpString2="5BDAF7224D8A51EE8C7A1F50" | out: lpString1="5BDAF7224D8A51EE8C7A1F50") returned="5BDAF7224D8A51EE8C7A1F50" [0037.796] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F50", lpString2="7A" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A") returned="5BDAF7224D8A51EE8C7A1F507A" [0037.796] LocalFree (hMem=0x670628) returned 0x0 [0037.796] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0D") returned 2 [0037.796] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A") returned 26 [0037.796] lstrlenA (lpString="0D") returned 2 [0037.796] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0037.796] lstrcpyA (in: lpString1=0x670040, lpString2="5BDAF7224D8A51EE8C7A1F507A" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A") returned="5BDAF7224D8A51EE8C7A1F507A" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A", lpString2="0D" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D") returned="5BDAF7224D8A51EE8C7A1F507A0D" [0037.797] LocalFree (hMem=0x66ff98) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D") returned 28 [0037.797] lstrlenA (lpString="3C") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.797] lstrcpyA (in: lpString1=0x66ff98, lpString2="5BDAF7224D8A51EE8C7A1F507A0D" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D") returned="5BDAF7224D8A51EE8C7A1F507A0D" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D", lpString2="3C" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3C") returned="5BDAF7224D8A51EE8C7A1F507A0D3C" [0037.797] LocalFree (hMem=0x670040) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D5") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3C") returned 30 [0037.797] lstrlenA (lpString="D5") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679208 [0037.797] lstrcpyA (in: lpString1=0x679208, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3C" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3C") returned="5BDAF7224D8A51EE8C7A1F507A0D3C" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3C", lpString2="D5" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5" [0037.797] LocalFree (hMem=0x66ff98) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A4") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3CD5") returned 32 [0037.797] lstrlenA (lpString="A4") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678de8 [0037.797] lstrcpyA (in: lpString1=0x678de8, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3CD5" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5", lpString2="A4" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4" [0037.797] LocalFree (hMem=0x679208) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5F") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4") returned 34 [0037.797] lstrlenA (lpString="5F") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679788 [0037.797] lstrcpyA (in: lpString1=0x679788, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A4", lpString2="5F" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F" [0037.797] LocalFree (hMem=0x678de8) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F1") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F") returned 36 [0037.797] lstrlenA (lpString="F1") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679a48 [0037.797] lstrcpyA (in: lpString1=0x679a48, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F" [0037.797] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45F", lpString2="F1" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1" [0037.797] LocalFree (hMem=0x679788) returned 0x0 [0037.797] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2A") returned 2 [0037.797] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1") returned 38 [0037.797] lstrlenA (lpString="2A") returned 2 [0037.797] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.797] lstrcpyA (in: lpString1=0x6519e0, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1" [0037.798] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF1", lpString2="2A" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A" [0037.798] LocalFree (hMem=0x679a48) returned 0x0 [0037.798] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8F") returned 2 [0037.798] lstrlenA (lpString="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A") returned 40 [0037.798] lstrlenA (lpString="8F") returned 2 [0037.798] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0037.798] lstrcpyA (in: lpString1=0x6771d8, lpString2="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A" [0037.798] lstrcatA (in: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A", lpString2="8F" | out: lpString1="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A8F") returned="5BDAF7224D8A51EE8C7A1F507A0D3CD5A45FF12A8F" [0037.798] LocalFree (hMem=0x6519e0) returned 0x0 [0037.798] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.798] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.798] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.798] LocalFree (hMem=0x6771d8) returned 0x0 [0037.798] CoTaskMemFree (pv=0x651b18) [0037.798] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/JTmdlkQ.xlsx", lpSrch="?") returned 0x0 [0037.798] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/JTmdlkQ.xlsx") returned 48 [0037.816] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5A") returned 2 [0037.816] lstrlenA (lpString="") returned 0 [0037.816] lstrlenA (lpString="5A") returned 2 [0037.816] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3520 [0037.816] lstrcpyA (in: lpString1=0x6a3520, lpString2="" | out: lpString1="") returned="" [0037.817] lstrcatA (in: lpString1="", lpString2="5A" | out: lpString1="5A") returned="5A" [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E1") returned 2 [0037.817] lstrlenA (lpString="5A") returned 2 [0037.817] lstrlenA (lpString="E1") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3910 [0037.817] lstrcpyA (in: lpString1=0x6a3910, lpString2="5A" | out: lpString1="5A") returned="5A" [0037.817] lstrcatA (in: lpString1="5A", lpString2="E1" | out: lpString1="5AE1") returned="5AE1" [0037.817] LocalFree (hMem=0x6a3520) returned 0x0 [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="25") returned 2 [0037.817] lstrlenA (lpString="5AE1") returned 4 [0037.817] lstrlenA (lpString="25") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3520 [0037.817] lstrcpyA (in: lpString1=0x6a3520, lpString2="5AE1" | out: lpString1="5AE1") returned="5AE1" [0037.817] lstrcatA (in: lpString1="5AE1", lpString2="25" | out: lpString1="5AE125") returned="5AE125" [0037.817] LocalFree (hMem=0x6a3910) returned 0x0 [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.817] lstrlenA (lpString="5AE125") returned 6 [0037.817] lstrlenA (lpString="2E") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.817] lstrcpyA (in: lpString1=0x6519e0, lpString2="5AE125" | out: lpString1="5AE125") returned="5AE125" [0037.817] lstrcatA (in: lpString1="5AE125", lpString2="2E" | out: lpString1="5AE1252E") returned="5AE1252E" [0037.817] LocalFree (hMem=0x6a3520) returned 0x0 [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5D") returned 2 [0037.817] lstrlenA (lpString="5AE1252E") returned 8 [0037.817] lstrlenA (lpString="5D") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.817] lstrcpyA (in: lpString1=0x651a78, lpString2="5AE1252E" | out: lpString1="5AE1252E") returned="5AE1252E" [0037.817] lstrcatA (in: lpString1="5AE1252E", lpString2="5D" | out: lpString1="5AE1252E5D") returned="5AE1252E5D" [0037.817] LocalFree (hMem=0x6519e0) returned 0x0 [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.817] lstrlenA (lpString="5AE1252E5D") returned 10 [0037.817] lstrlenA (lpString="94") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.817] lstrcpyA (in: lpString1=0x6519e0, lpString2="5AE1252E5D" | out: lpString1="5AE1252E5D") returned="5AE1252E5D" [0037.817] lstrcatA (in: lpString1="5AE1252E5D", lpString2="94" | out: lpString1="5AE1252E5D94") returned="5AE1252E5D94" [0037.817] LocalFree (hMem=0x651a78) returned 0x0 [0037.817] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DB") returned 2 [0037.817] lstrlenA (lpString="5AE1252E5D94") returned 12 [0037.817] lstrlenA (lpString="DB") returned 2 [0037.817] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.817] lstrcpyA (in: lpString1=0x651a78, lpString2="5AE1252E5D94" | out: lpString1="5AE1252E5D94") returned="5AE1252E5D94" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94", lpString2="DB" | out: lpString1="5AE1252E5D94DB") returned="5AE1252E5D94DB" [0037.818] LocalFree (hMem=0x6519e0) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="92") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB") returned 14 [0037.818] lstrlenA (lpString="92") returned 2 [0037.818] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e0f0 [0037.818] lstrcpyA (in: lpString1=0x66e0f0, lpString2="5AE1252E5D94DB" | out: lpString1="5AE1252E5D94DB") returned="5AE1252E5D94DB" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94DB", lpString2="92" | out: lpString1="5AE1252E5D94DB92") returned="5AE1252E5D94DB92" [0037.818] LocalFree (hMem=0x651a78) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="44") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB92") returned 16 [0037.818] lstrlenA (lpString="44") returned 2 [0037.818] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e910 [0037.818] lstrcpyA (in: lpString1=0x66e910, lpString2="5AE1252E5D94DB92" | out: lpString1="5AE1252E5D94DB92") returned="5AE1252E5D94DB92" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94DB92", lpString2="44" | out: lpString1="5AE1252E5D94DB9244") returned="5AE1252E5D94DB9244" [0037.818] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FD") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB9244") returned 18 [0037.818] lstrlenA (lpString="FD") returned 2 [0037.818] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0037.818] lstrcpyA (in: lpString1=0x66e0f0, lpString2="5AE1252E5D94DB9244" | out: lpString1="5AE1252E5D94DB9244") returned="5AE1252E5D94DB9244" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94DB9244", lpString2="FD" | out: lpString1="5AE1252E5D94DB9244FD") returned="5AE1252E5D94DB9244FD" [0037.818] LocalFree (hMem=0x66e910) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="56") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB9244FD") returned 20 [0037.818] lstrlenA (lpString="56") returned 2 [0037.818] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e370 [0037.818] lstrcpyA (in: lpString1=0x66e370, lpString2="5AE1252E5D94DB9244FD" | out: lpString1="5AE1252E5D94DB9244FD") returned="5AE1252E5D94DB9244FD" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD", lpString2="56" | out: lpString1="5AE1252E5D94DB9244FD56") returned="5AE1252E5D94DB9244FD56" [0037.818] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E4") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB9244FD56") returned 22 [0037.818] lstrlenA (lpString="E4") returned 2 [0037.818] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.818] lstrcpyA (in: lpString1=0x66ff98, lpString2="5AE1252E5D94DB9244FD56" | out: lpString1="5AE1252E5D94DB9244FD56") returned="5AE1252E5D94DB9244FD56" [0037.818] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56", lpString2="E4" | out: lpString1="5AE1252E5D94DB9244FD56E4") returned="5AE1252E5D94DB9244FD56E4" [0037.818] LocalFree (hMem=0x66e370) returned 0x0 [0037.818] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A0") returned 2 [0037.818] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4") returned 24 [0037.819] lstrlenA (lpString="A0") returned 2 [0037.819] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0037.819] lstrcpyA (in: lpString1=0x670040, lpString2="5AE1252E5D94DB9244FD56E4" | out: lpString1="5AE1252E5D94DB9244FD56E4") returned="5AE1252E5D94DB9244FD56E4" [0037.819] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4", lpString2="A0" | out: lpString1="5AE1252E5D94DB9244FD56E4A0") returned="5AE1252E5D94DB9244FD56E4A0" [0037.819] LocalFree (hMem=0x66ff98) returned 0x0 [0037.819] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B4") returned 2 [0037.819] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0") returned 26 [0037.819] lstrlenA (lpString="B4") returned 2 [0037.819] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6708c8 [0037.819] lstrcpyA (in: lpString1=0x6708c8, lpString2="5AE1252E5D94DB9244FD56E4A0" | out: lpString1="5AE1252E5D94DB9244FD56E4A0") returned="5AE1252E5D94DB9244FD56E4A0" [0037.819] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0", lpString2="B4" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4") returned="5AE1252E5D94DB9244FD56E4A0B4" [0037.819] LocalFree (hMem=0x670040) returned 0x0 [0037.819] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DC") returned 2 [0037.819] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4") returned 28 [0037.819] lstrlenA (lpString="DC") returned 2 [0037.819] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.819] lstrcpyA (in: lpString1=0x66ff98, lpString2="5AE1252E5D94DB9244FD56E4A0B4" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4") returned="5AE1252E5D94DB9244FD56E4A0B4" [0037.819] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4", lpString2="DC" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC") returned="5AE1252E5D94DB9244FD56E4A0B4DC" [0037.819] LocalFree (hMem=0x6708c8) returned 0x0 [0037.819] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9E") returned 2 [0037.819] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC") returned 30 [0037.819] lstrlenA (lpString="9E") returned 2 [0037.819] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6798e8 [0037.819] lstrcpyA (in: lpString1=0x6798e8, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC") returned="5AE1252E5D94DB9244FD56E4A0B4DC" [0037.819] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC", lpString2="9E" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E" [0037.819] LocalFree (hMem=0x66ff98) returned 0x0 [0037.819] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="72") returned 2 [0037.819] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC9E") returned 32 [0037.819] lstrlenA (lpString="72") returned 2 [0037.819] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678f48 [0037.820] lstrcpyA (in: lpString1=0x678f48, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC9E" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E" [0037.820] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E", lpString2="72" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E72") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E72" [0037.820] LocalFree (hMem=0x6798e8) returned 0x0 [0037.820] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5E") returned 2 [0037.820] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC9E72") returned 34 [0037.820] lstrlenA (lpString="5E") returned 2 [0037.820] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679a48 [0037.820] lstrcpyA (in: lpString1=0x679a48, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC9E72" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E72") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E72" [0037.820] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E72", lpString2="5E" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E" [0037.820] LocalFree (hMem=0x678f48) returned 0x0 [0037.820] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.820] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC9E725E") returned 36 [0037.820] lstrlenA (lpString="42") returned 2 [0037.820] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679418 [0037.820] lstrcpyA (in: lpString1=0x679418, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC9E725E" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E" [0037.820] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E", lpString2="42" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42" [0037.820] LocalFree (hMem=0x679a48) returned 0x0 [0037.820] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="20") returned 2 [0037.820] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42") returned 38 [0037.820] lstrlenA (lpString="20") returned 2 [0037.820] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.820] lstrcpyA (in: lpString1=0x6519e0, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42" [0037.820] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E42", lpString2="20" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220" [0037.820] LocalFree (hMem=0x679418) returned 0x0 [0037.820] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="67") returned 2 [0037.820] lstrlenA (lpString="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220") returned 40 [0037.820] lstrlenA (lpString="67") returned 2 [0037.820] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0037.820] lstrcpyA (in: lpString1=0x6771d8, lpString2="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220" [0037.820] lstrcatA (in: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E4220", lpString2="67" | out: lpString1="5AE1252E5D94DB9244FD56E4A0B4DC9E725E422067") returned="5AE1252E5D94DB9244FD56E4A0B4DC9E725E422067" [0037.820] LocalFree (hMem=0x6519e0) returned 0x0 [0037.820] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.820] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.820] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.820] LocalFree (hMem=0x6771d8) returned 0x0 [0037.820] CoTaskMemFree (pv=0x651b30) [0037.821] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/z7Y5yn1kVBD4-d50c.xlsx", lpSrch="?") returned 0x0 [0037.821] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/z7Y5yn1kVBD4-d50c.xlsx") returned 58 [0037.838] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.838] lstrlenA (lpString="") returned 0 [0037.838] lstrlenA (lpString="94") returned 2 [0037.838] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a2d40 [0037.838] lstrcpyA (in: lpString1=0x6a2d40, lpString2="" | out: lpString1="") returned="" [0037.838] lstrcatA (in: lpString1="", lpString2="94" | out: lpString1="94") returned="94" [0037.838] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="68") returned 2 [0037.838] lstrlenA (lpString="94") returned 2 [0037.838] lstrlenA (lpString="68") returned 2 [0037.838] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3d00 [0037.838] lstrcpyA (in: lpString1=0x6a3d00, lpString2="94" | out: lpString1="94") returned="94" [0037.838] lstrcatA (in: lpString1="94", lpString2="68" | out: lpString1="9468") returned="9468" [0037.838] LocalFree (hMem=0x6a2d40) returned 0x0 [0037.838] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2C") returned 2 [0037.838] lstrlenA (lpString="9468") returned 4 [0037.838] lstrlenA (lpString="2C") returned 2 [0037.838] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a35b0 [0037.838] lstrcpyA (in: lpString1=0x6a35b0, lpString2="9468" | out: lpString1="9468") returned="9468" [0037.838] lstrcatA (in: lpString1="9468", lpString2="2C" | out: lpString1="94682C") returned="94682C" [0037.838] LocalFree (hMem=0x6a3d00) returned 0x0 [0037.838] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FB") returned 2 [0037.838] lstrlenA (lpString="94682C") returned 6 [0037.838] lstrlenA (lpString="FB") returned 2 [0037.838] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.838] lstrcpyA (in: lpString1=0x6519e0, lpString2="94682C" | out: lpString1="94682C") returned="94682C" [0037.838] lstrcatA (in: lpString1="94682C", lpString2="FB" | out: lpString1="94682CFB") returned="94682CFB" [0037.838] LocalFree (hMem=0x6a35b0) returned 0x0 [0037.838] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8C") returned 2 [0037.838] lstrlenA (lpString="94682CFB") returned 8 [0037.838] lstrlenA (lpString="8C") returned 2 [0037.838] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.838] lstrcpyA (in: lpString1=0x651a78, lpString2="94682CFB" | out: lpString1="94682CFB") returned="94682CFB" [0037.838] lstrcatA (in: lpString1="94682CFB", lpString2="8C" | out: lpString1="94682CFB8C") returned="94682CFB8C" [0037.839] LocalFree (hMem=0x6519e0) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0037.839] lstrlenA (lpString="94682CFB8C") returned 10 [0037.839] lstrlenA (lpString="2F") returned 2 [0037.839] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.839] lstrcpyA (in: lpString1=0x6519e0, lpString2="94682CFB8C" | out: lpString1="94682CFB8C") returned="94682CFB8C" [0037.839] lstrcatA (in: lpString1="94682CFB8C", lpString2="2F" | out: lpString1="94682CFB8C2F") returned="94682CFB8C2F" [0037.839] LocalFree (hMem=0x651a78) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E9") returned 2 [0037.839] lstrlenA (lpString="94682CFB8C2F") returned 12 [0037.839] lstrlenA (lpString="E9") returned 2 [0037.839] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.839] lstrcpyA (in: lpString1=0x651a78, lpString2="94682CFB8C2F" | out: lpString1="94682CFB8C2F") returned="94682CFB8C2F" [0037.839] lstrcatA (in: lpString1="94682CFB8C2F", lpString2="E9" | out: lpString1="94682CFB8C2FE9") returned="94682CFB8C2FE9" [0037.839] LocalFree (hMem=0x6519e0) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="58") returned 2 [0037.839] lstrlenA (lpString="94682CFB8C2FE9") returned 14 [0037.839] lstrlenA (lpString="58") returned 2 [0037.839] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e690 [0037.839] lstrcpyA (in: lpString1=0x66e690, lpString2="94682CFB8C2FE9" | out: lpString1="94682CFB8C2FE9") returned="94682CFB8C2FE9" [0037.839] lstrcatA (in: lpString1="94682CFB8C2FE9", lpString2="58" | out: lpString1="94682CFB8C2FE958") returned="94682CFB8C2FE958" [0037.839] LocalFree (hMem=0x651a78) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="68") returned 2 [0037.839] lstrlenA (lpString="94682CFB8C2FE958") returned 16 [0037.839] lstrlenA (lpString="68") returned 2 [0037.839] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66ea50 [0037.839] lstrcpyA (in: lpString1=0x66ea50, lpString2="94682CFB8C2FE958" | out: lpString1="94682CFB8C2FE958") returned="94682CFB8C2FE958" [0037.839] lstrcatA (in: lpString1="94682CFB8C2FE958", lpString2="68" | out: lpString1="94682CFB8C2FE95868") returned="94682CFB8C2FE95868" [0037.839] LocalFree (hMem=0x66e690) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0037.839] lstrlenA (lpString="94682CFB8C2FE95868") returned 18 [0037.839] lstrlenA (lpString="D4") returned 2 [0037.839] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e4b0 [0037.839] lstrcpyA (in: lpString1=0x66e4b0, lpString2="94682CFB8C2FE95868" | out: lpString1="94682CFB8C2FE95868") returned="94682CFB8C2FE95868" [0037.839] lstrcatA (in: lpString1="94682CFB8C2FE95868", lpString2="D4" | out: lpString1="94682CFB8C2FE95868D4") returned="94682CFB8C2FE95868D4" [0037.839] LocalFree (hMem=0x66ea50) returned 0x0 [0037.839] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F6") returned 2 [0037.840] lstrlenA (lpString="94682CFB8C2FE95868D4") returned 20 [0037.840] lstrlenA (lpString="F6") returned 2 [0037.840] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ea50 [0037.840] lstrcpyA (in: lpString1=0x66ea50, lpString2="94682CFB8C2FE95868D4" | out: lpString1="94682CFB8C2FE95868D4") returned="94682CFB8C2FE95868D4" [0037.840] lstrcatA (in: lpString1="94682CFB8C2FE95868D4", lpString2="F6" | out: lpString1="94682CFB8C2FE95868D4F6") returned="94682CFB8C2FE95868D4F6" [0037.840] LocalFree (hMem=0x66e4b0) returned 0x0 [0037.840] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CF") returned 2 [0037.840] lstrlenA (lpString="94682CFB8C2FE95868D4F6") returned 22 [0037.840] lstrlenA (lpString="CF") returned 2 [0037.840] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6702e0 [0037.840] lstrcpyA (in: lpString1=0x6702e0, lpString2="94682CFB8C2FE95868D4F6" | out: lpString1="94682CFB8C2FE95868D4F6") returned="94682CFB8C2FE95868D4F6" [0037.840] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6", lpString2="CF" | out: lpString1="94682CFB8C2FE95868D4F6CF") returned="94682CFB8C2FE95868D4F6CF" [0037.840] LocalFree (hMem=0x66ea50) returned 0x0 [0037.840] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CC") returned 2 [0037.840] lstrlenA (lpString="94682CFB8C2FE95868D4F6CF") returned 24 [0037.840] lstrlenA (lpString="CC") returned 2 [0037.840] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0037.840] lstrcpyA (in: lpString1=0x66ff98, lpString2="94682CFB8C2FE95868D4F6CF" | out: lpString1="94682CFB8C2FE95868D4F6CF") returned="94682CFB8C2FE95868D4F6CF" [0037.840] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CF", lpString2="CC" | out: lpString1="94682CFB8C2FE95868D4F6CFCC") returned="94682CFB8C2FE95868D4F6CFCC" [0037.840] LocalFree (hMem=0x6702e0) returned 0x0 [0037.840] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1C") returned 2 [0037.856] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC") returned 26 [0037.856] lstrlenA (lpString="1C") returned 2 [0037.856] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0037.856] lstrcpyA (in: lpString1=0x670040, lpString2="94682CFB8C2FE95868D4F6CFCC" | out: lpString1="94682CFB8C2FE95868D4F6CFCC") returned="94682CFB8C2FE95868D4F6CFCC" [0037.856] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC", lpString2="1C" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1C") returned="94682CFB8C2FE95868D4F6CFCC1C" [0037.856] LocalFree (hMem=0x66ff98) returned 0x0 [0037.856] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C9") returned 2 [0037.856] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1C") returned 28 [0037.856] lstrlenA (lpString="C9") returned 2 [0037.856] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6702e0 [0037.856] lstrcpyA (in: lpString1=0x6702e0, lpString2="94682CFB8C2FE95868D4F6CFCC1C" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1C") returned="94682CFB8C2FE95868D4F6CFCC1C" [0037.856] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1C", lpString2="C9" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC9") returned="94682CFB8C2FE95868D4F6CFCC1CC9" [0037.856] LocalFree (hMem=0x670040) returned 0x0 [0037.856] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="87") returned 2 [0037.856] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC9") returned 30 [0037.856] lstrlenA (lpString="87") returned 2 [0037.856] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6798e8 [0037.856] lstrcpyA (in: lpString1=0x6798e8, lpString2="94682CFB8C2FE95868D4F6CFCC1CC9" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC9") returned="94682CFB8C2FE95868D4F6CFCC1CC9" [0037.856] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC9", lpString2="87" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987") returned="94682CFB8C2FE95868D4F6CFCC1CC987" [0037.856] LocalFree (hMem=0x6702e0) returned 0x0 [0037.856] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BE") returned 2 [0037.856] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC987") returned 32 [0037.856] lstrlenA (lpString="BE") returned 2 [0037.856] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678d38 [0037.856] lstrcpyA (in: lpString1=0x678d38, lpString2="94682CFB8C2FE95868D4F6CFCC1CC987" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987") returned="94682CFB8C2FE95868D4F6CFCC1CC987" [0037.856] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987", lpString2="BE" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BE") returned="94682CFB8C2FE95868D4F6CFCC1CC987BE" [0037.856] LocalFree (hMem=0x6798e8) returned 0x0 [0037.856] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F9") returned 2 [0037.856] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC987BE") returned 34 [0037.856] lstrlenA (lpString="F9") returned 2 [0037.856] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678de8 [0037.856] lstrcpyA (in: lpString1=0x678de8, lpString2="94682CFB8C2FE95868D4F6CFCC1CC987BE" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BE") returned="94682CFB8C2FE95868D4F6CFCC1CC987BE" [0037.856] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BE", lpString2="F9" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9" [0037.856] LocalFree (hMem=0x678d38) returned 0x0 [0037.857] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F3") returned 2 [0037.857] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC987BEF9") returned 36 [0037.857] lstrlenA (lpString="F3") returned 2 [0037.857] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6790a8 [0037.857] lstrcpyA (in: lpString1=0x6790a8, lpString2="94682CFB8C2FE95868D4F6CFCC1CC987BEF9" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9" [0037.857] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9", lpString2="F3" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3" [0037.857] LocalFree (hMem=0x678de8) returned 0x0 [0037.857] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D0") returned 2 [0037.857] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3") returned 38 [0037.857] lstrlenA (lpString="D0") returned 2 [0037.857] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.857] lstrcpyA (in: lpString1=0x6519e0, lpString2="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3" [0037.857] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3", lpString2="D0" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0" [0037.857] LocalFree (hMem=0x6790a8) returned 0x0 [0037.857] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D2") returned 2 [0037.857] lstrlenA (lpString="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0") returned 40 [0037.857] lstrlenA (lpString="D2") returned 2 [0037.857] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.857] lstrcpyA (in: lpString1=0x651a98, lpString2="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0" [0037.857] lstrcatA (in: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0", lpString2="D2" | out: lpString1="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0D2") returned="94682CFB8C2FE95868D4F6CFCC1CC987BEF9F3D0D2" [0037.857] LocalFree (hMem=0x6519e0) returned 0x0 [0037.857] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.857] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.857] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.857] LocalFree (hMem=0x651a98) returned 0x0 [0037.857] CoTaskMemFree (pv=0x64f0d8) [0037.857] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/3nY63s1qd0w.pptx", lpSrch="?") returned 0x0 [0037.857] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/3nY63s1qd0w.pptx") returned 52 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B7") returned 2 [0037.875] lstrlenA (lpString="") returned 0 [0037.875] lstrlenA (lpString="B7") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3130 [0037.875] lstrcpyA (in: lpString1=0x6a3130, lpString2="" | out: lpString1="") returned="" [0037.875] lstrcatA (in: lpString1="", lpString2="B7" | out: lpString1="B7") returned="B7" [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CA") returned 2 [0037.875] lstrlenA (lpString="B7") returned 2 [0037.875] lstrlenA (lpString="CA") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a2b90 [0037.875] lstrcpyA (in: lpString1=0x6a2b90, lpString2="B7" | out: lpString1="B7") returned="B7" [0037.875] lstrcatA (in: lpString1="B7", lpString2="CA" | out: lpString1="B7CA") returned="B7CA" [0037.875] LocalFree (hMem=0x6a3130) returned 0x0 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B3") returned 2 [0037.875] lstrlenA (lpString="B7CA") returned 4 [0037.875] lstrlenA (lpString="B3") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2e60 [0037.875] lstrcpyA (in: lpString1=0x6a2e60, lpString2="B7CA" | out: lpString1="B7CA") returned="B7CA" [0037.875] lstrcatA (in: lpString1="B7CA", lpString2="B3" | out: lpString1="B7CAB3") returned="B7CAB3" [0037.875] LocalFree (hMem=0x6a2b90) returned 0x0 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="99") returned 2 [0037.875] lstrlenA (lpString="B7CAB3") returned 6 [0037.875] lstrlenA (lpString="99") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.875] lstrcpyA (in: lpString1=0x6519e0, lpString2="B7CAB3" | out: lpString1="B7CAB3") returned="B7CAB3" [0037.875] lstrcatA (in: lpString1="B7CAB3", lpString2="99" | out: lpString1="B7CAB399") returned="B7CAB399" [0037.875] LocalFree (hMem=0x6a2e60) returned 0x0 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.875] lstrlenA (lpString="B7CAB399") returned 8 [0037.875] lstrlenA (lpString="42") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.875] lstrcpyA (in: lpString1=0x651a78, lpString2="B7CAB399" | out: lpString1="B7CAB399") returned="B7CAB399" [0037.875] lstrcatA (in: lpString1="B7CAB399", lpString2="42" | out: lpString1="B7CAB39942") returned="B7CAB39942" [0037.875] LocalFree (hMem=0x6519e0) returned 0x0 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1D") returned 2 [0037.875] lstrlenA (lpString="B7CAB39942") returned 10 [0037.875] lstrlenA (lpString="1D") returned 2 [0037.875] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.875] lstrcpyA (in: lpString1=0x6519e0, lpString2="B7CAB39942" | out: lpString1="B7CAB39942") returned="B7CAB39942" [0037.875] lstrcatA (in: lpString1="B7CAB39942", lpString2="1D" | out: lpString1="B7CAB399421D") returned="B7CAB399421D" [0037.875] LocalFree (hMem=0x651a78) returned 0x0 [0037.875] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BF") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421D") returned 12 [0037.876] lstrlenA (lpString="BF") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.876] lstrcpyA (in: lpString1=0x651a78, lpString2="B7CAB399421D" | out: lpString1="B7CAB399421D") returned="B7CAB399421D" [0037.876] lstrcatA (in: lpString1="B7CAB399421D", lpString2="BF" | out: lpString1="B7CAB399421DBF") returned="B7CAB399421DBF" [0037.876] LocalFree (hMem=0x6519e0) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6B") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF") returned 14 [0037.876] lstrlenA (lpString="6B") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e690 [0037.876] lstrcpyA (in: lpString1=0x66e690, lpString2="B7CAB399421DBF" | out: lpString1="B7CAB399421DBF") returned="B7CAB399421DBF" [0037.876] lstrcatA (in: lpString1="B7CAB399421DBF", lpString2="6B" | out: lpString1="B7CAB399421DBF6B") returned="B7CAB399421DBF6B" [0037.876] LocalFree (hMem=0x651a78) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C4") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF6B") returned 16 [0037.876] lstrlenA (lpString="C4") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dc90 [0037.876] lstrcpyA (in: lpString1=0x66dc90, lpString2="B7CAB399421DBF6B" | out: lpString1="B7CAB399421DBF6B") returned="B7CAB399421DBF6B" [0037.876] lstrcatA (in: lpString1="B7CAB399421DBF6B", lpString2="C4" | out: lpString1="B7CAB399421DBF6BC4") returned="B7CAB399421DBF6BC4" [0037.876] LocalFree (hMem=0x66e690) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D0") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF6BC4") returned 18 [0037.876] lstrlenA (lpString="D0") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e2d0 [0037.876] lstrcpyA (in: lpString1=0x66e2d0, lpString2="B7CAB399421DBF6BC4" | out: lpString1="B7CAB399421DBF6BC4") returned="B7CAB399421DBF6BC4" [0037.876] lstrcatA (in: lpString1="B7CAB399421DBF6BC4", lpString2="D0" | out: lpString1="B7CAB399421DBF6BC4D0") returned="B7CAB399421DBF6BC4D0" [0037.876] LocalFree (hMem=0x66dc90) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E3") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF6BC4D0") returned 20 [0037.876] lstrlenA (lpString="E3") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66de70 [0037.876] lstrcpyA (in: lpString1=0x66de70, lpString2="B7CAB399421DBF6BC4D0" | out: lpString1="B7CAB399421DBF6BC4D0") returned="B7CAB399421DBF6BC4D0" [0037.876] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0", lpString2="E3" | out: lpString1="B7CAB399421DBF6BC4D0E3") returned="B7CAB399421DBF6BC4D0E3" [0037.876] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="74") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3") returned 22 [0037.876] lstrlenA (lpString="74") returned 2 [0037.876] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.876] lstrcpyA (in: lpString1=0x66ff98, lpString2="B7CAB399421DBF6BC4D0E3" | out: lpString1="B7CAB399421DBF6BC4D0E3") returned="B7CAB399421DBF6BC4D0E3" [0037.876] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3", lpString2="74" | out: lpString1="B7CAB399421DBF6BC4D0E374") returned="B7CAB399421DBF6BC4D0E374" [0037.876] LocalFree (hMem=0x66de70) returned 0x0 [0037.876] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2C") returned 2 [0037.876] lstrlenA (lpString="B7CAB399421DBF6BC4D0E374") returned 24 [0037.876] lstrlenA (lpString="2C") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.877] lstrcpyA (in: lpString1=0x670628, lpString2="B7CAB399421DBF6BC4D0E374" | out: lpString1="B7CAB399421DBF6BC4D0E374") returned="B7CAB399421DBF6BC4D0E374" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E374", lpString2="2C" | out: lpString1="B7CAB399421DBF6BC4D0E3742C") returned="B7CAB399421DBF6BC4D0E3742C" [0037.877] LocalFree (hMem=0x66ff98) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B4") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742C") returned 26 [0037.877] lstrlenA (lpString="B4") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6704d8 [0037.877] lstrcpyA (in: lpString1=0x6704d8, lpString2="B7CAB399421DBF6BC4D0E3742C" | out: lpString1="B7CAB399421DBF6BC4D0E3742C") returned="B7CAB399421DBF6BC4D0E3742C" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742C", lpString2="B4" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB4") returned="B7CAB399421DBF6BC4D0E3742CB4" [0037.877] LocalFree (hMem=0x670628) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="17") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB4") returned 28 [0037.877] lstrlenA (lpString="17") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670388 [0037.877] lstrcpyA (in: lpString1=0x670388, lpString2="B7CAB399421DBF6BC4D0E3742CB4" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB4") returned="B7CAB399421DBF6BC4D0E3742CB4" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB4", lpString2="17" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417") returned="B7CAB399421DBF6BC4D0E3742CB417" [0037.877] LocalFree (hMem=0x6704d8) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F8") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417") returned 30 [0037.877] lstrlenA (lpString="F8") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679208 [0037.877] lstrcpyA (in: lpString1=0x679208, lpString2="B7CAB399421DBF6BC4D0E3742CB417" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417") returned="B7CAB399421DBF6BC4D0E3742CB417" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417", lpString2="F8" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F8") returned="B7CAB399421DBF6BC4D0E3742CB417F8" [0037.877] LocalFree (hMem=0x670388) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417F8") returned 32 [0037.877] lstrlenA (lpString="89") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6790a8 [0037.877] lstrcpyA (in: lpString1=0x6790a8, lpString2="B7CAB399421DBF6BC4D0E3742CB417F8" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F8") returned="B7CAB399421DBF6BC4D0E3742CB417F8" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417F8", lpString2="89" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F889") returned="B7CAB399421DBF6BC4D0E3742CB417F889" [0037.877] LocalFree (hMem=0x679208) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417F889") returned 34 [0037.877] lstrlenA (lpString="97") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679208 [0037.877] lstrcpyA (in: lpString1=0x679208, lpString2="B7CAB399421DBF6BC4D0E3742CB417F889" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F889") returned="B7CAB399421DBF6BC4D0E3742CB417F889" [0037.877] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417F889", lpString2="97" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997") returned="B7CAB399421DBF6BC4D0E3742CB417F88997" [0037.877] LocalFree (hMem=0x6790a8) returned 0x0 [0037.877] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FE") returned 2 [0037.877] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417F88997") returned 36 [0037.877] lstrlenA (lpString="FE") returned 2 [0037.877] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6790a8 [0037.877] lstrcpyA (in: lpString1=0x6790a8, lpString2="B7CAB399421DBF6BC4D0E3742CB417F88997" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997") returned="B7CAB399421DBF6BC4D0E3742CB417F88997" [0037.878] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997", lpString2="FE" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE") returned="B7CAB399421DBF6BC4D0E3742CB417F88997FE" [0037.878] LocalFree (hMem=0x679208) returned 0x0 [0037.878] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="43") returned 2 [0037.878] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417F88997FE") returned 38 [0037.878] lstrlenA (lpString="43") returned 2 [0037.878] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.878] lstrcpyA (in: lpString1=0x6519e0, lpString2="B7CAB399421DBF6BC4D0E3742CB417F88997FE" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE") returned="B7CAB399421DBF6BC4D0E3742CB417F88997FE" [0037.878] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE", lpString2="43" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE43") returned="B7CAB399421DBF6BC4D0E3742CB417F88997FE43" [0037.878] LocalFree (hMem=0x6790a8) returned 0x0 [0037.878] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="91") returned 2 [0037.878] lstrlenA (lpString="B7CAB399421DBF6BC4D0E3742CB417F88997FE43") returned 40 [0037.878] lstrlenA (lpString="91") returned 2 [0037.878] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.878] lstrcpyA (in: lpString1=0x651a98, lpString2="B7CAB399421DBF6BC4D0E3742CB417F88997FE43" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE43") returned="B7CAB399421DBF6BC4D0E3742CB417F88997FE43" [0037.878] lstrcatA (in: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE43", lpString2="91" | out: lpString1="B7CAB399421DBF6BC4D0E3742CB417F88997FE4391") returned="B7CAB399421DBF6BC4D0E3742CB417F88997FE4391" [0037.878] LocalFree (hMem=0x6519e0) returned 0x0 [0037.878] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.878] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.878] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.878] LocalFree (hMem=0x651a98) returned 0x0 [0037.878] CoTaskMemFree (pv=0x662528) [0037.878] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Pictures/NahBkWRFtXcNl5/x2aQ28LgrL0iIUBOHa08/Ch3lX8QwjGsJyypU5g/zLrmim%20F%20rDj/xvW-%206gVG.bmp", lpSrch="?") returned 0x0 [0037.878] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Pictures/NahBkWRFtXcNl5/x2aQ28LgrL0iIUBOHa08/Ch3lX8QwjGsJyypU5g/zLrmim%20F%20rDj/xvW-%206gVG.bmp") returned 122 [0037.914] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="49") returned 2 [0037.914] lstrlenA (lpString="") returned 0 [0037.914] lstrlenA (lpString="49") returned 2 [0037.914] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3400 [0037.915] lstrcpyA (in: lpString1=0x6a3400, lpString2="" | out: lpString1="") returned="" [0037.915] lstrcatA (in: lpString1="", lpString2="49" | out: lpString1="49") returned="49" [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C4") returned 2 [0037.915] lstrlenA (lpString="49") returned 2 [0037.915] lstrlenA (lpString="C4") returned 2 [0037.915] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a37f0 [0037.915] lstrcpyA (in: lpString1=0x6a37f0, lpString2="49" | out: lpString1="49") returned="49" [0037.915] lstrcatA (in: lpString1="49", lpString2="C4" | out: lpString1="49C4") returned="49C4" [0037.915] LocalFree (hMem=0x6a3400) returned 0x0 [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C9") returned 2 [0037.915] lstrlenA (lpString="49C4") returned 4 [0037.915] lstrlenA (lpString="C9") returned 2 [0037.915] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a39a0 [0037.915] lstrcpyA (in: lpString1=0x6a39a0, lpString2="49C4" | out: lpString1="49C4") returned="49C4" [0037.915] lstrcatA (in: lpString1="49C4", lpString2="C9" | out: lpString1="49C4C9") returned="49C4C9" [0037.915] LocalFree (hMem=0x6a37f0) returned 0x0 [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A7") returned 2 [0037.915] lstrlenA (lpString="49C4C9") returned 6 [0037.915] lstrlenA (lpString="A7") returned 2 [0037.915] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.915] lstrcpyA (in: lpString1=0x6519e0, lpString2="49C4C9" | out: lpString1="49C4C9") returned="49C4C9" [0037.915] lstrcatA (in: lpString1="49C4C9", lpString2="A7" | out: lpString1="49C4C9A7") returned="49C4C9A7" [0037.915] LocalFree (hMem=0x6a39a0) returned 0x0 [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F4") returned 2 [0037.915] lstrlenA (lpString="49C4C9A7") returned 8 [0037.915] lstrlenA (lpString="F4") returned 2 [0037.915] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.915] lstrcpyA (in: lpString1=0x651a78, lpString2="49C4C9A7" | out: lpString1="49C4C9A7") returned="49C4C9A7" [0037.915] lstrcatA (in: lpString1="49C4C9A7", lpString2="F4" | out: lpString1="49C4C9A7F4") returned="49C4C9A7F4" [0037.915] LocalFree (hMem=0x6519e0) returned 0x0 [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0C") returned 2 [0037.915] lstrlenA (lpString="49C4C9A7F4") returned 10 [0037.915] lstrlenA (lpString="0C") returned 2 [0037.915] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.915] lstrcpyA (in: lpString1=0x6519e0, lpString2="49C4C9A7F4" | out: lpString1="49C4C9A7F4") returned="49C4C9A7F4" [0037.915] lstrcatA (in: lpString1="49C4C9A7F4", lpString2="0C" | out: lpString1="49C4C9A7F40C") returned="49C4C9A7F40C" [0037.915] LocalFree (hMem=0x651a78) returned 0x0 [0037.915] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7D") returned 2 [0037.915] lstrlenA (lpString="49C4C9A7F40C") returned 12 [0037.915] lstrlenA (lpString="7D") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.916] lstrcpyA (in: lpString1=0x651a78, lpString2="49C4C9A7F40C" | out: lpString1="49C4C9A7F40C") returned="49C4C9A7F40C" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C", lpString2="7D" | out: lpString1="49C4C9A7F40C7D") returned="49C4C9A7F40C7D" [0037.916] LocalFree (hMem=0x6519e0) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="08") returned 2 [0037.916] lstrlenA (lpString="49C4C9A7F40C7D") returned 14 [0037.916] lstrlenA (lpString="08") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e550 [0037.916] lstrcpyA (in: lpString1=0x66e550, lpString2="49C4C9A7F40C7D" | out: lpString1="49C4C9A7F40C7D") returned="49C4C9A7F40C7D" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C7D", lpString2="08" | out: lpString1="49C4C9A7F40C7D08") returned="49C4C9A7F40C7D08" [0037.916] LocalFree (hMem=0x651a78) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.916] lstrlenA (lpString="49C4C9A7F40C7D08") returned 16 [0037.916] lstrlenA (lpString="2E") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66db50 [0037.916] lstrcpyA (in: lpString1=0x66db50, lpString2="49C4C9A7F40C7D08" | out: lpString1="49C4C9A7F40C7D08") returned="49C4C9A7F40C7D08" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C7D08", lpString2="2E" | out: lpString1="49C4C9A7F40C7D082E") returned="49C4C9A7F40C7D082E" [0037.916] LocalFree (hMem=0x66e550) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="09") returned 2 [0037.916] lstrlenA (lpString="49C4C9A7F40C7D082E") returned 18 [0037.916] lstrlenA (lpString="09") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e730 [0037.916] lstrcpyA (in: lpString1=0x66e730, lpString2="49C4C9A7F40C7D082E" | out: lpString1="49C4C9A7F40C7D082E") returned="49C4C9A7F40C7D082E" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C7D082E", lpString2="09" | out: lpString1="49C4C9A7F40C7D082E09") returned="49C4C9A7F40C7D082E09" [0037.916] LocalFree (hMem=0x66db50) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4A") returned 2 [0037.916] lstrlenA (lpString="49C4C9A7F40C7D082E09") returned 20 [0037.916] lstrlenA (lpString="4A") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0037.916] lstrcpyA (in: lpString1=0x66e910, lpString2="49C4C9A7F40C7D082E09" | out: lpString1="49C4C9A7F40C7D082E09") returned="49C4C9A7F40C7D082E09" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C7D082E09", lpString2="4A" | out: lpString1="49C4C9A7F40C7D082E094A") returned="49C4C9A7F40C7D082E094A" [0037.916] LocalFree (hMem=0x66e730) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EA") returned 2 [0037.916] lstrlenA (lpString="49C4C9A7F40C7D082E094A") returned 22 [0037.916] lstrlenA (lpString="EA") returned 2 [0037.916] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.916] lstrcpyA (in: lpString1=0x66ff98, lpString2="49C4C9A7F40C7D082E094A" | out: lpString1="49C4C9A7F40C7D082E094A") returned="49C4C9A7F40C7D082E094A" [0037.916] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094A", lpString2="EA" | out: lpString1="49C4C9A7F40C7D082E094AEA") returned="49C4C9A7F40C7D082E094AEA" [0037.916] LocalFree (hMem=0x66e910) returned 0x0 [0037.916] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D1") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEA") returned 24 [0037.917] lstrlenA (lpString="D1") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6700e8 [0037.917] lstrcpyA (in: lpString1=0x6700e8, lpString2="49C4C9A7F40C7D082E094AEA" | out: lpString1="49C4C9A7F40C7D082E094AEA") returned="49C4C9A7F40C7D082E094AEA" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEA", lpString2="D1" | out: lpString1="49C4C9A7F40C7D082E094AEAD1") returned="49C4C9A7F40C7D082E094AEAD1" [0037.917] LocalFree (hMem=0x66ff98) returned 0x0 [0037.917] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="30") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD1") returned 26 [0037.917] lstrlenA (lpString="30") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6704d8 [0037.917] lstrcpyA (in: lpString1=0x6704d8, lpString2="49C4C9A7F40C7D082E094AEAD1" | out: lpString1="49C4C9A7F40C7D082E094AEAD1") returned="49C4C9A7F40C7D082E094AEAD1" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD1", lpString2="30" | out: lpString1="49C4C9A7F40C7D082E094AEAD130") returned="49C4C9A7F40C7D082E094AEAD130" [0037.917] LocalFree (hMem=0x6700e8) returned 0x0 [0037.917] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="74") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD130") returned 28 [0037.917] lstrlenA (lpString="74") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670ac0 [0037.917] lstrcpyA (in: lpString1=0x670ac0, lpString2="49C4C9A7F40C7D082E094AEAD130" | out: lpString1="49C4C9A7F40C7D082E094AEAD130") returned="49C4C9A7F40C7D082E094AEAD130" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD130", lpString2="74" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074") returned="49C4C9A7F40C7D082E094AEAD13074" [0037.917] LocalFree (hMem=0x6704d8) returned 0x0 [0037.917] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="17") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD13074") returned 30 [0037.917] lstrlenA (lpString="17") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678ff8 [0037.917] lstrcpyA (in: lpString1=0x678ff8, lpString2="49C4C9A7F40C7D082E094AEAD13074" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074") returned="49C4C9A7F40C7D082E094AEAD13074" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD13074", lpString2="17" | out: lpString1="49C4C9A7F40C7D082E094AEAD1307417") returned="49C4C9A7F40C7D082E094AEAD1307417" [0037.917] LocalFree (hMem=0x670ac0) returned 0x0 [0037.917] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="00") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD1307417") returned 32 [0037.917] lstrlenA (lpString="00") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679788 [0037.917] lstrcpyA (in: lpString1=0x679788, lpString2="49C4C9A7F40C7D082E094AEAD1307417" | out: lpString1="49C4C9A7F40C7D082E094AEAD1307417") returned="49C4C9A7F40C7D082E094AEAD1307417" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD1307417", lpString2="00" | out: lpString1="49C4C9A7F40C7D082E094AEAD130741700") returned="49C4C9A7F40C7D082E094AEAD130741700" [0037.917] LocalFree (hMem=0x678ff8) returned 0x0 [0037.917] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="95") returned 2 [0037.917] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD130741700") returned 34 [0037.917] lstrlenA (lpString="95") returned 2 [0037.917] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679838 [0037.917] lstrcpyA (in: lpString1=0x679838, lpString2="49C4C9A7F40C7D082E094AEAD130741700" | out: lpString1="49C4C9A7F40C7D082E094AEAD130741700") returned="49C4C9A7F40C7D082E094AEAD130741700" [0037.917] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD130741700", lpString2="95" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095") returned="49C4C9A7F40C7D082E094AEAD13074170095" [0037.918] LocalFree (hMem=0x679788) returned 0x0 [0037.918] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D5") returned 2 [0037.918] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD13074170095") returned 36 [0037.918] lstrlenA (lpString="D5") returned 2 [0037.918] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6792b8 [0037.918] lstrcpyA (in: lpString1=0x6792b8, lpString2="49C4C9A7F40C7D082E094AEAD13074170095" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095") returned="49C4C9A7F40C7D082E094AEAD13074170095" [0037.918] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD13074170095", lpString2="D5" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D5") returned="49C4C9A7F40C7D082E094AEAD13074170095D5" [0037.918] LocalFree (hMem=0x679838) returned 0x0 [0037.918] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="96") returned 2 [0037.918] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD13074170095D5") returned 38 [0037.918] lstrlenA (lpString="96") returned 2 [0037.918] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.918] lstrcpyA (in: lpString1=0x6519e0, lpString2="49C4C9A7F40C7D082E094AEAD13074170095D5" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D5") returned="49C4C9A7F40C7D082E094AEAD13074170095D5" [0037.918] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D5", lpString2="96" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D596") returned="49C4C9A7F40C7D082E094AEAD13074170095D596" [0037.918] LocalFree (hMem=0x6792b8) returned 0x0 [0037.918] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F9") returned 2 [0037.918] lstrlenA (lpString="49C4C9A7F40C7D082E094AEAD13074170095D596") returned 40 [0037.918] lstrlenA (lpString="F9") returned 2 [0037.918] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.918] lstrcpyA (in: lpString1=0x651a98, lpString2="49C4C9A7F40C7D082E094AEAD13074170095D596" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D596") returned="49C4C9A7F40C7D082E094AEAD13074170095D596" [0037.918] lstrcatA (in: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D596", lpString2="F9" | out: lpString1="49C4C9A7F40C7D082E094AEAD13074170095D596F9") returned="49C4C9A7F40C7D082E094AEAD13074170095D596F9" [0037.918] LocalFree (hMem=0x6519e0) returned 0x0 [0037.918] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.918] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.918] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.918] LocalFree (hMem=0x651a98) returned 0x0 [0037.918] CoTaskMemFree (pv=0x6648c8) [0037.918] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/kwJm8SY40P", lpSrch="?") returned 0x0 [0037.918] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/kwJm8SY40P") returned 51 [0037.937] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BD") returned 2 [0037.937] lstrlenA (lpString="") returned 0 [0037.937] lstrlenA (lpString="BD") returned 2 [0037.937] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3c70 [0037.937] lstrcpyA (in: lpString1=0x6a3c70, lpString2="" | out: lpString1="") returned="" [0037.937] lstrcatA (in: lpString1="", lpString2="BD" | out: lpString1="BD") returned="BD" [0037.937] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="27") returned 2 [0037.937] lstrlenA (lpString="BD") returned 2 [0037.937] lstrlenA (lpString="27") returned 2 [0037.937] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3880 [0037.937] lstrcpyA (in: lpString1=0x6a3880, lpString2="BD" | out: lpString1="BD") returned="BD" [0037.937] lstrcatA (in: lpString1="BD", lpString2="27" | out: lpString1="BD27") returned="BD27" [0037.937] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.937] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="31") returned 2 [0037.937] lstrlenA (lpString="BD27") returned 4 [0037.937] lstrlenA (lpString="31") returned 2 [0037.937] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3c70 [0037.937] lstrcpyA (in: lpString1=0x6a3c70, lpString2="BD27" | out: lpString1="BD27") returned="BD27" [0037.938] lstrcatA (in: lpString1="BD27", lpString2="31" | out: lpString1="BD2731") returned="BD2731" [0037.938] LocalFree (hMem=0x6a3880) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="39") returned 2 [0037.938] lstrlenA (lpString="BD2731") returned 6 [0037.938] lstrlenA (lpString="39") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.938] lstrcpyA (in: lpString1=0x6519e0, lpString2="BD2731" | out: lpString1="BD2731") returned="BD2731" [0037.938] lstrcatA (in: lpString1="BD2731", lpString2="39" | out: lpString1="BD273139") returned="BD273139" [0037.938] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="75") returned 2 [0037.938] lstrlenA (lpString="BD273139") returned 8 [0037.938] lstrlenA (lpString="75") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.938] lstrcpyA (in: lpString1=0x651a78, lpString2="BD273139" | out: lpString1="BD273139") returned="BD273139" [0037.938] lstrcatA (in: lpString1="BD273139", lpString2="75" | out: lpString1="BD27313975") returned="BD27313975" [0037.938] LocalFree (hMem=0x6519e0) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3A") returned 2 [0037.938] lstrlenA (lpString="BD27313975") returned 10 [0037.938] lstrlenA (lpString="3A") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.938] lstrcpyA (in: lpString1=0x6519e0, lpString2="BD27313975" | out: lpString1="BD27313975") returned="BD27313975" [0037.938] lstrcatA (in: lpString1="BD27313975", lpString2="3A" | out: lpString1="BD273139753A") returned="BD273139753A" [0037.938] LocalFree (hMem=0x651a78) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AF") returned 2 [0037.938] lstrlenA (lpString="BD273139753A") returned 12 [0037.938] lstrlenA (lpString="AF") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.938] lstrcpyA (in: lpString1=0x651a78, lpString2="BD273139753A" | out: lpString1="BD273139753A") returned="BD273139753A" [0037.938] lstrcatA (in: lpString1="BD273139753A", lpString2="AF" | out: lpString1="BD273139753AAF") returned="BD273139753AAF" [0037.938] LocalFree (hMem=0x6519e0) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="96") returned 2 [0037.938] lstrlenA (lpString="BD273139753AAF") returned 14 [0037.938] lstrlenA (lpString="96") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0037.938] lstrcpyA (in: lpString1=0x66e2d0, lpString2="BD273139753AAF" | out: lpString1="BD273139753AAF") returned="BD273139753AAF" [0037.938] lstrcatA (in: lpString1="BD273139753AAF", lpString2="96" | out: lpString1="BD273139753AAF96") returned="BD273139753AAF96" [0037.938] LocalFree (hMem=0x651a78) returned 0x0 [0037.938] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.938] lstrlenA (lpString="BD273139753AAF96") returned 16 [0037.938] lstrlenA (lpString="F7") returned 2 [0037.938] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dbf0 [0037.939] lstrcpyA (in: lpString1=0x66dbf0, lpString2="BD273139753AAF96" | out: lpString1="BD273139753AAF96") returned="BD273139753AAF96" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96", lpString2="F7" | out: lpString1="BD273139753AAF96F7") returned="BD273139753AAF96F7" [0037.939] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F7") returned 18 [0037.939] lstrlenA (lpString="42") returned 2 [0037.939] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e2d0 [0037.939] lstrcpyA (in: lpString1=0x66e2d0, lpString2="BD273139753AAF96F7" | out: lpString1="BD273139753AAF96F7") returned="BD273139753AAF96F7" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96F7", lpString2="42" | out: lpString1="BD273139753AAF96F742") returned="BD273139753AAF96F742" [0037.939] LocalFree (hMem=0x66dbf0) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BD") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F742") returned 20 [0037.939] lstrlenA (lpString="BD") returned 2 [0037.939] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e9b0 [0037.939] lstrcpyA (in: lpString1=0x66e9b0, lpString2="BD273139753AAF96F742" | out: lpString1="BD273139753AAF96F742") returned="BD273139753AAF96F742" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96F742", lpString2="BD" | out: lpString1="BD273139753AAF96F742BD") returned="BD273139753AAF96F742BD" [0037.939] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F742BD") returned 22 [0037.939] lstrlenA (lpString="35") returned 2 [0037.939] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.939] lstrcpyA (in: lpString1=0x66ff98, lpString2="BD273139753AAF96F742BD" | out: lpString1="BD273139753AAF96F742BD") returned="BD273139753AAF96F742BD" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96F742BD", lpString2="35" | out: lpString1="BD273139753AAF96F742BD35") returned="BD273139753AAF96F742BD35" [0037.939] LocalFree (hMem=0x66e9b0) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="71") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F742BD35") returned 24 [0037.939] lstrlenA (lpString="71") returned 2 [0037.939] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0037.939] lstrcpyA (in: lpString1=0x670040, lpString2="BD273139753AAF96F742BD35" | out: lpString1="BD273139753AAF96F742BD35") returned="BD273139753AAF96F742BD35" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96F742BD35", lpString2="71" | out: lpString1="BD273139753AAF96F742BD3571") returned="BD273139753AAF96F742BD3571" [0037.939] LocalFree (hMem=0x66ff98) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F742BD3571") returned 26 [0037.939] lstrlenA (lpString="2E") returned 2 [0037.939] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.939] lstrcpyA (in: lpString1=0x66ff98, lpString2="BD273139753AAF96F742BD3571" | out: lpString1="BD273139753AAF96F742BD3571") returned="BD273139753AAF96F742BD3571" [0037.939] lstrcatA (in: lpString1="BD273139753AAF96F742BD3571", lpString2="2E" | out: lpString1="BD273139753AAF96F742BD35712E") returned="BD273139753AAF96F742BD35712E" [0037.939] LocalFree (hMem=0x670040) returned 0x0 [0037.939] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0037.939] lstrlenA (lpString="BD273139753AAF96F742BD35712E") returned 28 [0037.940] lstrlenA (lpString="C7") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6706d0 [0037.940] lstrcpyA (in: lpString1=0x6706d0, lpString2="BD273139753AAF96F742BD35712E" | out: lpString1="BD273139753AAF96F742BD35712E") returned="BD273139753AAF96F742BD35712E" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712E", lpString2="C7" | out: lpString1="BD273139753AAF96F742BD35712EC7") returned="BD273139753AAF96F742BD35712EC7" [0037.940] LocalFree (hMem=0x66ff98) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="87") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC7") returned 30 [0037.940] lstrlenA (lpString="87") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679c58 [0037.940] lstrcpyA (in: lpString1=0x679c58, lpString2="BD273139753AAF96F742BD35712EC7" | out: lpString1="BD273139753AAF96F742BD35712EC7") returned="BD273139753AAF96F742BD35712EC7" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC7", lpString2="87" | out: lpString1="BD273139753AAF96F742BD35712EC787") returned="BD273139753AAF96F742BD35712EC787" [0037.940] LocalFree (hMem=0x6706d0) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="15") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC787") returned 32 [0037.940] lstrlenA (lpString="15") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678d38 [0037.940] lstrcpyA (in: lpString1=0x678d38, lpString2="BD273139753AAF96F742BD35712EC787" | out: lpString1="BD273139753AAF96F742BD35712EC787") returned="BD273139753AAF96F742BD35712EC787" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC787", lpString2="15" | out: lpString1="BD273139753AAF96F742BD35712EC78715") returned="BD273139753AAF96F742BD35712EC78715" [0037.940] LocalFree (hMem=0x679c58) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="38") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC78715") returned 34 [0037.940] lstrlenA (lpString="38") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678f48 [0037.940] lstrcpyA (in: lpString1=0x678f48, lpString2="BD273139753AAF96F742BD35712EC78715" | out: lpString1="BD273139753AAF96F742BD35712EC78715") returned="BD273139753AAF96F742BD35712EC78715" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC78715", lpString2="38" | out: lpString1="BD273139753AAF96F742BD35712EC7871538") returned="BD273139753AAF96F742BD35712EC7871538" [0037.940] LocalFree (hMem=0x678d38) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E8") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC7871538") returned 36 [0037.940] lstrlenA (lpString="E8") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6790a8 [0037.940] lstrcpyA (in: lpString1=0x6790a8, lpString2="BD273139753AAF96F742BD35712EC7871538" | out: lpString1="BD273139753AAF96F742BD35712EC7871538") returned="BD273139753AAF96F742BD35712EC7871538" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC7871538", lpString2="E8" | out: lpString1="BD273139753AAF96F742BD35712EC7871538E8") returned="BD273139753AAF96F742BD35712EC7871538E8" [0037.940] LocalFree (hMem=0x678f48) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="45") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC7871538E8") returned 38 [0037.940] lstrlenA (lpString="45") returned 2 [0037.940] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.940] lstrcpyA (in: lpString1=0x6519e0, lpString2="BD273139753AAF96F742BD35712EC7871538E8" | out: lpString1="BD273139753AAF96F742BD35712EC7871538E8") returned="BD273139753AAF96F742BD35712EC7871538E8" [0037.940] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC7871538E8", lpString2="45" | out: lpString1="BD273139753AAF96F742BD35712EC7871538E845") returned="BD273139753AAF96F742BD35712EC7871538E845" [0037.940] LocalFree (hMem=0x6790a8) returned 0x0 [0037.940] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0037.940] lstrlenA (lpString="BD273139753AAF96F742BD35712EC7871538E845") returned 40 [0037.940] lstrlenA (lpString="D4") returned 2 [0037.941] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.941] lstrcpyA (in: lpString1=0x651a98, lpString2="BD273139753AAF96F742BD35712EC7871538E845" | out: lpString1="BD273139753AAF96F742BD35712EC7871538E845") returned="BD273139753AAF96F742BD35712EC7871538E845" [0037.941] lstrcatA (in: lpString1="BD273139753AAF96F742BD35712EC7871538E845", lpString2="D4" | out: lpString1="BD273139753AAF96F742BD35712EC7871538E845D4") returned="BD273139753AAF96F742BD35712EC7871538E845D4" [0037.941] LocalFree (hMem=0x6519e0) returned 0x0 [0037.941] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.941] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.941] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.941] LocalFree (hMem=0x651a98) returned 0x0 [0037.941] CoTaskMemFree (pv=0x6771d8) [0037.941] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/N1OYHSnZcP.mp4", lpSrch="?") returned 0x0 [0037.941] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/N1OYHSnZcP.mp4") returned 48 [0037.958] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3B") returned 2 [0037.958] lstrlenA (lpString="") returned 0 [0037.958] lstrlenA (lpString="3B") returned 2 [0037.958] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a30a0 [0037.958] lstrcpyA (in: lpString1=0x6a30a0, lpString2="" | out: lpString1="") returned="" [0037.958] lstrcatA (in: lpString1="", lpString2="3B" | out: lpString1="3B") returned="3B" [0037.958] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D9") returned 2 [0037.958] lstrlenA (lpString="3B") returned 2 [0037.958] lstrlenA (lpString="D9") returned 2 [0037.958] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3c70 [0037.958] lstrcpyA (in: lpString1=0x6a3c70, lpString2="3B" | out: lpString1="3B") returned="3B" [0037.958] lstrcatA (in: lpString1="3B", lpString2="D9" | out: lpString1="3BD9") returned="3BD9" [0037.958] LocalFree (hMem=0x6a30a0) returned 0x0 [0037.958] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="60") returned 2 [0037.958] lstrlenA (lpString="3BD9") returned 4 [0037.958] lstrlenA (lpString="60") returned 2 [0037.958] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3400 [0037.958] lstrcpyA (in: lpString1=0x6a3400, lpString2="3BD9" | out: lpString1="3BD9") returned="3BD9" [0037.958] lstrcatA (in: lpString1="3BD9", lpString2="60" | out: lpString1="3BD960") returned="3BD960" [0037.958] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.958] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FD") returned 2 [0037.958] lstrlenA (lpString="3BD960") returned 6 [0037.958] lstrlenA (lpString="FD") returned 2 [0037.958] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.958] lstrcpyA (in: lpString1=0x6519e0, lpString2="3BD960" | out: lpString1="3BD960") returned="3BD960" [0037.958] lstrcatA (in: lpString1="3BD960", lpString2="FD" | out: lpString1="3BD960FD") returned="3BD960FD" [0037.958] LocalFree (hMem=0x6a3400) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0037.959] lstrlenA (lpString="3BD960FD") returned 8 [0037.959] lstrlenA (lpString="F7") returned 2 [0037.959] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.959] lstrcpyA (in: lpString1=0x651a78, lpString2="3BD960FD" | out: lpString1="3BD960FD") returned="3BD960FD" [0037.959] lstrcatA (in: lpString1="3BD960FD", lpString2="F7" | out: lpString1="3BD960FDF7") returned="3BD960FDF7" [0037.959] LocalFree (hMem=0x6519e0) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0037.959] lstrlenA (lpString="3BD960FDF7") returned 10 [0037.959] lstrlenA (lpString="57") returned 2 [0037.959] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.959] lstrcpyA (in: lpString1=0x6519e0, lpString2="3BD960FDF7" | out: lpString1="3BD960FDF7") returned="3BD960FDF7" [0037.959] lstrcatA (in: lpString1="3BD960FDF7", lpString2="57" | out: lpString1="3BD960FDF757") returned="3BD960FDF757" [0037.959] LocalFree (hMem=0x651a78) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4D") returned 2 [0037.959] lstrlenA (lpString="3BD960FDF757") returned 12 [0037.959] lstrlenA (lpString="4D") returned 2 [0037.959] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.959] lstrcpyA (in: lpString1=0x651a78, lpString2="3BD960FDF757" | out: lpString1="3BD960FDF757") returned="3BD960FDF757" [0037.959] lstrcatA (in: lpString1="3BD960FDF757", lpString2="4D" | out: lpString1="3BD960FDF7574D") returned="3BD960FDF7574D" [0037.959] LocalFree (hMem=0x6519e0) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8E") returned 2 [0037.959] lstrlenA (lpString="3BD960FDF7574D") returned 14 [0037.959] lstrlenA (lpString="8E") returned 2 [0037.959] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e550 [0037.959] lstrcpyA (in: lpString1=0x66e550, lpString2="3BD960FDF7574D" | out: lpString1="3BD960FDF7574D") returned="3BD960FDF7574D" [0037.959] lstrcatA (in: lpString1="3BD960FDF7574D", lpString2="8E" | out: lpString1="3BD960FDF7574D8E") returned="3BD960FDF7574D8E" [0037.959] LocalFree (hMem=0x651a78) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0037.959] lstrlenA (lpString="3BD960FDF7574D8E") returned 16 [0037.959] lstrlenA (lpString="42") returned 2 [0037.959] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e410 [0037.959] lstrcpyA (in: lpString1=0x66e410, lpString2="3BD960FDF7574D8E" | out: lpString1="3BD960FDF7574D8E") returned="3BD960FDF7574D8E" [0037.959] lstrcatA (in: lpString1="3BD960FDF7574D8E", lpString2="42" | out: lpString1="3BD960FDF7574D8E42") returned="3BD960FDF7574D8E42" [0037.959] LocalFree (hMem=0x66e550) returned 0x0 [0037.959] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6C") returned 2 [0037.959] lstrlenA (lpString="3BD960FDF7574D8E42") returned 18 [0037.959] lstrlenA (lpString="6C") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e550 [0037.960] lstrcpyA (in: lpString1=0x66e550, lpString2="3BD960FDF7574D8E42" | out: lpString1="3BD960FDF7574D8E42") returned="3BD960FDF7574D8E42" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E42", lpString2="6C" | out: lpString1="3BD960FDF7574D8E426C") returned="3BD960FDF7574D8E426C" [0037.960] LocalFree (hMem=0x66e410) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5A") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C") returned 20 [0037.960] lstrlenA (lpString="5A") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66ddd0 [0037.960] lstrcpyA (in: lpString1=0x66ddd0, lpString2="3BD960FDF7574D8E426C" | out: lpString1="3BD960FDF7574D8E426C") returned="3BD960FDF7574D8E426C" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E426C", lpString2="5A" | out: lpString1="3BD960FDF7574D8E426C5A") returned="3BD960FDF7574D8E426C5A" [0037.960] LocalFree (hMem=0x66e550) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="40") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C5A") returned 22 [0037.960] lstrlenA (lpString="40") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0037.960] lstrcpyA (in: lpString1=0x66ff98, lpString2="3BD960FDF7574D8E426C5A" | out: lpString1="3BD960FDF7574D8E426C5A") returned="3BD960FDF7574D8E426C5A" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A", lpString2="40" | out: lpString1="3BD960FDF7574D8E426C5A40") returned="3BD960FDF7574D8E426C5A40" [0037.960] LocalFree (hMem=0x66ddd0) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F1") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C5A40") returned 24 [0037.960] lstrlenA (lpString="F1") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.960] lstrcpyA (in: lpString1=0x670628, lpString2="3BD960FDF7574D8E426C5A40" | out: lpString1="3BD960FDF7574D8E426C5A40") returned="3BD960FDF7574D8E426C5A40" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40", lpString2="F1" | out: lpString1="3BD960FDF7574D8E426C5A40F1") returned="3BD960FDF7574D8E426C5A40F1" [0037.960] LocalFree (hMem=0x66ff98) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4E") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F1") returned 26 [0037.960] lstrlenA (lpString="4E") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0037.960] lstrcpyA (in: lpString1=0x66ff98, lpString2="3BD960FDF7574D8E426C5A40F1" | out: lpString1="3BD960FDF7574D8E426C5A40F1") returned="3BD960FDF7574D8E426C5A40F1" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F1", lpString2="4E" | out: lpString1="3BD960FDF7574D8E426C5A40F14E") returned="3BD960FDF7574D8E426C5A40F14E" [0037.960] LocalFree (hMem=0x670628) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="84") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E") returned 28 [0037.960] lstrlenA (lpString="84") returned 2 [0037.960] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0037.960] lstrcpyA (in: lpString1=0x670040, lpString2="3BD960FDF7574D8E426C5A40F14E" | out: lpString1="3BD960FDF7574D8E426C5A40F14E") returned="3BD960FDF7574D8E426C5A40F14E" [0037.960] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E", lpString2="84" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84") returned="3BD960FDF7574D8E426C5A40F14E84" [0037.960] LocalFree (hMem=0x66ff98) returned 0x0 [0037.960] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C4") returned 2 [0037.960] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84") returned 30 [0037.964] lstrlenA (lpString="C4") returned 2 [0037.964] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678d38 [0037.964] lstrcpyA (in: lpString1=0x678d38, lpString2="3BD960FDF7574D8E426C5A40F14E84" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84") returned="3BD960FDF7574D8E426C5A40F14E84" [0037.964] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84", lpString2="C4" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4") returned="3BD960FDF7574D8E426C5A40F14E84C4" [0037.964] LocalFree (hMem=0x670040) returned 0x0 [0037.964] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C9") returned 2 [0037.964] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84C4") returned 32 [0037.964] lstrlenA (lpString="C9") returned 2 [0037.964] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679418 [0037.964] lstrcpyA (in: lpString1=0x679418, lpString2="3BD960FDF7574D8E426C5A40F14E84C4" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4") returned="3BD960FDF7574D8E426C5A40F14E84C4" [0037.964] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84C4", lpString2="C9" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C9") returned="3BD960FDF7574D8E426C5A40F14E84C4C9" [0037.964] LocalFree (hMem=0x678d38) returned 0x0 [0037.964] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="12") returned 2 [0037.964] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84C4C9") returned 34 [0037.964] lstrlenA (lpString="12") returned 2 [0037.964] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678e98 [0037.964] lstrcpyA (in: lpString1=0x678e98, lpString2="3BD960FDF7574D8E426C5A40F14E84C4C9" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C9") returned="3BD960FDF7574D8E426C5A40F14E84C4C9" [0037.964] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C9", lpString2="12" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912") returned="3BD960FDF7574D8E426C5A40F14E84C4C912" [0037.964] LocalFree (hMem=0x679418) returned 0x0 [0037.964] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BB") returned 2 [0037.964] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84C4C912") returned 36 [0037.964] lstrlenA (lpString="BB") returned 2 [0037.964] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679208 [0037.964] lstrcpyA (in: lpString1=0x679208, lpString2="3BD960FDF7574D8E426C5A40F14E84C4C912" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912") returned="3BD960FDF7574D8E426C5A40F14E84C4C912" [0037.964] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912", lpString2="BB" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB") returned="3BD960FDF7574D8E426C5A40F14E84C4C912BB" [0037.964] LocalFree (hMem=0x678e98) returned 0x0 [0037.964] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0037.964] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84C4C912BB") returned 38 [0037.964] lstrlenA (lpString="2F") returned 2 [0037.964] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.964] lstrcpyA (in: lpString1=0x6519e0, lpString2="3BD960FDF7574D8E426C5A40F14E84C4C912BB" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB") returned="3BD960FDF7574D8E426C5A40F14E84C4C912BB" [0037.964] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB", lpString2="2F" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F") returned="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F" [0037.964] LocalFree (hMem=0x679208) returned 0x0 [0037.964] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0037.965] lstrlenA (lpString="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F") returned 40 [0037.965] lstrlenA (lpString="2E") returned 2 [0037.965] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0037.965] lstrcpyA (in: lpString1=0x6771d8, lpString2="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F") returned="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F" [0037.965] lstrcatA (in: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F", lpString2="2E" | out: lpString1="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F2E") returned="3BD960FDF7574D8E426C5A40F14E84C4C912BB2F2E" [0037.965] LocalFree (hMem=0x6519e0) returned 0x0 [0037.965] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.965] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.965] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.965] LocalFree (hMem=0x6771d8) returned 0x0 [0037.965] CoTaskMemFree (pv=0x651b30) [0037.965] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/DqiuYJrDZjXpw6A.odp", lpSrch="?") returned 0x0 [0037.965] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/DqiuYJrDZjXpw6A.odp") returned 61 [0037.991] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="27") returned 2 [0037.991] lstrlenA (lpString="") returned 0 [0037.991] lstrlenA (lpString="27") returned 2 [0037.991] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a36d0 [0037.991] lstrcpyA (in: lpString1=0x6a36d0, lpString2="" | out: lpString1="") returned="" [0037.991] lstrcatA (in: lpString1="", lpString2="27" | out: lpString1="27") returned="27" [0037.991] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6A") returned 2 [0037.991] lstrlenA (lpString="27") returned 2 [0037.991] lstrlenA (lpString="6A") returned 2 [0037.991] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a32e0 [0037.991] lstrcpyA (in: lpString1=0x6a32e0, lpString2="27" | out: lpString1="27") returned="27" [0037.991] lstrcatA (in: lpString1="27", lpString2="6A" | out: lpString1="276A") returned="276A" [0037.991] LocalFree (hMem=0x6a36d0) returned 0x0 [0037.991] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="17") returned 2 [0037.991] lstrlenA (lpString="276A") returned 4 [0037.991] lstrlenA (lpString="17") returned 2 [0037.991] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3c70 [0037.991] lstrcpyA (in: lpString1=0x6a3c70, lpString2="276A" | out: lpString1="276A") returned="276A" [0037.991] lstrcatA (in: lpString1="276A", lpString2="17" | out: lpString1="276A17") returned="276A17" [0037.991] LocalFree (hMem=0x6a32e0) returned 0x0 [0037.991] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4D") returned 2 [0037.991] lstrlenA (lpString="276A17") returned 6 [0037.991] lstrlenA (lpString="4D") returned 2 [0037.991] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0037.991] lstrcpyA (in: lpString1=0x6519e0, lpString2="276A17" | out: lpString1="276A17") returned="276A17" [0037.991] lstrcatA (in: lpString1="276A17", lpString2="4D" | out: lpString1="276A174D") returned="276A174D" [0037.991] LocalFree (hMem=0x6a3c70) returned 0x0 [0037.991] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5A") returned 2 [0037.992] lstrlenA (lpString="276A174D") returned 8 [0037.992] lstrlenA (lpString="5A") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0037.992] lstrcpyA (in: lpString1=0x651a78, lpString2="276A174D" | out: lpString1="276A174D") returned="276A174D" [0037.992] lstrcatA (in: lpString1="276A174D", lpString2="5A" | out: lpString1="276A174D5A") returned="276A174D5A" [0037.992] LocalFree (hMem=0x6519e0) returned 0x0 [0037.992] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0037.992] lstrlenA (lpString="276A174D5A") returned 10 [0037.992] lstrlenA (lpString="C7") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0037.992] lstrcpyA (in: lpString1=0x6519e0, lpString2="276A174D5A" | out: lpString1="276A174D5A") returned="276A174D5A" [0037.992] lstrcatA (in: lpString1="276A174D5A", lpString2="C7" | out: lpString1="276A174D5AC7") returned="276A174D5AC7" [0037.992] LocalFree (hMem=0x651a78) returned 0x0 [0037.992] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BC") returned 2 [0037.992] lstrlenA (lpString="276A174D5AC7") returned 12 [0037.992] lstrlenA (lpString="BC") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0037.992] lstrcpyA (in: lpString1=0x651a78, lpString2="276A174D5AC7" | out: lpString1="276A174D5AC7") returned="276A174D5AC7" [0037.992] lstrcatA (in: lpString1="276A174D5AC7", lpString2="BC" | out: lpString1="276A174D5AC7BC") returned="276A174D5AC7BC" [0037.992] LocalFree (hMem=0x6519e0) returned 0x0 [0037.992] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="83") returned 2 [0037.992] lstrlenA (lpString="276A174D5AC7BC") returned 14 [0037.992] lstrlenA (lpString="83") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66dd30 [0037.992] lstrcpyA (in: lpString1=0x66dd30, lpString2="276A174D5AC7BC" | out: lpString1="276A174D5AC7BC") returned="276A174D5AC7BC" [0037.992] lstrcatA (in: lpString1="276A174D5AC7BC", lpString2="83" | out: lpString1="276A174D5AC7BC83") returned="276A174D5AC7BC83" [0037.992] LocalFree (hMem=0x651a78) returned 0x0 [0037.992] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0037.992] lstrlenA (lpString="276A174D5AC7BC83") returned 16 [0037.992] lstrlenA (lpString="3C") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e2d0 [0037.992] lstrcpyA (in: lpString1=0x66e2d0, lpString2="276A174D5AC7BC83" | out: lpString1="276A174D5AC7BC83") returned="276A174D5AC7BC83" [0037.992] lstrcatA (in: lpString1="276A174D5AC7BC83", lpString2="3C" | out: lpString1="276A174D5AC7BC833C") returned="276A174D5AC7BC833C" [0037.992] LocalFree (hMem=0x66dd30) returned 0x0 [0037.992] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3A") returned 2 [0037.992] lstrlenA (lpString="276A174D5AC7BC833C") returned 18 [0037.992] lstrlenA (lpString="3A") returned 2 [0037.992] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dbf0 [0037.992] lstrcpyA (in: lpString1=0x66dbf0, lpString2="276A174D5AC7BC833C" | out: lpString1="276A174D5AC7BC833C") returned="276A174D5AC7BC833C" [0037.992] lstrcatA (in: lpString1="276A174D5AC7BC833C", lpString2="3A" | out: lpString1="276A174D5AC7BC833C3A") returned="276A174D5AC7BC833C3A" [0037.993] LocalFree (hMem=0x66e2d0) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0F") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A") returned 20 [0037.993] lstrlenA (lpString="0F") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e0f0 [0037.993] lstrcpyA (in: lpString1=0x66e0f0, lpString2="276A174D5AC7BC833C3A" | out: lpString1="276A174D5AC7BC833C3A") returned="276A174D5AC7BC833C3A" [0037.993] lstrcatA (in: lpString1="276A174D5AC7BC833C3A", lpString2="0F" | out: lpString1="276A174D5AC7BC833C3A0F") returned="276A174D5AC7BC833C3A0F" [0037.993] LocalFree (hMem=0x66dbf0) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="94") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A0F") returned 22 [0037.993] lstrlenA (lpString="94") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6708c8 [0037.993] lstrcpyA (in: lpString1=0x6708c8, lpString2="276A174D5AC7BC833C3A0F" | out: lpString1="276A174D5AC7BC833C3A0F") returned="276A174D5AC7BC833C3A0F" [0037.993] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F", lpString2="94" | out: lpString1="276A174D5AC7BC833C3A0F94") returned="276A174D5AC7BC833C3A0F94" [0037.993] LocalFree (hMem=0x66e0f0) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7D") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A0F94") returned 24 [0037.993] lstrlenA (lpString="7D") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0037.993] lstrcpyA (in: lpString1=0x670628, lpString2="276A174D5AC7BC833C3A0F94" | out: lpString1="276A174D5AC7BC833C3A0F94") returned="276A174D5AC7BC833C3A0F94" [0037.993] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F94", lpString2="7D" | out: lpString1="276A174D5AC7BC833C3A0F947D") returned="276A174D5AC7BC833C3A0F947D" [0037.993] LocalFree (hMem=0x6708c8) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6F") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D") returned 26 [0037.993] lstrlenA (lpString="6F") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0037.993] lstrcpyA (in: lpString1=0x670040, lpString2="276A174D5AC7BC833C3A0F947D" | out: lpString1="276A174D5AC7BC833C3A0F947D") returned="276A174D5AC7BC833C3A0F947D" [0037.993] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D", lpString2="6F" | out: lpString1="276A174D5AC7BC833C3A0F947D6F") returned="276A174D5AC7BC833C3A0F947D6F" [0037.993] LocalFree (hMem=0x670628) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8D") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F") returned 28 [0037.993] lstrlenA (lpString="8D") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0037.993] lstrcpyA (in: lpString1=0x66ff98, lpString2="276A174D5AC7BC833C3A0F947D6F" | out: lpString1="276A174D5AC7BC833C3A0F947D6F") returned="276A174D5AC7BC833C3A0F947D6F" [0037.993] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F", lpString2="8D" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D") returned="276A174D5AC7BC833C3A0F947D6F8D" [0037.993] LocalFree (hMem=0x670040) returned 0x0 [0037.993] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="33") returned 2 [0037.993] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D") returned 30 [0037.993] lstrlenA (lpString="33") returned 2 [0037.993] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679578 [0037.993] lstrcpyA (in: lpString1=0x679578, lpString2="276A174D5AC7BC833C3A0F947D6F8D" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D") returned="276A174D5AC7BC833C3A0F947D6F8D" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D", lpString2="33" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D33") returned="276A174D5AC7BC833C3A0F947D6F8D33" [0037.994] LocalFree (hMem=0x66ff98) returned 0x0 [0037.994] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0037.994] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D33") returned 32 [0037.994] lstrlenA (lpString="93") returned 2 [0037.994] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679ba8 [0037.994] lstrcpyA (in: lpString1=0x679ba8, lpString2="276A174D5AC7BC833C3A0F947D6F8D33" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D33") returned="276A174D5AC7BC833C3A0F947D6F8D33" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D33", lpString2="93" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393") returned="276A174D5AC7BC833C3A0F947D6F8D3393" [0037.994] LocalFree (hMem=0x679578) returned 0x0 [0037.994] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D3") returned 2 [0037.994] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D3393") returned 34 [0037.994] lstrlenA (lpString="D3") returned 2 [0037.994] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6792b8 [0037.994] lstrcpyA (in: lpString1=0x6792b8, lpString2="276A174D5AC7BC833C3A0F947D6F8D3393" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393") returned="276A174D5AC7BC833C3A0F947D6F8D3393" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393", lpString2="D3" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D3") returned="276A174D5AC7BC833C3A0F947D6F8D3393D3" [0037.994] LocalFree (hMem=0x679ba8) returned 0x0 [0037.994] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5B") returned 2 [0037.994] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D3393D3") returned 36 [0037.994] lstrlenA (lpString="5B") returned 2 [0037.994] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679af8 [0037.994] lstrcpyA (in: lpString1=0x679af8, lpString2="276A174D5AC7BC833C3A0F947D6F8D3393D3" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D3") returned="276A174D5AC7BC833C3A0F947D6F8D3393D3" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D3", lpString2="5B" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35B") returned="276A174D5AC7BC833C3A0F947D6F8D3393D35B" [0037.994] LocalFree (hMem=0x6792b8) returned 0x0 [0037.994] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A9") returned 2 [0037.994] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D3393D35B") returned 38 [0037.994] lstrlenA (lpString="A9") returned 2 [0037.994] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0037.994] lstrcpyA (in: lpString1=0x6519e0, lpString2="276A174D5AC7BC833C3A0F947D6F8D3393D35B" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35B") returned="276A174D5AC7BC833C3A0F947D6F8D3393D35B" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35B", lpString2="A9" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9") returned="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9" [0037.994] LocalFree (hMem=0x679af8) returned 0x0 [0037.994] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="84") returned 2 [0037.994] lstrlenA (lpString="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9") returned 40 [0037.994] lstrlenA (lpString="84") returned 2 [0037.994] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0037.994] lstrcpyA (in: lpString1=0x651a98, lpString2="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9") returned="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9" [0037.994] lstrcatA (in: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35BA9", lpString2="84" | out: lpString1="276A174D5AC7BC833C3A0F947D6F8D3393D35BA984") returned="276A174D5AC7BC833C3A0F947D6F8D3393D35BA984" [0037.994] LocalFree (hMem=0x6519e0) returned 0x0 [0037.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0037.994] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0037.995] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0037.995] LocalFree (hMem=0x651a98) returned 0x0 [0037.995] CoTaskMemFree (pv=0x668738) [0037.995] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Music/zFtK-xWIIJj1/0EtDlBGs/2Y4Bx2NR/fVzHtq5/rjXtcOp3eLNM%20r1l4tq.wav", lpSrch="?") returned 0x0 [0037.995] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Music/zFtK-xWIIJj1/0EtDlBGs/2Y4Bx2NR/fVzHtq5/rjXtcOp3eLNM%20r1l4tq.wav") returned 96 [0038.035] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AF") returned 2 [0038.035] lstrlenA (lpString="") returned 0 [0038.035] lstrlenA (lpString="AF") returned 2 [0038.035] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3c70 [0038.035] lstrcpyA (in: lpString1=0x6a3c70, lpString2="" | out: lpString1="") returned="" [0038.035] lstrcatA (in: lpString1="", lpString2="AF" | out: lpString1="AF") returned="AF" [0038.037] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A9") returned 2 [0038.037] lstrlenA (lpString="AF") returned 2 [0038.037] lstrlenA (lpString="A9") returned 2 [0038.037] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3d00 [0038.037] lstrcpyA (in: lpString1=0x6a3d00, lpString2="AF" | out: lpString1="AF") returned="AF" [0038.037] lstrcatA (in: lpString1="AF", lpString2="A9" | out: lpString1="AFA9") returned="AFA9" [0038.037] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.037] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A0") returned 2 [0038.037] lstrlenA (lpString="AFA9") returned 4 [0038.037] lstrlenA (lpString="A0") returned 2 [0038.037] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3400 [0038.037] lstrcpyA (in: lpString1=0x6a3400, lpString2="AFA9" | out: lpString1="AFA9") returned="AFA9" [0038.037] lstrcatA (in: lpString1="AFA9", lpString2="A0" | out: lpString1="AFA9A0") returned="AFA9A0" [0038.037] LocalFree (hMem=0x6a3d00) returned 0x0 [0038.037] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7B") returned 2 [0038.037] lstrlenA (lpString="AFA9A0") returned 6 [0038.037] lstrlenA (lpString="7B") returned 2 [0038.037] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.037] lstrcpyA (in: lpString1=0x6519e0, lpString2="AFA9A0" | out: lpString1="AFA9A0") returned="AFA9A0" [0038.037] lstrcatA (in: lpString1="AFA9A0", lpString2="7B" | out: lpString1="AFA9A07B") returned="AFA9A07B" [0038.037] LocalFree (hMem=0x6a3400) returned 0x0 [0038.037] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D5") returned 2 [0038.037] lstrlenA (lpString="AFA9A07B") returned 8 [0038.037] lstrlenA (lpString="D5") returned 2 [0038.037] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.037] lstrcpyA (in: lpString1=0x651a78, lpString2="AFA9A07B" | out: lpString1="AFA9A07B") returned="AFA9A07B" [0038.037] lstrcatA (in: lpString1="AFA9A07B", lpString2="D5" | out: lpString1="AFA9A07BD5") returned="AFA9A07BD5" [0038.038] LocalFree (hMem=0x6519e0) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BC") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5") returned 10 [0038.038] lstrlenA (lpString="BC") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.038] lstrcpyA (in: lpString1=0x6519e0, lpString2="AFA9A07BD5" | out: lpString1="AFA9A07BD5") returned="AFA9A07BD5" [0038.038] lstrcatA (in: lpString1="AFA9A07BD5", lpString2="BC" | out: lpString1="AFA9A07BD5BC") returned="AFA9A07BD5BC" [0038.038] LocalFree (hMem=0x651a78) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1E") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5BC") returned 12 [0038.038] lstrlenA (lpString="1E") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.038] lstrcpyA (in: lpString1=0x651a78, lpString2="AFA9A07BD5BC" | out: lpString1="AFA9A07BD5BC") returned="AFA9A07BD5BC" [0038.038] lstrcatA (in: lpString1="AFA9A07BD5BC", lpString2="1E" | out: lpString1="AFA9A07BD5BC1E") returned="AFA9A07BD5BC1E" [0038.038] LocalFree (hMem=0x6519e0) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B5") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5BC1E") returned 14 [0038.038] lstrlenA (lpString="B5") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e9b0 [0038.038] lstrcpyA (in: lpString1=0x66e9b0, lpString2="AFA9A07BD5BC1E" | out: lpString1="AFA9A07BD5BC1E") returned="AFA9A07BD5BC1E" [0038.038] lstrcatA (in: lpString1="AFA9A07BD5BC1E", lpString2="B5" | out: lpString1="AFA9A07BD5BC1EB5") returned="AFA9A07BD5BC1EB5" [0038.038] LocalFree (hMem=0x651a78) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B2") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5BC1EB5") returned 16 [0038.038] lstrlenA (lpString="B2") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e4b0 [0038.038] lstrcpyA (in: lpString1=0x66e4b0, lpString2="AFA9A07BD5BC1EB5" | out: lpString1="AFA9A07BD5BC1EB5") returned="AFA9A07BD5BC1EB5" [0038.038] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5", lpString2="B2" | out: lpString1="AFA9A07BD5BC1EB5B2") returned="AFA9A07BD5BC1EB5B2" [0038.038] LocalFree (hMem=0x66e9b0) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EE") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5BC1EB5B2") returned 18 [0038.038] lstrlenA (lpString="EE") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66df10 [0038.038] lstrcpyA (in: lpString1=0x66df10, lpString2="AFA9A07BD5BC1EB5B2" | out: lpString1="AFA9A07BD5BC1EB5B2") returned="AFA9A07BD5BC1EB5B2" [0038.038] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2", lpString2="EE" | out: lpString1="AFA9A07BD5BC1EB5B2EE") returned="AFA9A07BD5BC1EB5B2EE" [0038.038] LocalFree (hMem=0x66e4b0) returned 0x0 [0038.038] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="87") returned 2 [0038.038] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE") returned 20 [0038.038] lstrlenA (lpString="87") returned 2 [0038.038] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0038.038] lstrcpyA (in: lpString1=0x66e910, lpString2="AFA9A07BD5BC1EB5B2EE" | out: lpString1="AFA9A07BD5BC1EB5B2EE") returned="AFA9A07BD5BC1EB5B2EE" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE", lpString2="87" | out: lpString1="AFA9A07BD5BC1EB5B2EE87") returned="AFA9A07BD5BC1EB5B2EE87" [0038.039] LocalFree (hMem=0x66df10) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6B") returned 2 [0038.039] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE87") returned 22 [0038.039] lstrlenA (lpString="6B") returned 2 [0038.039] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.039] lstrcpyA (in: lpString1=0x66ff98, lpString2="AFA9A07BD5BC1EB5B2EE87" | out: lpString1="AFA9A07BD5BC1EB5B2EE87") returned="AFA9A07BD5BC1EB5B2EE87" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE87", lpString2="6B" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B") returned="AFA9A07BD5BC1EB5B2EE876B" [0038.039] LocalFree (hMem=0x66e910) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="24") returned 2 [0038.039] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B") returned 24 [0038.039] lstrlenA (lpString="24") returned 2 [0038.039] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0038.039] lstrcpyA (in: lpString1=0x670628, lpString2="AFA9A07BD5BC1EB5B2EE876B" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B") returned="AFA9A07BD5BC1EB5B2EE876B" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B", lpString2="24" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B24") returned="AFA9A07BD5BC1EB5B2EE876B24" [0038.039] LocalFree (hMem=0x66ff98) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="64") returned 2 [0038.039] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B24") returned 26 [0038.039] lstrlenA (lpString="64") returned 2 [0038.039] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.039] lstrcpyA (in: lpString1=0x66ff98, lpString2="AFA9A07BD5BC1EB5B2EE876B24" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B24") returned="AFA9A07BD5BC1EB5B2EE876B24" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B24", lpString2="64" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464") returned="AFA9A07BD5BC1EB5B2EE876B2464" [0038.039] LocalFree (hMem=0x670628) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="58") returned 2 [0038.039] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464") returned 28 [0038.039] lstrlenA (lpString="58") returned 2 [0038.039] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6702e0 [0038.039] lstrcpyA (in: lpString1=0x6702e0, lpString2="AFA9A07BD5BC1EB5B2EE876B2464" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464") returned="AFA9A07BD5BC1EB5B2EE876B2464" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464", lpString2="58" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B246458") returned="AFA9A07BD5BC1EB5B2EE876B246458" [0038.039] LocalFree (hMem=0x66ff98) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3D") returned 2 [0038.039] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B246458") returned 30 [0038.039] lstrlenA (lpString="3D") returned 2 [0038.039] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679838 [0038.039] lstrcpyA (in: lpString1=0x679838, lpString2="AFA9A07BD5BC1EB5B2EE876B246458" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B246458") returned="AFA9A07BD5BC1EB5B2EE876B246458" [0038.039] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B246458", lpString2="3D" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583D") returned="AFA9A07BD5BC1EB5B2EE876B2464583D" [0038.039] LocalFree (hMem=0x6702e0) returned 0x0 [0038.039] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0038.042] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464583D") returned 32 [0038.042] lstrlenA (lpString="CB") returned 2 [0038.042] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6790a8 [0038.043] lstrcpyA (in: lpString1=0x6790a8, lpString2="AFA9A07BD5BC1EB5B2EE876B2464583D" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583D") returned="AFA9A07BD5BC1EB5B2EE876B2464583D" [0038.043] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583D", lpString2="CB" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCB") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCB" [0038.043] LocalFree (hMem=0x679838) returned 0x0 [0038.043] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AE") returned 2 [0038.043] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464583DCB") returned 34 [0038.043] lstrlenA (lpString="AE") returned 2 [0038.043] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678d38 [0038.043] lstrcpyA (in: lpString1=0x678d38, lpString2="AFA9A07BD5BC1EB5B2EE876B2464583DCB" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCB") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCB" [0038.043] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCB", lpString2="AE" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE" [0038.043] LocalFree (hMem=0x6790a8) returned 0x0 [0038.043] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A1") returned 2 [0038.043] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE") returned 36 [0038.043] lstrlenA (lpString="A1") returned 2 [0038.043] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678ff8 [0038.043] lstrcpyA (in: lpString1=0x678ff8, lpString2="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE" [0038.043] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAE", lpString2="A1" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1" [0038.043] LocalFree (hMem=0x678d38) returned 0x0 [0038.043] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="81") returned 2 [0038.043] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1") returned 38 [0038.043] lstrlenA (lpString="81") returned 2 [0038.043] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.043] lstrcpyA (in: lpString1=0x6519e0, lpString2="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1" [0038.043] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA1", lpString2="81" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181" [0038.043] LocalFree (hMem=0x678ff8) returned 0x0 [0038.043] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="21") returned 2 [0038.043] lstrlenA (lpString="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181") returned 40 [0038.043] lstrlenA (lpString="21") returned 2 [0038.043] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.043] lstrcpyA (in: lpString1=0x651a98, lpString2="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181" [0038.043] lstrcatA (in: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA181", lpString2="21" | out: lpString1="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA18121") returned="AFA9A07BD5BC1EB5B2EE876B2464583DCBAEA18121" [0038.043] LocalFree (hMem=0x6519e0) returned 0x0 [0038.044] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.044] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.044] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.044] LocalFree (hMem=0x651a98) returned 0x0 [0038.044] CoTaskMemFree (pv=0x69ff98) [0038.044] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Videos/lffS9byWqUCJfGcnz.avi", lpSrch="?") returned 0x0 [0038.044] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Videos/lffS9byWqUCJfGcnz.avi") returned 54 [0038.061] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="34") returned 2 [0038.061] lstrlenA (lpString="") returned 0 [0038.061] lstrlenA (lpString="34") returned 2 [0038.061] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3c70 [0038.061] lstrcpyA (in: lpString1=0x6a3c70, lpString2="" | out: lpString1="") returned="" [0038.061] lstrcatA (in: lpString1="", lpString2="34" | out: lpString1="34") returned="34" [0038.061] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7E") returned 2 [0038.061] lstrlenA (lpString="34") returned 2 [0038.061] lstrlenA (lpString="7E") returned 2 [0038.061] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3880 [0038.061] lstrcpyA (in: lpString1=0x6a3880, lpString2="34" | out: lpString1="34") returned="34" [0038.061] lstrcatA (in: lpString1="34", lpString2="7E" | out: lpString1="347E") returned="347E" [0038.061] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.061] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F2") returned 2 [0038.061] lstrlenA (lpString="347E") returned 4 [0038.061] lstrlenA (lpString="F2") returned 2 [0038.061] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2e60 [0038.061] lstrcpyA (in: lpString1=0x6a2e60, lpString2="347E" | out: lpString1="347E") returned="347E" [0038.061] lstrcatA (in: lpString1="347E", lpString2="F2" | out: lpString1="347EF2") returned="347EF2" [0038.061] LocalFree (hMem=0x6a3880) returned 0x0 [0038.061] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="23") returned 2 [0038.062] lstrlenA (lpString="347EF2") returned 6 [0038.062] lstrlenA (lpString="23") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.062] lstrcpyA (in: lpString1=0x6519e0, lpString2="347EF2" | out: lpString1="347EF2") returned="347EF2" [0038.062] lstrcatA (in: lpString1="347EF2", lpString2="23" | out: lpString1="347EF223") returned="347EF223" [0038.062] LocalFree (hMem=0x6a2e60) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B1") returned 2 [0038.062] lstrlenA (lpString="347EF223") returned 8 [0038.062] lstrlenA (lpString="B1") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.062] lstrcpyA (in: lpString1=0x651a78, lpString2="347EF223" | out: lpString1="347EF223") returned="347EF223" [0038.062] lstrcatA (in: lpString1="347EF223", lpString2="B1" | out: lpString1="347EF223B1") returned="347EF223B1" [0038.062] LocalFree (hMem=0x6519e0) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E5") returned 2 [0038.062] lstrlenA (lpString="347EF223B1") returned 10 [0038.062] lstrlenA (lpString="E5") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.062] lstrcpyA (in: lpString1=0x6519e0, lpString2="347EF223B1" | out: lpString1="347EF223B1") returned="347EF223B1" [0038.062] lstrcatA (in: lpString1="347EF223B1", lpString2="E5" | out: lpString1="347EF223B1E5") returned="347EF223B1E5" [0038.062] LocalFree (hMem=0x651a78) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="91") returned 2 [0038.062] lstrlenA (lpString="347EF223B1E5") returned 12 [0038.062] lstrlenA (lpString="91") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.062] lstrcpyA (in: lpString1=0x651a78, lpString2="347EF223B1E5" | out: lpString1="347EF223B1E5") returned="347EF223B1E5" [0038.062] lstrcatA (in: lpString1="347EF223B1E5", lpString2="91" | out: lpString1="347EF223B1E591") returned="347EF223B1E591" [0038.062] LocalFree (hMem=0x6519e0) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6B") returned 2 [0038.062] lstrlenA (lpString="347EF223B1E591") returned 14 [0038.062] lstrlenA (lpString="6B") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66df10 [0038.062] lstrcpyA (in: lpString1=0x66df10, lpString2="347EF223B1E591" | out: lpString1="347EF223B1E591") returned="347EF223B1E591" [0038.062] lstrcatA (in: lpString1="347EF223B1E591", lpString2="6B" | out: lpString1="347EF223B1E5916B") returned="347EF223B1E5916B" [0038.062] LocalFree (hMem=0x651a78) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0038.062] lstrlenA (lpString="347EF223B1E5916B") returned 16 [0038.062] lstrlenA (lpString="82") returned 2 [0038.062] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dd30 [0038.062] lstrcpyA (in: lpString1=0x66dd30, lpString2="347EF223B1E5916B" | out: lpString1="347EF223B1E5916B") returned="347EF223B1E5916B" [0038.062] lstrcatA (in: lpString1="347EF223B1E5916B", lpString2="82" | out: lpString1="347EF223B1E5916B82") returned="347EF223B1E5916B82" [0038.062] LocalFree (hMem=0x66df10) returned 0x0 [0038.062] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="39") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B82") returned 18 [0038.063] lstrlenA (lpString="39") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0038.063] lstrcpyA (in: lpString1=0x66e0f0, lpString2="347EF223B1E5916B82" | out: lpString1="347EF223B1E5916B82") returned="347EF223B1E5916B82" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B82", lpString2="39" | out: lpString1="347EF223B1E5916B8239") returned="347EF223B1E5916B8239" [0038.063] LocalFree (hMem=0x66dd30) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="EE") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B8239") returned 20 [0038.063] lstrlenA (lpString="EE") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0038.063] lstrcpyA (in: lpString1=0x66e910, lpString2="347EF223B1E5916B8239" | out: lpString1="347EF223B1E5916B8239") returned="347EF223B1E5916B8239" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B8239", lpString2="EE" | out: lpString1="347EF223B1E5916B8239EE") returned="347EF223B1E5916B8239EE" [0038.063] LocalFree (hMem=0x66e0f0) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6D") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B8239EE") returned 22 [0038.063] lstrlenA (lpString="6D") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.063] lstrcpyA (in: lpString1=0x66ff98, lpString2="347EF223B1E5916B8239EE" | out: lpString1="347EF223B1E5916B8239EE") returned="347EF223B1E5916B8239EE" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B8239EE", lpString2="6D" | out: lpString1="347EF223B1E5916B8239EE6D") returned="347EF223B1E5916B8239EE6D" [0038.063] LocalFree (hMem=0x66e910) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C6") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B8239EE6D") returned 24 [0038.063] lstrlenA (lpString="C6") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670778 [0038.063] lstrcpyA (in: lpString1=0x670778, lpString2="347EF223B1E5916B8239EE6D" | out: lpString1="347EF223B1E5916B8239EE6D") returned="347EF223B1E5916B8239EE6D" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6D", lpString2="C6" | out: lpString1="347EF223B1E5916B8239EE6DC6") returned="347EF223B1E5916B8239EE6DC6" [0038.063] LocalFree (hMem=0x66ff98) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BC") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6") returned 26 [0038.063] lstrlenA (lpString="BC") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.063] lstrcpyA (in: lpString1=0x66ff98, lpString2="347EF223B1E5916B8239EE6DC6" | out: lpString1="347EF223B1E5916B8239EE6DC6") returned="347EF223B1E5916B8239EE6DC6" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6", lpString2="BC" | out: lpString1="347EF223B1E5916B8239EE6DC6BC") returned="347EF223B1E5916B8239EE6DC6BC" [0038.063] LocalFree (hMem=0x670778) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0038.063] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC") returned 28 [0038.063] lstrlenA (lpString="42") returned 2 [0038.063] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6708c8 [0038.063] lstrcpyA (in: lpString1=0x6708c8, lpString2="347EF223B1E5916B8239EE6DC6BC" | out: lpString1="347EF223B1E5916B8239EE6DC6BC") returned="347EF223B1E5916B8239EE6DC6BC" [0038.063] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC", lpString2="42" | out: lpString1="347EF223B1E5916B8239EE6DC6BC42") returned="347EF223B1E5916B8239EE6DC6BC42" [0038.063] LocalFree (hMem=0x66ff98) returned 0x0 [0038.063] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC42") returned 30 [0038.064] lstrlenA (lpString="97") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679208 [0038.064] lstrcpyA (in: lpString1=0x679208, lpString2="347EF223B1E5916B8239EE6DC6BC42" | out: lpString1="347EF223B1E5916B8239EE6DC6BC42") returned="347EF223B1E5916B8239EE6DC6BC42" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC42", lpString2="97" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297") returned="347EF223B1E5916B8239EE6DC6BC4297" [0038.064] LocalFree (hMem=0x6708c8) returned 0x0 [0038.064] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CC") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC4297") returned 32 [0038.064] lstrlenA (lpString="CC") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679a48 [0038.064] lstrcpyA (in: lpString1=0x679a48, lpString2="347EF223B1E5916B8239EE6DC6BC4297" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297") returned="347EF223B1E5916B8239EE6DC6BC4297" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC4297", lpString2="CC" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC") returned="347EF223B1E5916B8239EE6DC6BC4297CC" [0038.064] LocalFree (hMem=0x679208) returned 0x0 [0038.064] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC4297CC") returned 34 [0038.064] lstrlenA (lpString="82") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6792b8 [0038.064] lstrcpyA (in: lpString1=0x6792b8, lpString2="347EF223B1E5916B8239EE6DC6BC4297CC" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC") returned="347EF223B1E5916B8239EE6DC6BC4297CC" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC", lpString2="82" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82") returned="347EF223B1E5916B8239EE6DC6BC4297CC82" [0038.064] LocalFree (hMem=0x679a48) returned 0x0 [0038.064] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E3") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC4297CC82") returned 36 [0038.064] lstrlenA (lpString="E3") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679578 [0038.064] lstrcpyA (in: lpString1=0x679578, lpString2="347EF223B1E5916B8239EE6DC6BC4297CC82" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82") returned="347EF223B1E5916B8239EE6DC6BC4297CC82" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82", lpString2="E3" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E3") returned="347EF223B1E5916B8239EE6DC6BC4297CC82E3" [0038.064] LocalFree (hMem=0x6792b8) returned 0x0 [0038.064] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1B") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC4297CC82E3") returned 38 [0038.064] lstrlenA (lpString="1B") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.064] lstrcpyA (in: lpString1=0x6519e0, lpString2="347EF223B1E5916B8239EE6DC6BC4297CC82E3" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E3") returned="347EF223B1E5916B8239EE6DC6BC4297CC82E3" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E3", lpString2="1B" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E31B") returned="347EF223B1E5916B8239EE6DC6BC4297CC82E31B" [0038.064] LocalFree (hMem=0x679578) returned 0x0 [0038.064] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="16") returned 2 [0038.064] lstrlenA (lpString="347EF223B1E5916B8239EE6DC6BC4297CC82E31B") returned 40 [0038.064] lstrlenA (lpString="16") returned 2 [0038.064] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.064] lstrcpyA (in: lpString1=0x651a98, lpString2="347EF223B1E5916B8239EE6DC6BC4297CC82E31B" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E31B") returned="347EF223B1E5916B8239EE6DC6BC4297CC82E31B" [0038.064] lstrcatA (in: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E31B", lpString2="16" | out: lpString1="347EF223B1E5916B8239EE6DC6BC4297CC82E31B16") returned="347EF223B1E5916B8239EE6DC6BC4297CC82E31B16" [0038.064] LocalFree (hMem=0x6519e0) returned 0x0 [0038.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.065] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.065] LocalFree (hMem=0x651a98) returned 0x0 [0038.065] CoTaskMemFree (pv=0x662528) [0038.065] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt/G2ZmW0M01/6L4WwvP8KVo2A5dBSNfO.pps", lpSrch="?") returned 0x0 [0038.065] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt/G2ZmW0M01/6L4WwvP8KVo2A5dBSNfO.pps") returned 80 [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="81") returned 2 [0038.113] lstrlenA (lpString="") returned 0 [0038.113] lstrlenA (lpString="81") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3640 [0038.113] lstrcpyA (in: lpString1=0x6a3640, lpString2="" | out: lpString1="") returned="" [0038.113] lstrcatA (in: lpString1="", lpString2="81" | out: lpString1="81") returned="81" [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="02") returned 2 [0038.113] lstrlenA (lpString="81") returned 2 [0038.113] lstrlenA (lpString="02") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a39a0 [0038.113] lstrcpyA (in: lpString1=0x6a39a0, lpString2="81" | out: lpString1="81") returned="81" [0038.113] lstrcatA (in: lpString1="81", lpString2="02" | out: lpString1="8102") returned="8102" [0038.113] LocalFree (hMem=0x6a3640) returned 0x0 [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8E") returned 2 [0038.113] lstrlenA (lpString="8102") returned 4 [0038.113] lstrlenA (lpString="8E") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3c70 [0038.113] lstrcpyA (in: lpString1=0x6a3c70, lpString2="8102" | out: lpString1="8102") returned="8102" [0038.113] lstrcatA (in: lpString1="8102", lpString2="8E" | out: lpString1="81028E") returned="81028E" [0038.113] LocalFree (hMem=0x6a39a0) returned 0x0 [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B9") returned 2 [0038.113] lstrlenA (lpString="81028E") returned 6 [0038.113] lstrlenA (lpString="B9") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.113] lstrcpyA (in: lpString1=0x6519e0, lpString2="81028E" | out: lpString1="81028E") returned="81028E" [0038.113] lstrcatA (in: lpString1="81028E", lpString2="B9" | out: lpString1="81028EB9") returned="81028EB9" [0038.113] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0A") returned 2 [0038.113] lstrlenA (lpString="81028EB9") returned 8 [0038.113] lstrlenA (lpString="0A") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.113] lstrcpyA (in: lpString1=0x651a78, lpString2="81028EB9" | out: lpString1="81028EB9") returned="81028EB9" [0038.113] lstrcatA (in: lpString1="81028EB9", lpString2="0A" | out: lpString1="81028EB90A") returned="81028EB90A" [0038.113] LocalFree (hMem=0x6519e0) returned 0x0 [0038.113] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E4") returned 2 [0038.113] lstrlenA (lpString="81028EB90A") returned 10 [0038.113] lstrlenA (lpString="E4") returned 2 [0038.113] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.114] lstrcpyA (in: lpString1=0x6519e0, lpString2="81028EB90A" | out: lpString1="81028EB90A") returned="81028EB90A" [0038.114] lstrcatA (in: lpString1="81028EB90A", lpString2="E4" | out: lpString1="81028EB90AE4") returned="81028EB90AE4" [0038.114] LocalFree (hMem=0x651a78) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="41") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE4") returned 12 [0038.114] lstrlenA (lpString="41") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.114] lstrcpyA (in: lpString1=0x651a78, lpString2="81028EB90AE4" | out: lpString1="81028EB90AE4") returned="81028EB90AE4" [0038.114] lstrcatA (in: lpString1="81028EB90AE4", lpString2="41" | out: lpString1="81028EB90AE441") returned="81028EB90AE441" [0038.114] LocalFree (hMem=0x6519e0) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="66") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE441") returned 14 [0038.114] lstrlenA (lpString="66") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66dbf0 [0038.114] lstrcpyA (in: lpString1=0x66dbf0, lpString2="81028EB90AE441" | out: lpString1="81028EB90AE441") returned="81028EB90AE441" [0038.114] lstrcatA (in: lpString1="81028EB90AE441", lpString2="66" | out: lpString1="81028EB90AE44166") returned="81028EB90AE44166" [0038.114] LocalFree (hMem=0x651a78) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C0") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE44166") returned 16 [0038.114] lstrlenA (lpString="C0") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e550 [0038.114] lstrcpyA (in: lpString1=0x66e550, lpString2="81028EB90AE44166" | out: lpString1="81028EB90AE44166") returned="81028EB90AE44166" [0038.114] lstrcatA (in: lpString1="81028EB90AE44166", lpString2="C0" | out: lpString1="81028EB90AE44166C0") returned="81028EB90AE44166C0" [0038.114] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2E") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE44166C0") returned 18 [0038.114] lstrlenA (lpString="2E") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dd30 [0038.114] lstrcpyA (in: lpString1=0x66dd30, lpString2="81028EB90AE44166C0" | out: lpString1="81028EB90AE44166C0") returned="81028EB90AE44166C0" [0038.114] lstrcatA (in: lpString1="81028EB90AE44166C0", lpString2="2E" | out: lpString1="81028EB90AE44166C02E") returned="81028EB90AE44166C02E" [0038.114] LocalFree (hMem=0x66e550) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE44166C02E") returned 20 [0038.114] lstrlenA (lpString="D4") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0038.114] lstrcpyA (in: lpString1=0x66e2d0, lpString2="81028EB90AE44166C02E" | out: lpString1="81028EB90AE44166C02E") returned="81028EB90AE44166C02E" [0038.114] lstrcatA (in: lpString1="81028EB90AE44166C02E", lpString2="D4" | out: lpString1="81028EB90AE44166C02ED4") returned="81028EB90AE44166C02ED4" [0038.114] LocalFree (hMem=0x66dd30) returned 0x0 [0038.114] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0038.114] lstrlenA (lpString="81028EB90AE44166C02ED4") returned 22 [0038.114] lstrlenA (lpString="89") returned 2 [0038.114] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670628 [0038.114] lstrcpyA (in: lpString1=0x670628, lpString2="81028EB90AE44166C02ED4" | out: lpString1="81028EB90AE44166C02ED4") returned="81028EB90AE44166C02ED4" [0038.114] lstrcatA (in: lpString1="81028EB90AE44166C02ED4", lpString2="89" | out: lpString1="81028EB90AE44166C02ED489") returned="81028EB90AE44166C02ED489" [0038.115] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="47") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED489") returned 24 [0038.115] lstrlenA (lpString="47") returned 2 [0038.115] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0038.115] lstrcpyA (in: lpString1=0x66ff98, lpString2="81028EB90AE44166C02ED489" | out: lpString1="81028EB90AE44166C02ED489") returned="81028EB90AE44166C02ED489" [0038.115] lstrcatA (in: lpString1="81028EB90AE44166C02ED489", lpString2="47" | out: lpString1="81028EB90AE44166C02ED48947") returned="81028EB90AE44166C02ED48947" [0038.115] LocalFree (hMem=0x670628) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F8") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED48947") returned 26 [0038.115] lstrlenA (lpString="F8") returned 2 [0038.115] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670040 [0038.115] lstrcpyA (in: lpString1=0x670040, lpString2="81028EB90AE44166C02ED48947" | out: lpString1="81028EB90AE44166C02ED48947") returned="81028EB90AE44166C02ED48947" [0038.115] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947", lpString2="F8" | out: lpString1="81028EB90AE44166C02ED48947F8") returned="81028EB90AE44166C02ED48947F8" [0038.115] LocalFree (hMem=0x66ff98) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C4") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED48947F8") returned 28 [0038.115] lstrlenA (lpString="C4") returned 2 [0038.115] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0038.115] lstrcpyA (in: lpString1=0x66ff98, lpString2="81028EB90AE44166C02ED48947F8" | out: lpString1="81028EB90AE44166C02ED48947F8") returned="81028EB90AE44166C02ED48947F8" [0038.115] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8", lpString2="C4" | out: lpString1="81028EB90AE44166C02ED48947F8C4") returned="81028EB90AE44166C02ED48947F8C4" [0038.115] LocalFree (hMem=0x670040) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="48") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C4") returned 30 [0038.115] lstrlenA (lpString="48") returned 2 [0038.115] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679628 [0038.115] lstrcpyA (in: lpString1=0x679628, lpString2="81028EB90AE44166C02ED48947F8C4" | out: lpString1="81028EB90AE44166C02ED48947F8C4") returned="81028EB90AE44166C02ED48947F8C4" [0038.115] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C4", lpString2="48" | out: lpString1="81028EB90AE44166C02ED48947F8C448") returned="81028EB90AE44166C02ED48947F8C448" [0038.115] LocalFree (hMem=0x66ff98) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="46") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C448") returned 32 [0038.115] lstrlenA (lpString="46") returned 2 [0038.115] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6798e8 [0038.115] lstrcpyA (in: lpString1=0x6798e8, lpString2="81028EB90AE44166C02ED48947F8C448" | out: lpString1="81028EB90AE44166C02ED48947F8C448") returned="81028EB90AE44166C02ED48947F8C448" [0038.115] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C448", lpString2="46" | out: lpString1="81028EB90AE44166C02ED48947F8C44846") returned="81028EB90AE44166C02ED48947F8C44846" [0038.115] LocalFree (hMem=0x679628) returned 0x0 [0038.115] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AE") returned 2 [0038.115] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C44846") returned 34 [0038.115] lstrlenA (lpString="AE") returned 2 [0038.116] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679c58 [0038.116] lstrcpyA (in: lpString1=0x679c58, lpString2="81028EB90AE44166C02ED48947F8C44846" | out: lpString1="81028EB90AE44166C02ED48947F8C44846") returned="81028EB90AE44166C02ED48947F8C44846" [0038.116] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C44846", lpString2="AE" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE") returned="81028EB90AE44166C02ED48947F8C44846AE" [0038.116] LocalFree (hMem=0x6798e8) returned 0x0 [0038.116] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="32") returned 2 [0038.116] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C44846AE") returned 36 [0038.116] lstrlenA (lpString="32") returned 2 [0038.116] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6796d8 [0038.116] lstrcpyA (in: lpString1=0x6796d8, lpString2="81028EB90AE44166C02ED48947F8C44846AE" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE") returned="81028EB90AE44166C02ED48947F8C44846AE" [0038.116] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C44846AE", lpString2="32" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE32") returned="81028EB90AE44166C02ED48947F8C44846AE32" [0038.116] LocalFree (hMem=0x679c58) returned 0x0 [0038.116] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0038.116] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C44846AE32") returned 38 [0038.116] lstrlenA (lpString="18") returned 2 [0038.116] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.116] lstrcpyA (in: lpString1=0x6519e0, lpString2="81028EB90AE44166C02ED48947F8C44846AE32" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE32") returned="81028EB90AE44166C02ED48947F8C44846AE32" [0038.116] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C44846AE32", lpString2="18" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE3218") returned="81028EB90AE44166C02ED48947F8C44846AE3218" [0038.116] LocalFree (hMem=0x6796d8) returned 0x0 [0038.116] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="33") returned 2 [0038.116] lstrlenA (lpString="81028EB90AE44166C02ED48947F8C44846AE3218") returned 40 [0038.116] lstrlenA (lpString="33") returned 2 [0038.116] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.116] lstrcpyA (in: lpString1=0x651a98, lpString2="81028EB90AE44166C02ED48947F8C44846AE3218" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE3218") returned="81028EB90AE44166C02ED48947F8C44846AE3218" [0038.116] lstrcatA (in: lpString1="81028EB90AE44166C02ED48947F8C44846AE3218", lpString2="33" | out: lpString1="81028EB90AE44166C02ED48947F8C44846AE321833") returned="81028EB90AE44166C02ED48947F8C44846AE321833" [0038.116] LocalFree (hMem=0x6519e0) returned 0x0 [0038.116] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.116] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.116] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.116] LocalFree (hMem=0x651a98) returned 0x0 [0038.116] CoTaskMemFree (pv=0x679af8) [0038.116] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Music/rrGBsz.wav", lpSrch="?") returned 0x0 [0038.116] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Music/rrGBsz.wav") returned 42 [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E9") returned 2 [0038.136] lstrlenA (lpString="") returned 0 [0038.136] lstrlenA (lpString="E9") returned 2 [0038.136] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a31c0 [0038.136] lstrcpyA (in: lpString1=0x6a31c0, lpString2="" | out: lpString1="") returned="" [0038.136] lstrcatA (in: lpString1="", lpString2="E9" | out: lpString1="E9") returned="E9" [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0038.136] lstrlenA (lpString="E9") returned 2 [0038.136] lstrlenA (lpString="97") returned 2 [0038.136] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3640 [0038.136] lstrcpyA (in: lpString1=0x6a3640, lpString2="E9" | out: lpString1="E9") returned="E9" [0038.136] lstrcatA (in: lpString1="E9", lpString2="97" | out: lpString1="E997") returned="E997" [0038.136] LocalFree (hMem=0x6a31c0) returned 0x0 [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4F") returned 2 [0038.136] lstrlenA (lpString="E997") returned 4 [0038.136] lstrlenA (lpString="4F") returned 2 [0038.136] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3c70 [0038.136] lstrcpyA (in: lpString1=0x6a3c70, lpString2="E997" | out: lpString1="E997") returned="E997" [0038.136] lstrcatA (in: lpString1="E997", lpString2="4F" | out: lpString1="E9974F") returned="E9974F" [0038.136] LocalFree (hMem=0x6a3640) returned 0x0 [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="35") returned 2 [0038.136] lstrlenA (lpString="E9974F") returned 6 [0038.136] lstrlenA (lpString="35") returned 2 [0038.136] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.136] lstrcpyA (in: lpString1=0x6519e0, lpString2="E9974F" | out: lpString1="E9974F") returned="E9974F" [0038.136] lstrcatA (in: lpString1="E9974F", lpString2="35" | out: lpString1="E9974F35") returned="E9974F35" [0038.136] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="91") returned 2 [0038.136] lstrlenA (lpString="E9974F35") returned 8 [0038.136] lstrlenA (lpString="91") returned 2 [0038.136] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.136] lstrcpyA (in: lpString1=0x651a78, lpString2="E9974F35" | out: lpString1="E9974F35") returned="E9974F35" [0038.136] lstrcatA (in: lpString1="E9974F35", lpString2="91" | out: lpString1="E9974F3591") returned="E9974F3591" [0038.136] LocalFree (hMem=0x6519e0) returned 0x0 [0038.136] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7D") returned 2 [0038.137] lstrlenA (lpString="E9974F3591") returned 10 [0038.137] lstrlenA (lpString="7D") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.137] lstrcpyA (in: lpString1=0x6519e0, lpString2="E9974F3591" | out: lpString1="E9974F3591") returned="E9974F3591" [0038.137] lstrcatA (in: lpString1="E9974F3591", lpString2="7D" | out: lpString1="E9974F35917D") returned="E9974F35917D" [0038.137] LocalFree (hMem=0x651a78) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A7") returned 2 [0038.137] lstrlenA (lpString="E9974F35917D") returned 12 [0038.137] lstrlenA (lpString="A7") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.137] lstrcpyA (in: lpString1=0x651a78, lpString2="E9974F35917D" | out: lpString1="E9974F35917D") returned="E9974F35917D" [0038.137] lstrcatA (in: lpString1="E9974F35917D", lpString2="A7" | out: lpString1="E9974F35917DA7") returned="E9974F35917DA7" [0038.137] LocalFree (hMem=0x6519e0) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="61") returned 2 [0038.137] lstrlenA (lpString="E9974F35917DA7") returned 14 [0038.137] lstrlenA (lpString="61") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e910 [0038.137] lstrcpyA (in: lpString1=0x66e910, lpString2="E9974F35917DA7" | out: lpString1="E9974F35917DA7") returned="E9974F35917DA7" [0038.137] lstrcatA (in: lpString1="E9974F35917DA7", lpString2="61" | out: lpString1="E9974F35917DA761") returned="E9974F35917DA761" [0038.137] LocalFree (hMem=0x651a78) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="28") returned 2 [0038.137] lstrlenA (lpString="E9974F35917DA761") returned 16 [0038.137] lstrlenA (lpString="28") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66dbf0 [0038.137] lstrcpyA (in: lpString1=0x66dbf0, lpString2="E9974F35917DA761" | out: lpString1="E9974F35917DA761") returned="E9974F35917DA761" [0038.137] lstrcatA (in: lpString1="E9974F35917DA761", lpString2="28" | out: lpString1="E9974F35917DA76128") returned="E9974F35917DA76128" [0038.137] LocalFree (hMem=0x66e910) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="41") returned 2 [0038.137] lstrlenA (lpString="E9974F35917DA76128") returned 18 [0038.137] lstrlenA (lpString="41") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66ddd0 [0038.137] lstrcpyA (in: lpString1=0x66ddd0, lpString2="E9974F35917DA76128" | out: lpString1="E9974F35917DA76128") returned="E9974F35917DA76128" [0038.137] lstrcatA (in: lpString1="E9974F35917DA76128", lpString2="41" | out: lpString1="E9974F35917DA7612841") returned="E9974F35917DA7612841" [0038.137] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="32") returned 2 [0038.137] lstrlenA (lpString="E9974F35917DA7612841") returned 20 [0038.137] lstrlenA (lpString="32") returned 2 [0038.137] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e550 [0038.137] lstrcpyA (in: lpString1=0x66e550, lpString2="E9974F35917DA7612841" | out: lpString1="E9974F35917DA7612841") returned="E9974F35917DA7612841" [0038.137] lstrcatA (in: lpString1="E9974F35917DA7612841", lpString2="32" | out: lpString1="E9974F35917DA761284132") returned="E9974F35917DA761284132" [0038.137] LocalFree (hMem=0x66ddd0) returned 0x0 [0038.137] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="47") returned 2 [0038.137] lstrlenA (lpString="E9974F35917DA761284132") returned 22 [0038.137] lstrlenA (lpString="47") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6702e0 [0038.138] lstrcpyA (in: lpString1=0x6702e0, lpString2="E9974F35917DA761284132" | out: lpString1="E9974F35917DA761284132") returned="E9974F35917DA761284132" [0038.138] lstrcatA (in: lpString1="E9974F35917DA761284132", lpString2="47" | out: lpString1="E9974F35917DA76128413247") returned="E9974F35917DA76128413247" [0038.138] LocalFree (hMem=0x66e550) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BD") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247") returned 24 [0038.138] lstrlenA (lpString="BD") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670388 [0038.138] lstrcpyA (in: lpString1=0x670388, lpString2="E9974F35917DA76128413247" | out: lpString1="E9974F35917DA76128413247") returned="E9974F35917DA76128413247" [0038.138] lstrcatA (in: lpString1="E9974F35917DA76128413247", lpString2="BD" | out: lpString1="E9974F35917DA76128413247BD") returned="E9974F35917DA76128413247BD" [0038.138] LocalFree (hMem=0x6702e0) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="67") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247BD") returned 26 [0038.138] lstrlenA (lpString="67") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.138] lstrcpyA (in: lpString1=0x66ff98, lpString2="E9974F35917DA76128413247BD" | out: lpString1="E9974F35917DA76128413247BD") returned="E9974F35917DA76128413247BD" [0038.138] lstrcatA (in: lpString1="E9974F35917DA76128413247BD", lpString2="67" | out: lpString1="E9974F35917DA76128413247BD67") returned="E9974F35917DA76128413247BD67" [0038.138] LocalFree (hMem=0x670388) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247BD67") returned 28 [0038.138] lstrlenA (lpString="93") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0038.138] lstrcpyA (in: lpString1=0x670040, lpString2="E9974F35917DA76128413247BD67" | out: lpString1="E9974F35917DA76128413247BD67") returned="E9974F35917DA76128413247BD67" [0038.138] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67", lpString2="93" | out: lpString1="E9974F35917DA76128413247BD6793") returned="E9974F35917DA76128413247BD6793" [0038.138] LocalFree (hMem=0x66ff98) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8F") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247BD6793") returned 30 [0038.138] lstrlenA (lpString="8F") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6798e8 [0038.138] lstrcpyA (in: lpString1=0x6798e8, lpString2="E9974F35917DA76128413247BD6793" | out: lpString1="E9974F35917DA76128413247BD6793") returned="E9974F35917DA76128413247BD6793" [0038.138] lstrcatA (in: lpString1="E9974F35917DA76128413247BD6793", lpString2="8F" | out: lpString1="E9974F35917DA76128413247BD67938F") returned="E9974F35917DA76128413247BD67938F" [0038.138] LocalFree (hMem=0x670040) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F3") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247BD67938F") returned 32 [0038.138] lstrlenA (lpString="F3") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678de8 [0038.138] lstrcpyA (in: lpString1=0x678de8, lpString2="E9974F35917DA76128413247BD67938F" | out: lpString1="E9974F35917DA76128413247BD67938F") returned="E9974F35917DA76128413247BD67938F" [0038.138] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67938F", lpString2="F3" | out: lpString1="E9974F35917DA76128413247BD67938FF3") returned="E9974F35917DA76128413247BD67938FF3" [0038.138] LocalFree (hMem=0x6798e8) returned 0x0 [0038.138] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="77") returned 2 [0038.138] lstrlenA (lpString="E9974F35917DA76128413247BD67938FF3") returned 34 [0038.138] lstrlenA (lpString="77") returned 2 [0038.138] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6794c8 [0038.138] lstrcpyA (in: lpString1=0x6794c8, lpString2="E9974F35917DA76128413247BD67938FF3" | out: lpString1="E9974F35917DA76128413247BD67938FF3") returned="E9974F35917DA76128413247BD67938FF3" [0038.139] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67938FF3", lpString2="77" | out: lpString1="E9974F35917DA76128413247BD67938FF377") returned="E9974F35917DA76128413247BD67938FF377" [0038.139] LocalFree (hMem=0x678de8) returned 0x0 [0038.139] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="54") returned 2 [0038.139] lstrlenA (lpString="E9974F35917DA76128413247BD67938FF377") returned 36 [0038.139] lstrlenA (lpString="54") returned 2 [0038.139] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6790a8 [0038.139] lstrcpyA (in: lpString1=0x6790a8, lpString2="E9974F35917DA76128413247BD67938FF377" | out: lpString1="E9974F35917DA76128413247BD67938FF377") returned="E9974F35917DA76128413247BD67938FF377" [0038.139] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67938FF377", lpString2="54" | out: lpString1="E9974F35917DA76128413247BD67938FF37754") returned="E9974F35917DA76128413247BD67938FF37754" [0038.139] LocalFree (hMem=0x6794c8) returned 0x0 [0038.139] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9E") returned 2 [0038.139] lstrlenA (lpString="E9974F35917DA76128413247BD67938FF37754") returned 38 [0038.139] lstrlenA (lpString="9E") returned 2 [0038.139] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.139] lstrcpyA (in: lpString1=0x6519e0, lpString2="E9974F35917DA76128413247BD67938FF37754" | out: lpString1="E9974F35917DA76128413247BD67938FF37754") returned="E9974F35917DA76128413247BD67938FF37754" [0038.139] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67938FF37754", lpString2="9E" | out: lpString1="E9974F35917DA76128413247BD67938FF377549E") returned="E9974F35917DA76128413247BD67938FF377549E" [0038.139] LocalFree (hMem=0x6790a8) returned 0x0 [0038.139] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9E") returned 2 [0038.139] lstrlenA (lpString="E9974F35917DA76128413247BD67938FF377549E") returned 40 [0038.139] lstrlenA (lpString="9E") returned 2 [0038.139] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.139] lstrcpyA (in: lpString1=0x651a98, lpString2="E9974F35917DA76128413247BD67938FF377549E" | out: lpString1="E9974F35917DA76128413247BD67938FF377549E") returned="E9974F35917DA76128413247BD67938FF377549E" [0038.139] lstrcatA (in: lpString1="E9974F35917DA76128413247BD67938FF377549E", lpString2="9E" | out: lpString1="E9974F35917DA76128413247BD67938FF377549E9E") returned="E9974F35917DA76128413247BD67938FF377549E9E" [0038.139] LocalFree (hMem=0x6519e0) returned 0x0 [0038.139] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.139] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.139] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.139] LocalFree (hMem=0x651a98) returned 0x0 [0038.139] CoTaskMemFree (pv=0x6670f0) [0038.139] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/Qcx%20ZU.flv", lpSrch="?") returned 0x0 [0038.139] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/Qcx%20ZU.flv") returned 54 [0038.156] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="71") returned 2 [0038.156] lstrlenA (lpString="") returned 0 [0038.156] lstrlenA (lpString="71") returned 2 [0038.156] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a35b0 [0038.156] lstrcpyA (in: lpString1=0x6a35b0, lpString2="" | out: lpString1="") returned="" [0038.156] lstrcatA (in: lpString1="", lpString2="71" | out: lpString1="71") returned="71" [0038.156] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="67") returned 2 [0038.156] lstrlenA (lpString="71") returned 2 [0038.156] lstrlenA (lpString="67") returned 2 [0038.156] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3d00 [0038.156] lstrcpyA (in: lpString1=0x6a3d00, lpString2="71" | out: lpString1="71") returned="71" [0038.156] lstrcatA (in: lpString1="71", lpString2="67" | out: lpString1="7167") returned="7167" [0038.156] LocalFree (hMem=0x6a35b0) returned 0x0 [0038.156] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="23") returned 2 [0038.156] lstrlenA (lpString="7167") returned 4 [0038.156] lstrlenA (lpString="23") returned 2 [0038.156] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2d40 [0038.157] lstrcpyA (in: lpString1=0x6a2d40, lpString2="7167" | out: lpString1="7167") returned="7167" [0038.157] lstrcatA (in: lpString1="7167", lpString2="23" | out: lpString1="716723") returned="716723" [0038.157] LocalFree (hMem=0x6a3d00) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0038.157] lstrlenA (lpString="716723") returned 6 [0038.157] lstrlenA (lpString="D4") returned 2 [0038.157] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.157] lstrcpyA (in: lpString1=0x6519e0, lpString2="716723" | out: lpString1="716723") returned="716723" [0038.157] lstrcatA (in: lpString1="716723", lpString2="D4" | out: lpString1="716723D4") returned="716723D4" [0038.157] LocalFree (hMem=0x6a2d40) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="06") returned 2 [0038.157] lstrlenA (lpString="716723D4") returned 8 [0038.157] lstrlenA (lpString="06") returned 2 [0038.157] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.157] lstrcpyA (in: lpString1=0x651a78, lpString2="716723D4" | out: lpString1="716723D4") returned="716723D4" [0038.157] lstrcatA (in: lpString1="716723D4", lpString2="06" | out: lpString1="716723D406") returned="716723D406" [0038.157] LocalFree (hMem=0x6519e0) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="22") returned 2 [0038.157] lstrlenA (lpString="716723D406") returned 10 [0038.157] lstrlenA (lpString="22") returned 2 [0038.157] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.157] lstrcpyA (in: lpString1=0x6519e0, lpString2="716723D406" | out: lpString1="716723D406") returned="716723D406" [0038.157] lstrcatA (in: lpString1="716723D406", lpString2="22" | out: lpString1="716723D40622") returned="716723D40622" [0038.157] LocalFree (hMem=0x651a78) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="44") returned 2 [0038.157] lstrlenA (lpString="716723D40622") returned 12 [0038.157] lstrlenA (lpString="44") returned 2 [0038.157] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.157] lstrcpyA (in: lpString1=0x651a78, lpString2="716723D40622" | out: lpString1="716723D40622") returned="716723D40622" [0038.157] lstrcatA (in: lpString1="716723D40622", lpString2="44" | out: lpString1="716723D4062244") returned="716723D4062244" [0038.157] LocalFree (hMem=0x6519e0) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E6") returned 2 [0038.157] lstrlenA (lpString="716723D4062244") returned 14 [0038.157] lstrlenA (lpString="E6") returned 2 [0038.157] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e0f0 [0038.157] lstrcpyA (in: lpString1=0x66e0f0, lpString2="716723D4062244" | out: lpString1="716723D4062244") returned="716723D4062244" [0038.157] lstrcatA (in: lpString1="716723D4062244", lpString2="E6" | out: lpString1="716723D4062244E6") returned="716723D4062244E6" [0038.157] LocalFree (hMem=0x651a78) returned 0x0 [0038.157] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="77") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E6") returned 16 [0038.158] lstrlenA (lpString="77") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e910 [0038.158] lstrcpyA (in: lpString1=0x66e910, lpString2="716723D4062244E6" | out: lpString1="716723D4062244E6") returned="716723D4062244E6" [0038.158] lstrcatA (in: lpString1="716723D4062244E6", lpString2="77" | out: lpString1="716723D4062244E677") returned="716723D4062244E677" [0038.158] LocalFree (hMem=0x66e0f0) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D0") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677") returned 18 [0038.158] lstrlenA (lpString="D0") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0038.158] lstrcpyA (in: lpString1=0x66e0f0, lpString2="716723D4062244E677" | out: lpString1="716723D4062244E677") returned="716723D4062244E677" [0038.158] lstrcatA (in: lpString1="716723D4062244E677", lpString2="D0" | out: lpString1="716723D4062244E677D0") returned="716723D4062244E677D0" [0038.158] LocalFree (hMem=0x66e910) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677D0") returned 20 [0038.158] lstrlenA (lpString="C7") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0038.158] lstrcpyA (in: lpString1=0x66e2d0, lpString2="716723D4062244E677D0" | out: lpString1="716723D4062244E677D0") returned="716723D4062244E677D0" [0038.158] lstrcatA (in: lpString1="716723D4062244E677D0", lpString2="C7" | out: lpString1="716723D4062244E677D0C7") returned="716723D4062244E677D0C7" [0038.158] LocalFree (hMem=0x66e0f0) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="ED") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677D0C7") returned 22 [0038.158] lstrlenA (lpString="ED") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670b68 [0038.158] lstrcpyA (in: lpString1=0x670b68, lpString2="716723D4062244E677D0C7" | out: lpString1="716723D4062244E677D0C7") returned="716723D4062244E677D0C7" [0038.158] lstrcatA (in: lpString1="716723D4062244E677D0C7", lpString2="ED" | out: lpString1="716723D4062244E677D0C7ED") returned="716723D4062244E677D0C7ED" [0038.158] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C4") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677D0C7ED") returned 24 [0038.158] lstrlenA (lpString="C4") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66ff98 [0038.158] lstrcpyA (in: lpString1=0x66ff98, lpString2="716723D4062244E677D0C7ED" | out: lpString1="716723D4062244E677D0C7ED") returned="716723D4062244E677D0C7ED" [0038.158] lstrcatA (in: lpString1="716723D4062244E677D0C7ED", lpString2="C4" | out: lpString1="716723D4062244E677D0C7EDC4") returned="716723D4062244E677D0C7EDC4" [0038.158] LocalFree (hMem=0x670b68) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="56") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677D0C7EDC4") returned 26 [0038.158] lstrlenA (lpString="56") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670ac0 [0038.158] lstrcpyA (in: lpString1=0x670ac0, lpString2="716723D4062244E677D0C7EDC4" | out: lpString1="716723D4062244E677D0C7EDC4") returned="716723D4062244E677D0C7EDC4" [0038.158] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC4", lpString2="56" | out: lpString1="716723D4062244E677D0C7EDC456") returned="716723D4062244E677D0C7EDC456" [0038.158] LocalFree (hMem=0x66ff98) returned 0x0 [0038.158] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D3") returned 2 [0038.158] lstrlenA (lpString="716723D4062244E677D0C7EDC456") returned 28 [0038.158] lstrlenA (lpString="D3") returned 2 [0038.158] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0038.159] lstrcpyA (in: lpString1=0x66ff98, lpString2="716723D4062244E677D0C7EDC456" | out: lpString1="716723D4062244E677D0C7EDC456") returned="716723D4062244E677D0C7EDC456" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456", lpString2="D3" | out: lpString1="716723D4062244E677D0C7EDC456D3") returned="716723D4062244E677D0C7EDC456D3" [0038.159] LocalFree (hMem=0x670ac0) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3B") returned 2 [0038.159] lstrlenA (lpString="716723D4062244E677D0C7EDC456D3") returned 30 [0038.159] lstrlenA (lpString="3B") returned 2 [0038.159] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6798e8 [0038.159] lstrcpyA (in: lpString1=0x6798e8, lpString2="716723D4062244E677D0C7EDC456D3" | out: lpString1="716723D4062244E677D0C7EDC456D3") returned="716723D4062244E677D0C7EDC456D3" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D3", lpString2="3B" | out: lpString1="716723D4062244E677D0C7EDC456D33B") returned="716723D4062244E677D0C7EDC456D33B" [0038.159] LocalFree (hMem=0x66ff98) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C8") returned 2 [0038.159] lstrlenA (lpString="716723D4062244E677D0C7EDC456D33B") returned 32 [0038.159] lstrlenA (lpString="C8") returned 2 [0038.159] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679af8 [0038.159] lstrcpyA (in: lpString1=0x679af8, lpString2="716723D4062244E677D0C7EDC456D33B" | out: lpString1="716723D4062244E677D0C7EDC456D33B") returned="716723D4062244E677D0C7EDC456D33B" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D33B", lpString2="C8" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8") returned="716723D4062244E677D0C7EDC456D33BC8" [0038.159] LocalFree (hMem=0x6798e8) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B6") returned 2 [0038.159] lstrlenA (lpString="716723D4062244E677D0C7EDC456D33BC8") returned 34 [0038.159] lstrlenA (lpString="B6") returned 2 [0038.159] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679c58 [0038.159] lstrcpyA (in: lpString1=0x679c58, lpString2="716723D4062244E677D0C7EDC456D33BC8" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8") returned="716723D4062244E677D0C7EDC456D33BC8" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D33BC8", lpString2="B6" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6") returned="716723D4062244E677D0C7EDC456D33BC8B6" [0038.159] LocalFree (hMem=0x679af8) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A5") returned 2 [0038.159] lstrlenA (lpString="716723D4062244E677D0C7EDC456D33BC8B6") returned 36 [0038.159] lstrlenA (lpString="A5") returned 2 [0038.159] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678ff8 [0038.159] lstrcpyA (in: lpString1=0x678ff8, lpString2="716723D4062244E677D0C7EDC456D33BC8B6" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6") returned="716723D4062244E677D0C7EDC456D33BC8B6" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D33BC8B6", lpString2="A5" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A5") returned="716723D4062244E677D0C7EDC456D33BC8B6A5" [0038.159] LocalFree (hMem=0x679c58) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0038.159] lstrlenA (lpString="716723D4062244E677D0C7EDC456D33BC8B6A5") returned 38 [0038.159] lstrlenA (lpString="57") returned 2 [0038.159] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.159] lstrcpyA (in: lpString1=0x6519e0, lpString2="716723D4062244E677D0C7EDC456D33BC8B6A5" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A5") returned="716723D4062244E677D0C7EDC456D33BC8B6A5" [0038.159] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A5", lpString2="57" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A557") returned="716723D4062244E677D0C7EDC456D33BC8B6A557" [0038.159] LocalFree (hMem=0x678ff8) returned 0x0 [0038.159] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BE") returned 2 [0038.160] lstrlenA (lpString="716723D4062244E677D0C7EDC456D33BC8B6A557") returned 40 [0038.160] lstrlenA (lpString="BE") returned 2 [0038.160] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.160] lstrcpyA (in: lpString1=0x651a98, lpString2="716723D4062244E677D0C7EDC456D33BC8B6A557" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A557") returned="716723D4062244E677D0C7EDC456D33BC8B6A557" [0038.160] lstrcatA (in: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A557", lpString2="BE" | out: lpString1="716723D4062244E677D0C7EDC456D33BC8B6A557BE") returned="716723D4062244E677D0C7EDC456D33BC8B6A557BE" [0038.160] LocalFree (hMem=0x6519e0) returned 0x0 [0038.160] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.160] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.160] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.160] LocalFree (hMem=0x651a98) returned 0x0 [0038.160] CoTaskMemFree (pv=0x662708) [0038.160] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Pictures/NahBkWRFtXcNl5/99R_Q%20lVxE/-PVwcK5neWMSsDp6.png", lpSrch="?") returned 0x0 [0038.160] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Pictures/NahBkWRFtXcNl5/99R_Q%20lVxE/-PVwcK5neWMSsDp6.png") returned 83 [0038.204] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4C") returned 2 [0038.204] lstrlenA (lpString="") returned 0 [0038.204] lstrlenA (lpString="4C") returned 2 [0038.204] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a31c0 [0038.204] lstrcpyA (in: lpString1=0x6a31c0, lpString2="" | out: lpString1="") returned="" [0038.204] lstrcatA (in: lpString1="", lpString2="4C" | out: lpString1="4C") returned="4C" [0038.204] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="74") returned 2 [0038.204] lstrlenA (lpString="4C") returned 2 [0038.204] lstrlenA (lpString="74") returned 2 [0038.204] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3c70 [0038.204] lstrcpyA (in: lpString1=0x6a3c70, lpString2="4C" | out: lpString1="4C") returned="4C" [0038.204] lstrcatA (in: lpString1="4C", lpString2="74" | out: lpString1="4C74") returned="4C74" [0038.204] LocalFree (hMem=0x6a31c0) returned 0x0 [0038.204] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4B") returned 2 [0038.204] lstrlenA (lpString="4C74") returned 4 [0038.204] lstrlenA (lpString="4B") returned 2 [0038.204] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a3880 [0038.204] lstrcpyA (in: lpString1=0x6a3880, lpString2="4C74" | out: lpString1="4C74") returned="4C74" [0038.204] lstrcatA (in: lpString1="4C74", lpString2="4B" | out: lpString1="4C744B") returned="4C744B" [0038.204] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.204] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3B") returned 2 [0038.204] lstrlenA (lpString="4C744B") returned 6 [0038.204] lstrlenA (lpString="3B") returned 2 [0038.204] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.204] lstrcpyA (in: lpString1=0x6519e0, lpString2="4C744B" | out: lpString1="4C744B") returned="4C744B" [0038.204] lstrcatA (in: lpString1="4C744B", lpString2="3B" | out: lpString1="4C744B3B") returned="4C744B3B" [0038.204] LocalFree (hMem=0x6a3880) returned 0x0 [0038.204] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="02") returned 2 [0038.204] lstrlenA (lpString="4C744B3B") returned 8 [0038.204] lstrlenA (lpString="02") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.205] lstrcpyA (in: lpString1=0x651a78, lpString2="4C744B3B" | out: lpString1="4C744B3B") returned="4C744B3B" [0038.205] lstrcatA (in: lpString1="4C744B3B", lpString2="02" | out: lpString1="4C744B3B02") returned="4C744B3B02" [0038.205] LocalFree (hMem=0x6519e0) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E3") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02") returned 10 [0038.205] lstrlenA (lpString="E3") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.205] lstrcpyA (in: lpString1=0x6519e0, lpString2="4C744B3B02" | out: lpString1="4C744B3B02") returned="4C744B3B02" [0038.205] lstrcatA (in: lpString1="4C744B3B02", lpString2="E3" | out: lpString1="4C744B3B02E3") returned="4C744B3B02E3" [0038.205] LocalFree (hMem=0x651a78) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7B") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02E3") returned 12 [0038.205] lstrlenA (lpString="7B") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.205] lstrcpyA (in: lpString1=0x651a78, lpString2="4C744B3B02E3" | out: lpString1="4C744B3B02E3") returned="4C744B3B02E3" [0038.205] lstrcatA (in: lpString1="4C744B3B02E3", lpString2="7B" | out: lpString1="4C744B3B02E37B") returned="4C744B3B02E37B" [0038.205] LocalFree (hMem=0x6519e0) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02E37B") returned 14 [0038.205] lstrlenA (lpString="3C") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e910 [0038.205] lstrcpyA (in: lpString1=0x66e910, lpString2="4C744B3B02E37B" | out: lpString1="4C744B3B02E37B") returned="4C744B3B02E37B" [0038.205] lstrcatA (in: lpString1="4C744B3B02E37B", lpString2="3C" | out: lpString1="4C744B3B02E37B3C") returned="4C744B3B02E37B3C" [0038.205] LocalFree (hMem=0x651a78) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="28") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02E37B3C") returned 16 [0038.205] lstrlenA (lpString="28") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e2d0 [0038.205] lstrcpyA (in: lpString1=0x66e2d0, lpString2="4C744B3B02E37B3C" | out: lpString1="4C744B3B02E37B3C") returned="4C744B3B02E37B3C" [0038.205] lstrcatA (in: lpString1="4C744B3B02E37B3C", lpString2="28" | out: lpString1="4C744B3B02E37B3C28") returned="4C744B3B02E37B3C28" [0038.205] LocalFree (hMem=0x66e910) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E6") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02E37B3C28") returned 18 [0038.205] lstrlenA (lpString="E6") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dbf0 [0038.205] lstrcpyA (in: lpString1=0x66dbf0, lpString2="4C744B3B02E37B3C28" | out: lpString1="4C744B3B02E37B3C28") returned="4C744B3B02E37B3C28" [0038.205] lstrcatA (in: lpString1="4C744B3B02E37B3C28", lpString2="E6" | out: lpString1="4C744B3B02E37B3C28E6") returned="4C744B3B02E37B3C28E6" [0038.205] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.205] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3B") returned 2 [0038.205] lstrlenA (lpString="4C744B3B02E37B3C28E6") returned 20 [0038.205] lstrlenA (lpString="3B") returned 2 [0038.205] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0038.206] lstrcpyA (in: lpString1=0x66e2d0, lpString2="4C744B3B02E37B3C28E6" | out: lpString1="4C744B3B02E37B3C28E6") returned="4C744B3B02E37B3C28E6" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E6", lpString2="3B" | out: lpString1="4C744B3B02E37B3C28E63B") returned="4C744B3B02E37B3C28E63B" [0038.206] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9A") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B") returned 22 [0038.206] lstrlenA (lpString="9A") returned 2 [0038.206] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.206] lstrcpyA (in: lpString1=0x66ff98, lpString2="4C744B3B02E37B3C28E63B" | out: lpString1="4C744B3B02E37B3C28E63B") returned="4C744B3B02E37B3C28E63B" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B", lpString2="9A" | out: lpString1="4C744B3B02E37B3C28E63B9A") returned="4C744B3B02E37B3C28E63B9A" [0038.206] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="63") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A") returned 24 [0038.206] lstrlenA (lpString="63") returned 2 [0038.206] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0038.206] lstrcpyA (in: lpString1=0x670040, lpString2="4C744B3B02E37B3C28E63B9A" | out: lpString1="4C744B3B02E37B3C28E63B9A") returned="4C744B3B02E37B3C28E63B9A" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A", lpString2="63" | out: lpString1="4C744B3B02E37B3C28E63B9A63") returned="4C744B3B02E37B3C28E63B9A63" [0038.206] LocalFree (hMem=0x66ff98) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8B") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A63") returned 26 [0038.206] lstrlenA (lpString="8B") returned 2 [0038.206] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.206] lstrcpyA (in: lpString1=0x66ff98, lpString2="4C744B3B02E37B3C28E63B9A63" | out: lpString1="4C744B3B02E37B3C28E63B9A63") returned="4C744B3B02E37B3C28E63B9A63" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A63", lpString2="8B" | out: lpString1="4C744B3B02E37B3C28E63B9A638B") returned="4C744B3B02E37B3C28E63B9A638B" [0038.206] LocalFree (hMem=0x670040) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0F") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B") returned 28 [0038.206] lstrlenA (lpString="0F") returned 2 [0038.206] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0038.206] lstrcpyA (in: lpString1=0x670040, lpString2="4C744B3B02E37B3C28E63B9A638B" | out: lpString1="4C744B3B02E37B3C28E63B9A638B") returned="4C744B3B02E37B3C28E63B9A638B" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B", lpString2="0F" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0F") returned="4C744B3B02E37B3C28E63B9A638B0F" [0038.206] LocalFree (hMem=0x66ff98) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FC") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0F") returned 30 [0038.206] lstrlenA (lpString="FC") returned 2 [0038.206] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x6794c8 [0038.206] lstrcpyA (in: lpString1=0x6794c8, lpString2="4C744B3B02E37B3C28E63B9A638B0F" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0F") returned="4C744B3B02E37B3C28E63B9A638B0F" [0038.206] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0F", lpString2="FC" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFC") returned="4C744B3B02E37B3C28E63B9A638B0FFC" [0038.206] LocalFree (hMem=0x670040) returned 0x0 [0038.206] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B9") returned 2 [0038.206] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0FFC") returned 32 [0038.206] lstrlenA (lpString="B9") returned 2 [0038.207] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679c58 [0038.207] lstrcpyA (in: lpString1=0x679c58, lpString2="4C744B3B02E37B3C28E63B9A638B0FFC" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFC") returned="4C744B3B02E37B3C28E63B9A638B0FFC" [0038.207] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0FFC", lpString2="B9" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB9") returned="4C744B3B02E37B3C28E63B9A638B0FFCB9" [0038.207] LocalFree (hMem=0x6794c8) returned 0x0 [0038.207] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="93") returned 2 [0038.207] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0FFCB9") returned 34 [0038.207] lstrlenA (lpString="93") returned 2 [0038.207] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x678d38 [0038.207] lstrcpyA (in: lpString1=0x678d38, lpString2="4C744B3B02E37B3C28E63B9A638B0FFCB9" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB9") returned="4C744B3B02E37B3C28E63B9A638B0FFCB9" [0038.207] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB9", lpString2="93" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993" [0038.207] LocalFree (hMem=0x679c58) returned 0x0 [0038.207] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BC") returned 2 [0038.207] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0FFCB993") returned 36 [0038.207] lstrlenA (lpString="BC") returned 2 [0038.207] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678f48 [0038.207] lstrcpyA (in: lpString1=0x678f48, lpString2="4C744B3B02E37B3C28E63B9A638B0FFCB993" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993" [0038.207] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993", lpString2="BC" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993BC" [0038.207] LocalFree (hMem=0x678d38) returned 0x0 [0038.207] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3C") returned 2 [0038.207] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0FFCB993BC") returned 38 [0038.207] lstrlenA (lpString="3C") returned 2 [0038.207] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.207] lstrcpyA (in: lpString1=0x6519e0, lpString2="4C744B3B02E37B3C28E63B9A638B0FFCB993BC" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993BC" [0038.207] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC", lpString2="3C" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C" [0038.207] LocalFree (hMem=0x678f48) returned 0x0 [0038.207] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="02") returned 2 [0038.207] lstrlenA (lpString="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C") returned 40 [0038.207] lstrlenA (lpString="02") returned 2 [0038.207] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.207] lstrcpyA (in: lpString1=0x651a98, lpString2="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C" [0038.207] lstrcatA (in: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C", lpString2="02" | out: lpString1="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C02") returned="4C744B3B02E37B3C28E63B9A638B0FFCB993BC3C02" [0038.207] LocalFree (hMem=0x6519e0) returned 0x0 [0038.207] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.207] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.207] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.207] LocalFree (hMem=0x651a98) returned 0x0 [0038.208] CoTaskMemFree (pv=0x679418) [0038.208] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/AppData/Roaming/DuRc3N_.jpg", lpSrch="?") returned 0x0 [0038.208] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/AppData/Roaming/DuRc3N_.jpg") returned 53 [0038.229] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="25") returned 2 [0038.229] lstrlenA (lpString="") returned 0 [0038.229] lstrlenA (lpString="25") returned 2 [0038.229] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a35b0 [0038.229] lstrcpyA (in: lpString1=0x6a35b0, lpString2="" | out: lpString1="") returned="" [0038.229] lstrcatA (in: lpString1="", lpString2="25" | out: lpString1="25") returned="25" [0038.229] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0038.229] lstrlenA (lpString="25") returned 2 [0038.229] lstrlenA (lpString="82") returned 2 [0038.229] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3760 [0038.229] lstrcpyA (in: lpString1=0x6a3760, lpString2="25" | out: lpString1="25") returned="25" [0038.229] lstrcatA (in: lpString1="25", lpString2="82" | out: lpString1="2582") returned="2582" [0038.229] LocalFree (hMem=0x6a35b0) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="10") returned 2 [0038.230] lstrlenA (lpString="2582") returned 4 [0038.230] lstrlenA (lpString="10") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2e60 [0038.230] lstrcpyA (in: lpString1=0x6a2e60, lpString2="2582" | out: lpString1="2582") returned="2582" [0038.230] lstrcatA (in: lpString1="2582", lpString2="10" | out: lpString1="258210") returned="258210" [0038.230] LocalFree (hMem=0x6a3760) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="05") returned 2 [0038.230] lstrlenA (lpString="258210") returned 6 [0038.230] lstrlenA (lpString="05") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.230] lstrcpyA (in: lpString1=0x6519e0, lpString2="258210" | out: lpString1="258210") returned="258210" [0038.230] lstrcatA (in: lpString1="258210", lpString2="05" | out: lpString1="25821005") returned="25821005" [0038.230] LocalFree (hMem=0x6a2e60) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="07") returned 2 [0038.230] lstrlenA (lpString="25821005") returned 8 [0038.230] lstrlenA (lpString="07") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.230] lstrcpyA (in: lpString1=0x651a78, lpString2="25821005" | out: lpString1="25821005") returned="25821005" [0038.230] lstrcatA (in: lpString1="25821005", lpString2="07" | out: lpString1="2582100507") returned="2582100507" [0038.230] LocalFree (hMem=0x6519e0) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AD") returned 2 [0038.230] lstrlenA (lpString="2582100507") returned 10 [0038.230] lstrlenA (lpString="AD") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.230] lstrcpyA (in: lpString1=0x6519e0, lpString2="2582100507" | out: lpString1="2582100507") returned="2582100507" [0038.230] lstrcatA (in: lpString1="2582100507", lpString2="AD" | out: lpString1="2582100507AD") returned="2582100507AD" [0038.230] LocalFree (hMem=0x651a78) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="03") returned 2 [0038.230] lstrlenA (lpString="2582100507AD") returned 12 [0038.230] lstrlenA (lpString="03") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.230] lstrcpyA (in: lpString1=0x651a78, lpString2="2582100507AD" | out: lpString1="2582100507AD") returned="2582100507AD" [0038.230] lstrcatA (in: lpString1="2582100507AD", lpString2="03" | out: lpString1="2582100507AD03") returned="2582100507AD03" [0038.230] LocalFree (hMem=0x6519e0) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D1") returned 2 [0038.230] lstrlenA (lpString="2582100507AD03") returned 14 [0038.230] lstrlenA (lpString="D1") returned 2 [0038.230] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e910 [0038.230] lstrcpyA (in: lpString1=0x66e910, lpString2="2582100507AD03" | out: lpString1="2582100507AD03") returned="2582100507AD03" [0038.230] lstrcatA (in: lpString1="2582100507AD03", lpString2="D1" | out: lpString1="2582100507AD03D1") returned="2582100507AD03D1" [0038.230] LocalFree (hMem=0x651a78) returned 0x0 [0038.230] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AD") returned 2 [0038.230] lstrlenA (lpString="2582100507AD03D1") returned 16 [0038.231] lstrlenA (lpString="AD") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e2d0 [0038.231] lstrcpyA (in: lpString1=0x66e2d0, lpString2="2582100507AD03D1" | out: lpString1="2582100507AD03D1") returned="2582100507AD03D1" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1", lpString2="AD" | out: lpString1="2582100507AD03D1AD") returned="2582100507AD03D1AD" [0038.231] LocalFree (hMem=0x66e910) returned 0x0 [0038.231] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7B") returned 2 [0038.231] lstrlenA (lpString="2582100507AD03D1AD") returned 18 [0038.231] lstrlenA (lpString="7B") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dbf0 [0038.231] lstrcpyA (in: lpString1=0x66dbf0, lpString2="2582100507AD03D1AD" | out: lpString1="2582100507AD03D1AD") returned="2582100507AD03D1AD" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1AD", lpString2="7B" | out: lpString1="2582100507AD03D1AD7B") returned="2582100507AD03D1AD7B" [0038.231] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.231] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DC") returned 2 [0038.231] lstrlenA (lpString="2582100507AD03D1AD7B") returned 20 [0038.231] lstrlenA (lpString="DC") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0038.231] lstrcpyA (in: lpString1=0x66e910, lpString2="2582100507AD03D1AD7B" | out: lpString1="2582100507AD03D1AD7B") returned="2582100507AD03D1AD7B" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1AD7B", lpString2="DC" | out: lpString1="2582100507AD03D1AD7BDC") returned="2582100507AD03D1AD7BDC" [0038.231] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.231] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2D") returned 2 [0038.231] lstrlenA (lpString="2582100507AD03D1AD7BDC") returned 22 [0038.231] lstrlenA (lpString="2D") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.231] lstrcpyA (in: lpString1=0x66ff98, lpString2="2582100507AD03D1AD7BDC" | out: lpString1="2582100507AD03D1AD7BDC") returned="2582100507AD03D1AD7BDC" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC", lpString2="2D" | out: lpString1="2582100507AD03D1AD7BDC2D") returned="2582100507AD03D1AD7BDC2D" [0038.231] LocalFree (hMem=0x66e910) returned 0x0 [0038.231] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0A") returned 2 [0038.231] lstrlenA (lpString="2582100507AD03D1AD7BDC2D") returned 24 [0038.231] lstrlenA (lpString="0A") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0038.231] lstrcpyA (in: lpString1=0x670628, lpString2="2582100507AD03D1AD7BDC2D" | out: lpString1="2582100507AD03D1AD7BDC2D") returned="2582100507AD03D1AD7BDC2D" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D", lpString2="0A" | out: lpString1="2582100507AD03D1AD7BDC2D0A") returned="2582100507AD03D1AD7BDC2D0A" [0038.231] LocalFree (hMem=0x66ff98) returned 0x0 [0038.231] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8D") returned 2 [0038.231] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A") returned 26 [0038.231] lstrlenA (lpString="8D") returned 2 [0038.231] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.231] lstrcpyA (in: lpString1=0x66ff98, lpString2="2582100507AD03D1AD7BDC2D0A" | out: lpString1="2582100507AD03D1AD7BDC2D0A") returned="2582100507AD03D1AD7BDC2D0A" [0038.231] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A", lpString2="8D" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D") returned="2582100507AD03D1AD7BDC2D0A8D" [0038.231] LocalFree (hMem=0x670628) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="27") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D") returned 28 [0038.232] lstrlenA (lpString="27") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670388 [0038.232] lstrcpyA (in: lpString1=0x670388, lpString2="2582100507AD03D1AD7BDC2D0A8D" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D") returned="2582100507AD03D1AD7BDC2D0A8D" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D", lpString2="27" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27") returned="2582100507AD03D1AD7BDC2D0A8D27" [0038.232] LocalFree (hMem=0x66ff98) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C1") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27") returned 30 [0038.232] lstrlenA (lpString="C1") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678de8 [0038.232] lstrcpyA (in: lpString1=0x678de8, lpString2="2582100507AD03D1AD7BDC2D0A8D27" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27") returned="2582100507AD03D1AD7BDC2D0A8D27" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27", lpString2="C1" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C1") returned="2582100507AD03D1AD7BDC2D0A8D27C1" [0038.232] LocalFree (hMem=0x670388) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0E") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27C1") returned 32 [0038.232] lstrlenA (lpString="0E") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679628 [0038.232] lstrcpyA (in: lpString1=0x679628, lpString2="2582100507AD03D1AD7BDC2D0A8D27C1" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C1") returned="2582100507AD03D1AD7BDC2D0A8D27C1" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27C1", lpString2="0E" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10E") returned="2582100507AD03D1AD7BDC2D0A8D27C10E" [0038.232] LocalFree (hMem=0x678de8) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B4") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27C10E") returned 34 [0038.232] lstrlenA (lpString="B4") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6794c8 [0038.232] lstrcpyA (in: lpString1=0x6794c8, lpString2="2582100507AD03D1AD7BDC2D0A8D27C10E" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10E") returned="2582100507AD03D1AD7BDC2D0A8D27C10E" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10E", lpString2="B4" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB4") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB4" [0038.232] LocalFree (hMem=0x679628) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9F") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27C10EB4") returned 36 [0038.232] lstrlenA (lpString="9F") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679418 [0038.232] lstrcpyA (in: lpString1=0x679418, lpString2="2582100507AD03D1AD7BDC2D0A8D27C10EB4" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB4") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB4" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB4", lpString2="9F" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49F") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB49F" [0038.232] LocalFree (hMem=0x6794c8) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F7") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27C10EB49F") returned 38 [0038.232] lstrlenA (lpString="F7") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.232] lstrcpyA (in: lpString1=0x6519e0, lpString2="2582100507AD03D1AD7BDC2D0A8D27C10EB49F" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49F") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB49F" [0038.232] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49F", lpString2="F7" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7" [0038.232] LocalFree (hMem=0x679418) returned 0x0 [0038.232] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4C") returned 2 [0038.232] lstrlenA (lpString="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7") returned 40 [0038.232] lstrlenA (lpString="4C") returned 2 [0038.232] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.233] lstrcpyA (in: lpString1=0x651a98, lpString2="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7" [0038.233] lstrcatA (in: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF7", lpString2="4C" | out: lpString1="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF74C") returned="2582100507AD03D1AD7BDC2D0A8D27C10EB49FF74C" [0038.233] LocalFree (hMem=0x6519e0) returned 0x0 [0038.233] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.233] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.233] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.233] LocalFree (hMem=0x651a98) returned 0x0 [0038.233] CoTaskMemFree (pv=0x662528) [0038.233] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt", lpSrch="?") returned 0x0 [0038.233] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/vj4FFV6gt") returned 45 [0038.316] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="40") returned 2 [0038.316] lstrlenA (lpString="") returned 0 [0038.316] lstrlenA (lpString="40") returned 2 [0038.316] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a32e0 [0038.316] lstrcpyA (in: lpString1=0x6a32e0, lpString2="" | out: lpString1="") returned="" [0038.316] lstrcatA (in: lpString1="", lpString2="40" | out: lpString1="40") returned="40" [0038.316] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="16") returned 2 [0038.316] lstrlenA (lpString="40") returned 2 [0038.316] lstrlenA (lpString="16") returned 2 [0038.316] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3d00 [0038.317] lstrcpyA (in: lpString1=0x6a3d00, lpString2="40" | out: lpString1="40") returned="40" [0038.317] lstrcatA (in: lpString1="40", lpString2="16" | out: lpString1="4016") returned="4016" [0038.317] LocalFree (hMem=0x6a32e0) returned 0x0 [0038.317] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="36") returned 2 [0038.317] lstrlenA (lpString="4016") returned 4 [0038.317] lstrlenA (lpString="36") returned 2 [0038.317] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a36d0 [0038.317] lstrcpyA (in: lpString1=0x6a36d0, lpString2="4016" | out: lpString1="4016") returned="4016" [0038.317] lstrcatA (in: lpString1="4016", lpString2="36" | out: lpString1="401636") returned="401636" [0038.317] LocalFree (hMem=0x6a3d00) returned 0x0 [0038.317] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1F") returned 2 [0038.317] lstrlenA (lpString="401636") returned 6 [0038.317] lstrlenA (lpString="1F") returned 2 [0038.317] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.317] lstrcpyA (in: lpString1=0x6519e0, lpString2="401636" | out: lpString1="401636") returned="401636" [0038.317] lstrcatA (in: lpString1="401636", lpString2="1F" | out: lpString1="4016361F") returned="4016361F" [0038.317] LocalFree (hMem=0x6a36d0) returned 0x0 [0038.317] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="62") returned 2 [0038.317] lstrlenA (lpString="4016361F") returned 8 [0038.317] lstrlenA (lpString="62") returned 2 [0038.317] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.317] lstrcpyA (in: lpString1=0x651a78, lpString2="4016361F" | out: lpString1="4016361F") returned="4016361F" [0038.317] lstrcatA (in: lpString1="4016361F", lpString2="62" | out: lpString1="4016361F62") returned="4016361F62" [0038.317] LocalFree (hMem=0x6519e0) returned 0x0 [0038.318] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1B") returned 2 [0038.318] lstrlenA (lpString="4016361F62") returned 10 [0038.318] lstrlenA (lpString="1B") returned 2 [0038.318] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.318] lstrcpyA (in: lpString1=0x6519e0, lpString2="4016361F62" | out: lpString1="4016361F62") returned="4016361F62" [0038.318] lstrcatA (in: lpString1="4016361F62", lpString2="1B" | out: lpString1="4016361F621B") returned="4016361F621B" [0038.318] LocalFree (hMem=0x651a78) returned 0x0 [0038.318] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FB") returned 2 [0038.318] lstrlenA (lpString="4016361F621B") returned 12 [0038.318] lstrlenA (lpString="FB") returned 2 [0038.318] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.318] lstrcpyA (in: lpString1=0x651a78, lpString2="4016361F621B" | out: lpString1="4016361F621B") returned="4016361F621B" [0038.318] lstrcatA (in: lpString1="4016361F621B", lpString2="FB" | out: lpString1="4016361F621BFB") returned="4016361F621BFB" [0038.318] LocalFree (hMem=0x6519e0) returned 0x0 [0038.318] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0038.318] lstrlenA (lpString="4016361F621BFB") returned 14 [0038.318] lstrlenA (lpString="A3") returned 2 [0038.318] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0038.318] lstrcpyA (in: lpString1=0x66e2d0, lpString2="4016361F621BFB" | out: lpString1="4016361F621BFB") returned="4016361F621BFB" [0038.318] lstrcatA (in: lpString1="4016361F621BFB", lpString2="A3" | out: lpString1="4016361F621BFBA3") returned="4016361F621BFBA3" [0038.318] LocalFree (hMem=0x651a78) returned 0x0 [0038.318] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="96") returned 2 [0038.318] lstrlenA (lpString="4016361F621BFBA3") returned 16 [0038.318] lstrlenA (lpString="96") returned 2 [0038.319] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e910 [0038.319] lstrcpyA (in: lpString1=0x66e910, lpString2="4016361F621BFBA3" | out: lpString1="4016361F621BFBA3") returned="4016361F621BFBA3" [0038.319] lstrcatA (in: lpString1="4016361F621BFBA3", lpString2="96" | out: lpString1="4016361F621BFBA396") returned="4016361F621BFBA396" [0038.319] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.319] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="69") returned 2 [0038.319] lstrlenA (lpString="4016361F621BFBA396") returned 18 [0038.319] lstrlenA (lpString="69") returned 2 [0038.319] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66dd30 [0038.319] lstrcpyA (in: lpString1=0x66dd30, lpString2="4016361F621BFBA396" | out: lpString1="4016361F621BFBA396") returned="4016361F621BFBA396" [0038.319] lstrcatA (in: lpString1="4016361F621BFBA396", lpString2="69" | out: lpString1="4016361F621BFBA39669") returned="4016361F621BFBA39669" [0038.319] LocalFree (hMem=0x66e910) returned 0x0 [0038.319] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8B") returned 2 [0038.319] lstrlenA (lpString="4016361F621BFBA39669") returned 20 [0038.319] lstrlenA (lpString="8B") returned 2 [0038.319] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0038.319] lstrcpyA (in: lpString1=0x66e2d0, lpString2="4016361F621BFBA39669" | out: lpString1="4016361F621BFBA39669") returned="4016361F621BFBA39669" [0038.319] lstrcatA (in: lpString1="4016361F621BFBA39669", lpString2="8B" | out: lpString1="4016361F621BFBA396698B") returned="4016361F621BFBA396698B" [0038.319] LocalFree (hMem=0x66dd30) returned 0x0 [0038.319] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D2") returned 2 [0038.319] lstrlenA (lpString="4016361F621BFBA396698B") returned 22 [0038.319] lstrlenA (lpString="D2") returned 2 [0038.319] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.319] lstrcpyA (in: lpString1=0x66ff98, lpString2="4016361F621BFBA396698B" | out: lpString1="4016361F621BFBA396698B") returned="4016361F621BFBA396698B" [0038.319] lstrcatA (in: lpString1="4016361F621BFBA396698B", lpString2="D2" | out: lpString1="4016361F621BFBA396698BD2") returned="4016361F621BFBA396698BD2" [0038.320] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.320] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="29") returned 2 [0038.320] lstrlenA (lpString="4016361F621BFBA396698BD2") returned 24 [0038.320] lstrlenA (lpString="29") returned 2 [0038.320] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6702e0 [0038.320] lstrcpyA (in: lpString1=0x6702e0, lpString2="4016361F621BFBA396698BD2" | out: lpString1="4016361F621BFBA396698BD2") returned="4016361F621BFBA396698BD2" [0038.320] lstrcatA (in: lpString1="4016361F621BFBA396698BD2", lpString2="29" | out: lpString1="4016361F621BFBA396698BD229") returned="4016361F621BFBA396698BD229" [0038.320] LocalFree (hMem=0x66ff98) returned 0x0 [0038.320] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="46") returned 2 [0038.320] lstrlenA (lpString="4016361F621BFBA396698BD229") returned 26 [0038.320] lstrlenA (lpString="46") returned 2 [0038.320] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6708c8 [0038.320] lstrcpyA (in: lpString1=0x6708c8, lpString2="4016361F621BFBA396698BD229" | out: lpString1="4016361F621BFBA396698BD229") returned="4016361F621BFBA396698BD229" [0038.320] lstrcatA (in: lpString1="4016361F621BFBA396698BD229", lpString2="46" | out: lpString1="4016361F621BFBA396698BD22946") returned="4016361F621BFBA396698BD22946" [0038.320] LocalFree (hMem=0x6702e0) returned 0x0 [0038.320] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="BE") returned 2 [0038.320] lstrlenA (lpString="4016361F621BFBA396698BD22946") returned 28 [0038.320] lstrlenA (lpString="BE") returned 2 [0038.320] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670628 [0038.320] lstrcpyA (in: lpString1=0x670628, lpString2="4016361F621BFBA396698BD22946" | out: lpString1="4016361F621BFBA396698BD22946") returned="4016361F621BFBA396698BD22946" [0038.320] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946", lpString2="BE" | out: lpString1="4016361F621BFBA396698BD22946BE") returned="4016361F621BFBA396698BD22946BE" [0038.320] LocalFree (hMem=0x6708c8) returned 0x0 [0038.320] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DF") returned 2 [0038.320] lstrlenA (lpString="4016361F621BFBA396698BD22946BE") returned 30 [0038.321] lstrlenA (lpString="DF") returned 2 [0038.321] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678f48 [0038.321] lstrcpyA (in: lpString1=0x678f48, lpString2="4016361F621BFBA396698BD22946BE" | out: lpString1="4016361F621BFBA396698BD22946BE") returned="4016361F621BFBA396698BD22946BE" [0038.321] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BE", lpString2="DF" | out: lpString1="4016361F621BFBA396698BD22946BEDF") returned="4016361F621BFBA396698BD22946BEDF" [0038.321] LocalFree (hMem=0x670628) returned 0x0 [0038.321] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="DA") returned 2 [0038.321] lstrlenA (lpString="4016361F621BFBA396698BD22946BEDF") returned 32 [0038.321] lstrlenA (lpString="DA") returned 2 [0038.321] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679a48 [0038.321] lstrcpyA (in: lpString1=0x679a48, lpString2="4016361F621BFBA396698BD22946BEDF" | out: lpString1="4016361F621BFBA396698BD22946BEDF") returned="4016361F621BFBA396698BD22946BEDF" [0038.321] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BEDF", lpString2="DA" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA") returned="4016361F621BFBA396698BD22946BEDFDA" [0038.322] LocalFree (hMem=0x678f48) returned 0x0 [0038.322] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="45") returned 2 [0038.322] lstrlenA (lpString="4016361F621BFBA396698BD22946BEDFDA") returned 34 [0038.322] lstrlenA (lpString="45") returned 2 [0038.322] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679578 [0038.322] lstrcpyA (in: lpString1=0x679578, lpString2="4016361F621BFBA396698BD22946BEDFDA" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA") returned="4016361F621BFBA396698BD22946BEDFDA" [0038.322] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BEDFDA", lpString2="45" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA45") returned="4016361F621BFBA396698BD22946BEDFDA45" [0038.322] LocalFree (hMem=0x679a48) returned 0x0 [0038.322] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="59") returned 2 [0038.322] lstrlenA (lpString="4016361F621BFBA396698BD22946BEDFDA45") returned 36 [0038.322] lstrlenA (lpString="59") returned 2 [0038.322] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679ba8 [0038.322] lstrcpyA (in: lpString1=0x679ba8, lpString2="4016361F621BFBA396698BD22946BEDFDA45" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA45") returned="4016361F621BFBA396698BD22946BEDFDA45" [0038.322] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BEDFDA45", lpString2="59" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA4559") returned="4016361F621BFBA396698BD22946BEDFDA4559" [0038.322] LocalFree (hMem=0x679578) returned 0x0 [0038.322] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A3") returned 2 [0038.322] lstrlenA (lpString="4016361F621BFBA396698BD22946BEDFDA4559") returned 38 [0038.322] lstrlenA (lpString="A3") returned 2 [0038.322] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.322] lstrcpyA (in: lpString1=0x6519e0, lpString2="4016361F621BFBA396698BD22946BEDFDA4559" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA4559") returned="4016361F621BFBA396698BD22946BEDFDA4559" [0038.322] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BEDFDA4559", lpString2="A3" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA4559A3") returned="4016361F621BFBA396698BD22946BEDFDA4559A3" [0038.322] LocalFree (hMem=0x679ba8) returned 0x0 [0038.322] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="49") returned 2 [0038.323] lstrlenA (lpString="4016361F621BFBA396698BD22946BEDFDA4559A3") returned 40 [0038.323] lstrlenA (lpString="49") returned 2 [0038.323] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6771d8 [0038.323] lstrcpyA (in: lpString1=0x6771d8, lpString2="4016361F621BFBA396698BD22946BEDFDA4559A3" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA4559A3") returned="4016361F621BFBA396698BD22946BEDFDA4559A3" [0038.323] lstrcatA (in: lpString1="4016361F621BFBA396698BD22946BEDFDA4559A3", lpString2="49" | out: lpString1="4016361F621BFBA396698BD22946BEDFDA4559A349") returned="4016361F621BFBA396698BD22946BEDFDA4559A349" [0038.323] LocalFree (hMem=0x6519e0) returned 0x0 [0038.323] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.323] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.323] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.323] LocalFree (hMem=0x6771d8) returned 0x0 [0038.323] CoTaskMemFree (pv=0x651b18) [0038.323] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Music/zFtK-xWIIJj1/0EtDlBGs/2Y4Bx2NR/fVzHtq5/f2qI.m4a", lpSrch="?") returned 0x0 [0038.324] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Music/zFtK-xWIIJj1/0EtDlBGs/2Y4Bx2NR/fVzHtq5/f2qI.m4a") returned 79 [0038.373] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="20") returned 2 [0038.373] lstrlenA (lpString="") returned 0 [0038.373] lstrlenA (lpString="20") returned 2 [0038.373] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3760 [0038.373] lstrcpyA (in: lpString1=0x6a3760, lpString2="" | out: lpString1="") returned="" [0038.373] lstrcatA (in: lpString1="", lpString2="20" | out: lpString1="20") returned="20" [0038.376] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5E") returned 2 [0038.376] lstrlenA (lpString="20") returned 2 [0038.376] lstrlenA (lpString="5E") returned 2 [0038.376] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3d00 [0038.376] lstrcpyA (in: lpString1=0x6a3d00, lpString2="20" | out: lpString1="20") returned="20" [0038.376] lstrcatA (in: lpString1="20", lpString2="5E" | out: lpString1="205E") returned="205E" [0038.376] LocalFree (hMem=0x6a3760) returned 0x0 [0038.376] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7D") returned 2 [0038.376] lstrlenA (lpString="205E") returned 4 [0038.376] lstrlenA (lpString="7D") returned 2 [0038.377] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a2d40 [0038.377] lstrcpyA (in: lpString1=0x6a2d40, lpString2="205E" | out: lpString1="205E") returned="205E" [0038.377] lstrcatA (in: lpString1="205E", lpString2="7D" | out: lpString1="205E7D") returned="205E7D" [0038.377] LocalFree (hMem=0x6a3d00) returned 0x0 [0038.377] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D5") returned 2 [0038.377] lstrlenA (lpString="205E7D") returned 6 [0038.377] lstrlenA (lpString="D5") returned 2 [0038.377] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6519e0 [0038.377] lstrcpyA (in: lpString1=0x6519e0, lpString2="205E7D" | out: lpString1="205E7D") returned="205E7D" [0038.377] lstrcatA (in: lpString1="205E7D", lpString2="D5" | out: lpString1="205E7DD5") returned="205E7DD5" [0038.377] LocalFree (hMem=0x6a2d40) returned 0x0 [0038.377] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C7") returned 2 [0038.377] lstrlenA (lpString="205E7DD5") returned 8 [0038.377] lstrlenA (lpString="C7") returned 2 [0038.377] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a78 [0038.377] lstrcpyA (in: lpString1=0x651a78, lpString2="205E7DD5" | out: lpString1="205E7DD5") returned="205E7DD5" [0038.377] lstrcatA (in: lpString1="205E7DD5", lpString2="C7" | out: lpString1="205E7DD5C7") returned="205E7DD5C7" [0038.377] LocalFree (hMem=0x6519e0) returned 0x0 [0038.377] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="0E") returned 2 [0038.377] lstrlenA (lpString="205E7DD5C7") returned 10 [0038.377] lstrlenA (lpString="0E") returned 2 [0038.377] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6519e0 [0038.377] lstrcpyA (in: lpString1=0x6519e0, lpString2="205E7DD5C7" | out: lpString1="205E7DD5C7") returned="205E7DD5C7" [0038.377] lstrcatA (in: lpString1="205E7DD5C7", lpString2="0E" | out: lpString1="205E7DD5C70E") returned="205E7DD5C70E" [0038.377] LocalFree (hMem=0x651a78) returned 0x0 [0038.377] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="88") returned 2 [0038.377] lstrlenA (lpString="205E7DD5C70E") returned 12 [0038.377] lstrlenA (lpString="88") returned 2 [0038.377] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a78 [0038.377] lstrcpyA (in: lpString1=0x651a78, lpString2="205E7DD5C70E" | out: lpString1="205E7DD5C70E") returned="205E7DD5C70E" [0038.377] lstrcatA (in: lpString1="205E7DD5C70E", lpString2="88" | out: lpString1="205E7DD5C70E88") returned="205E7DD5C70E88" [0038.377] LocalFree (hMem=0x6519e0) returned 0x0 [0038.377] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2B") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E88") returned 14 [0038.378] lstrlenA (lpString="2B") returned 2 [0038.378] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e910 [0038.378] lstrcpyA (in: lpString1=0x66e910, lpString2="205E7DD5C70E88" | out: lpString1="205E7DD5C70E88") returned="205E7DD5C70E88" [0038.378] lstrcatA (in: lpString1="205E7DD5C70E88", lpString2="2B" | out: lpString1="205E7DD5C70E882B") returned="205E7DD5C70E882B" [0038.378] LocalFree (hMem=0x651a78) returned 0x0 [0038.378] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="06") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E882B") returned 16 [0038.378] lstrlenA (lpString="06") returned 2 [0038.378] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66ea50 [0038.378] lstrcpyA (in: lpString1=0x66ea50, lpString2="205E7DD5C70E882B" | out: lpString1="205E7DD5C70E882B") returned="205E7DD5C70E882B" [0038.378] lstrcatA (in: lpString1="205E7DD5C70E882B", lpString2="06" | out: lpString1="205E7DD5C70E882B06") returned="205E7DD5C70E882B06" [0038.378] LocalFree (hMem=0x66e910) returned 0x0 [0038.378] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="00") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E882B06") returned 18 [0038.378] lstrlenA (lpString="00") returned 2 [0038.378] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e2d0 [0038.378] lstrcpyA (in: lpString1=0x66e2d0, lpString2="205E7DD5C70E882B06" | out: lpString1="205E7DD5C70E882B06") returned="205E7DD5C70E882B06" [0038.378] lstrcatA (in: lpString1="205E7DD5C70E882B06", lpString2="00" | out: lpString1="205E7DD5C70E882B0600") returned="205E7DD5C70E882B0600" [0038.378] LocalFree (hMem=0x66ea50) returned 0x0 [0038.378] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="84") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E882B0600") returned 20 [0038.378] lstrlenA (lpString="84") returned 2 [0038.378] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e9b0 [0038.378] lstrcpyA (in: lpString1=0x66e9b0, lpString2="205E7DD5C70E882B0600" | out: lpString1="205E7DD5C70E882B0600") returned="205E7DD5C70E882B0600" [0038.378] lstrcatA (in: lpString1="205E7DD5C70E882B0600", lpString2="84" | out: lpString1="205E7DD5C70E882B060084") returned="205E7DD5C70E882B060084" [0038.378] LocalFree (hMem=0x66e2d0) returned 0x0 [0038.378] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="74") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E882B060084") returned 22 [0038.378] lstrlenA (lpString="74") returned 2 [0038.378] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670a18 [0038.378] lstrcpyA (in: lpString1=0x670a18, lpString2="205E7DD5C70E882B060084" | out: lpString1="205E7DD5C70E882B060084") returned="205E7DD5C70E882B060084" [0038.378] lstrcatA (in: lpString1="205E7DD5C70E882B060084", lpString2="74" | out: lpString1="205E7DD5C70E882B06008474") returned="205E7DD5C70E882B06008474" [0038.378] LocalFree (hMem=0x66e9b0) returned 0x0 [0038.378] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B4") returned 2 [0038.378] lstrlenA (lpString="205E7DD5C70E882B06008474") returned 24 [0038.379] lstrlenA (lpString="B4") returned 2 [0038.379] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6702e0 [0038.379] lstrcpyA (in: lpString1=0x6702e0, lpString2="205E7DD5C70E882B06008474" | out: lpString1="205E7DD5C70E882B06008474") returned="205E7DD5C70E882B06008474" [0038.379] lstrcatA (in: lpString1="205E7DD5C70E882B06008474", lpString2="B4" | out: lpString1="205E7DD5C70E882B06008474B4") returned="205E7DD5C70E882B06008474B4" [0038.379] LocalFree (hMem=0x670a18) returned 0x0 [0038.379] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="85") returned 2 [0038.379] lstrlenA (lpString="205E7DD5C70E882B06008474B4") returned 26 [0038.379] lstrlenA (lpString="85") returned 2 [0038.379] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.379] lstrcpyA (in: lpString1=0x66ff98, lpString2="205E7DD5C70E882B06008474B4" | out: lpString1="205E7DD5C70E882B06008474B4") returned="205E7DD5C70E882B06008474B4" [0038.379] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4", lpString2="85" | out: lpString1="205E7DD5C70E882B06008474B485") returned="205E7DD5C70E882B06008474B485" [0038.379] LocalFree (hMem=0x6702e0) returned 0x0 [0038.379] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="1A") returned 2 [0038.379] lstrlenA (lpString="205E7DD5C70E882B06008474B485") returned 28 [0038.379] lstrlenA (lpString="1A") returned 2 [0038.379] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6700e8 [0038.379] lstrcpyA (in: lpString1=0x6700e8, lpString2="205E7DD5C70E882B06008474B485" | out: lpString1="205E7DD5C70E882B06008474B485") returned="205E7DD5C70E882B06008474B485" [0038.379] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B485", lpString2="1A" | out: lpString1="205E7DD5C70E882B06008474B4851A") returned="205E7DD5C70E882B06008474B4851A" [0038.379] LocalFree (hMem=0x66ff98) returned 0x0 [0038.379] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0038.379] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A") returned 30 [0038.379] lstrlenA (lpString="57") returned 2 [0038.379] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679418 [0038.379] lstrcpyA (in: lpString1=0x679418, lpString2="205E7DD5C70E882B06008474B4851A" | out: lpString1="205E7DD5C70E882B06008474B4851A") returned="205E7DD5C70E882B06008474B4851A" [0038.379] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A", lpString2="57" | out: lpString1="205E7DD5C70E882B06008474B4851A57") returned="205E7DD5C70E882B06008474B4851A57" [0038.379] LocalFree (hMem=0x6700e8) returned 0x0 [0038.379] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="83") returned 2 [0038.379] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A57") returned 32 [0038.379] lstrlenA (lpString="83") returned 2 [0038.379] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678de8 [0038.379] lstrcpyA (in: lpString1=0x678de8, lpString2="205E7DD5C70E882B06008474B4851A57" | out: lpString1="205E7DD5C70E882B06008474B4851A57") returned="205E7DD5C70E882B06008474B4851A57" [0038.379] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A57", lpString2="83" | out: lpString1="205E7DD5C70E882B06008474B4851A5783") returned="205E7DD5C70E882B06008474B4851A5783" [0038.379] LocalFree (hMem=0x679418) returned 0x0 [0038.379] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="77") returned 2 [0038.379] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A5783") returned 34 [0038.380] lstrlenA (lpString="77") returned 2 [0038.380] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6790a8 [0038.380] lstrcpyA (in: lpString1=0x6790a8, lpString2="205E7DD5C70E882B06008474B4851A5783" | out: lpString1="205E7DD5C70E882B06008474B4851A5783") returned="205E7DD5C70E882B06008474B4851A5783" [0038.380] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A5783", lpString2="77" | out: lpString1="205E7DD5C70E882B06008474B4851A578377") returned="205E7DD5C70E882B06008474B4851A578377" [0038.380] LocalFree (hMem=0x678de8) returned 0x0 [0038.380] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0038.380] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A578377") returned 36 [0038.380] lstrlenA (lpString="57") returned 2 [0038.380] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679838 [0038.380] lstrcpyA (in: lpString1=0x679838, lpString2="205E7DD5C70E882B06008474B4851A578377" | out: lpString1="205E7DD5C70E882B06008474B4851A578377") returned="205E7DD5C70E882B06008474B4851A578377" [0038.380] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A578377", lpString2="57" | out: lpString1="205E7DD5C70E882B06008474B4851A57837757") returned="205E7DD5C70E882B06008474B4851A57837757" [0038.380] LocalFree (hMem=0x6790a8) returned 0x0 [0038.380] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="92") returned 2 [0038.380] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A57837757") returned 38 [0038.380] lstrlenA (lpString="92") returned 2 [0038.380] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6519e0 [0038.380] lstrcpyA (in: lpString1=0x6519e0, lpString2="205E7DD5C70E882B06008474B4851A57837757" | out: lpString1="205E7DD5C70E882B06008474B4851A57837757") returned="205E7DD5C70E882B06008474B4851A57837757" [0038.380] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A57837757", lpString2="92" | out: lpString1="205E7DD5C70E882B06008474B4851A5783775792") returned="205E7DD5C70E882B06008474B4851A5783775792" [0038.380] LocalFree (hMem=0x679838) returned 0x0 [0038.380] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E3") returned 2 [0038.380] lstrlenA (lpString="205E7DD5C70E882B06008474B4851A5783775792") returned 40 [0038.380] lstrlenA (lpString="E3") returned 2 [0038.380] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.380] lstrcpyA (in: lpString1=0x651a98, lpString2="205E7DD5C70E882B06008474B4851A5783775792" | out: lpString1="205E7DD5C70E882B06008474B4851A5783775792") returned="205E7DD5C70E882B06008474B4851A5783775792" [0038.380] lstrcatA (in: lpString1="205E7DD5C70E882B06008474B4851A5783775792", lpString2="E3" | out: lpString1="205E7DD5C70E882B06008474B4851A5783775792E3") returned="205E7DD5C70E882B06008474B4851A5783775792E3" [0038.380] LocalFree (hMem=0x6519e0) returned 0x0 [0038.380] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.382] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.382] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.382] LocalFree (hMem=0x651a98) returned 0x0 [0038.382] CoTaskMemFree (pv=0x670040) [0038.382] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Documents/xdHAOC-TYon%204NTK/pTmXTP/pRXOEWQoq26hMCu/nNb-7Ea.xlsx", lpSrch="?") returned 0x0 [0038.383] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Documents/xdHAOC-TYon%204NTK/pTmXTP/pRXOEWQoq26hMCu/nNb-7Ea.xlsx") returned 90 [0038.421] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0038.421] lstrlenA (lpString="") returned 0 [0038.421] lstrlenA (lpString="2F") returned 2 [0038.421] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3d00 [0038.421] lstrcpyA (in: lpString1=0x6a3d00, lpString2="" | out: lpString1="") returned="" [0038.421] lstrcatA (in: lpString1="", lpString2="2F" | out: lpString1="2F") returned="2F" [0038.421] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A2") returned 2 [0038.421] lstrlenA (lpString="2F") returned 2 [0038.421] lstrlenA (lpString="A2") returned 2 [0038.421] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a3c70 [0038.421] lstrcpyA (in: lpString1=0x6a3c70, lpString2="2F" | out: lpString1="2F") returned="2F" [0038.421] lstrcatA (in: lpString1="2F", lpString2="A2" | out: lpString1="2FA2") returned="2FA2" [0038.421] LocalFree (hMem=0x6a3d00) returned 0x0 [0038.421] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="95") returned 2 [0038.421] lstrlenA (lpString="2FA2") returned 4 [0038.421] lstrlenA (lpString="95") returned 2 [0038.421] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a30a0 [0038.421] lstrcpyA (in: lpString1=0x6a30a0, lpString2="2FA2" | out: lpString1="2FA2") returned="2FA2" [0038.421] lstrcatA (in: lpString1="2FA2", lpString2="95" | out: lpString1="2FA295") returned="2FA295" [0038.421] LocalFree (hMem=0x6a3c70) returned 0x0 [0038.422] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="08") returned 2 [0038.422] lstrlenA (lpString="2FA295") returned 6 [0038.422] lstrlenA (lpString="08") returned 2 [0038.422] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x6771d8 [0038.422] lstrcpyA (in: lpString1=0x6771d8, lpString2="2FA295" | out: lpString1="2FA295") returned="2FA295" [0038.422] lstrcatA (in: lpString1="2FA295", lpString2="08" | out: lpString1="2FA29508") returned="2FA29508" [0038.422] LocalFree (hMem=0x6a30a0) returned 0x0 [0038.422] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8F") returned 2 [0038.422] lstrlenA (lpString="2FA29508") returned 8 [0038.422] lstrlenA (lpString="8F") returned 2 [0038.422] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x6519e0 [0038.422] lstrcpyA (in: lpString1=0x6519e0, lpString2="2FA29508" | out: lpString1="2FA29508") returned="2FA29508" [0038.422] lstrcatA (in: lpString1="2FA29508", lpString2="8F" | out: lpString1="2FA295088F") returned="2FA295088F" [0038.422] LocalFree (hMem=0x6771d8) returned 0x0 [0038.422] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="AD") returned 2 [0038.422] lstrlenA (lpString="2FA295088F") returned 10 [0038.422] lstrlenA (lpString="AD") returned 2 [0038.422] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6771d8 [0038.422] lstrcpyA (in: lpString1=0x6771d8, lpString2="2FA295088F" | out: lpString1="2FA295088F") returned="2FA295088F" [0038.422] lstrcatA (in: lpString1="2FA295088F", lpString2="AD" | out: lpString1="2FA295088FAD") returned="2FA295088FAD" [0038.422] LocalFree (hMem=0x6519e0) returned 0x0 [0038.422] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A6") returned 2 [0038.422] lstrlenA (lpString="2FA295088FAD") returned 12 [0038.422] lstrlenA (lpString="A6") returned 2 [0038.422] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x6519e0 [0038.422] lstrcpyA (in: lpString1=0x6519e0, lpString2="2FA295088FAD" | out: lpString1="2FA295088FAD") returned="2FA295088FAD" [0038.422] lstrcatA (in: lpString1="2FA295088FAD", lpString2="A6" | out: lpString1="2FA295088FADA6") returned="2FA295088FADA6" [0038.422] LocalFree (hMem=0x6771d8) returned 0x0 [0038.422] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F5") returned 2 [0038.423] lstrlenA (lpString="2FA295088FADA6") returned 14 [0038.423] lstrlenA (lpString="F5") returned 2 [0038.423] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66dbf0 [0038.423] lstrcpyA (in: lpString1=0x66dbf0, lpString2="2FA295088FADA6" | out: lpString1="2FA295088FADA6") returned="2FA295088FADA6" [0038.423] lstrcatA (in: lpString1="2FA295088FADA6", lpString2="F5" | out: lpString1="2FA295088FADA6F5") returned="2FA295088FADA6F5" [0038.423] LocalFree (hMem=0x6519e0) returned 0x0 [0038.423] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A8") returned 2 [0038.423] lstrlenA (lpString="2FA295088FADA6F5") returned 16 [0038.423] lstrlenA (lpString="A8") returned 2 [0038.423] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e550 [0038.423] lstrcpyA (in: lpString1=0x66e550, lpString2="2FA295088FADA6F5" | out: lpString1="2FA295088FADA6F5") returned="2FA295088FADA6F5" [0038.423] lstrcatA (in: lpString1="2FA295088FADA6F5", lpString2="A8" | out: lpString1="2FA295088FADA6F5A8") returned="2FA295088FADA6F5A8" [0038.423] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.423] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0038.423] lstrlenA (lpString="2FA295088FADA6F5A8") returned 18 [0038.423] lstrlenA (lpString="2F") returned 2 [0038.423] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e910 [0038.423] lstrcpyA (in: lpString1=0x66e910, lpString2="2FA295088FADA6F5A8" | out: lpString1="2FA295088FADA6F5A8") returned="2FA295088FADA6F5A8" [0038.423] lstrcatA (in: lpString1="2FA295088FADA6F5A8", lpString2="2F" | out: lpString1="2FA295088FADA6F5A82F") returned="2FA295088FADA6F5A82F" [0038.423] LocalFree (hMem=0x66e550) returned 0x0 [0038.423] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="86") returned 2 [0038.423] lstrlenA (lpString="2FA295088FADA6F5A82F") returned 20 [0038.423] lstrlenA (lpString="86") returned 2 [0038.423] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dd30 [0038.423] lstrcpyA (in: lpString1=0x66dd30, lpString2="2FA295088FADA6F5A82F" | out: lpString1="2FA295088FADA6F5A82F") returned="2FA295088FADA6F5A82F" [0038.423] lstrcatA (in: lpString1="2FA295088FADA6F5A82F", lpString2="86" | out: lpString1="2FA295088FADA6F5A82F86") returned="2FA295088FADA6F5A82F86" [0038.423] LocalFree (hMem=0x66e910) returned 0x0 [0038.423] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="42") returned 2 [0038.423] lstrlenA (lpString="2FA295088FADA6F5A82F86") returned 22 [0038.423] lstrlenA (lpString="42") returned 2 [0038.423] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66ff98 [0038.423] lstrcpyA (in: lpString1=0x66ff98, lpString2="2FA295088FADA6F5A82F86" | out: lpString1="2FA295088FADA6F5A82F86") returned="2FA295088FADA6F5A82F86" [0038.423] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86", lpString2="42" | out: lpString1="2FA295088FADA6F5A82F8642") returned="2FA295088FADA6F5A82F8642" [0038.423] LocalFree (hMem=0x66dd30) returned 0x0 [0038.423] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3F") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F8642") returned 24 [0038.424] lstrlenA (lpString="3F") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670040 [0038.424] lstrcpyA (in: lpString1=0x670040, lpString2="2FA295088FADA6F5A82F8642" | out: lpString1="2FA295088FADA6F5A82F8642") returned="2FA295088FADA6F5A82F8642" [0038.424] lstrcatA (in: lpString1="2FA295088FADA6F5A82F8642", lpString2="3F" | out: lpString1="2FA295088FADA6F5A82F86423F") returned="2FA295088FADA6F5A82F86423F" [0038.424] LocalFree (hMem=0x66ff98) returned 0x0 [0038.424] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F86423F") returned 26 [0038.424] lstrlenA (lpString="18") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66ff98 [0038.424] lstrcpyA (in: lpString1=0x66ff98, lpString2="2FA295088FADA6F5A82F86423F" | out: lpString1="2FA295088FADA6F5A82F86423F") returned="2FA295088FADA6F5A82F86423F" [0038.424] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F", lpString2="18" | out: lpString1="2FA295088FADA6F5A82F86423F18") returned="2FA295088FADA6F5A82F86423F18" [0038.424] LocalFree (hMem=0x670040) returned 0x0 [0038.424] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="73") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F86423F18") returned 28 [0038.424] lstrlenA (lpString="73") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0038.424] lstrcpyA (in: lpString1=0x670040, lpString2="2FA295088FADA6F5A82F86423F18" | out: lpString1="2FA295088FADA6F5A82F86423F18") returned="2FA295088FADA6F5A82F86423F18" [0038.424] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F18", lpString2="73" | out: lpString1="2FA295088FADA6F5A82F86423F1873") returned="2FA295088FADA6F5A82F86423F1873" [0038.424] LocalFree (hMem=0x66ff98) returned 0x0 [0038.424] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="87") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F86423F1873") returned 30 [0038.424] lstrlenA (lpString="87") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679838 [0038.424] lstrcpyA (in: lpString1=0x679838, lpString2="2FA295088FADA6F5A82F86423F1873" | out: lpString1="2FA295088FADA6F5A82F86423F1873") returned="2FA295088FADA6F5A82F86423F1873" [0038.424] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F1873", lpString2="87" | out: lpString1="2FA295088FADA6F5A82F86423F187387") returned="2FA295088FADA6F5A82F86423F187387" [0038.424] LocalFree (hMem=0x670040) returned 0x0 [0038.424] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D4") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F86423F187387") returned 32 [0038.424] lstrlenA (lpString="D4") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678f48 [0038.424] lstrcpyA (in: lpString1=0x678f48, lpString2="2FA295088FADA6F5A82F86423F187387" | out: lpString1="2FA295088FADA6F5A82F86423F187387") returned="2FA295088FADA6F5A82F86423F187387" [0038.424] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F187387", lpString2="D4" | out: lpString1="2FA295088FADA6F5A82F86423F187387D4") returned="2FA295088FADA6F5A82F86423F187387D4" [0038.424] LocalFree (hMem=0x679838) returned 0x0 [0038.424] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="6A") returned 2 [0038.424] lstrlenA (lpString="2FA295088FADA6F5A82F86423F187387D4") returned 34 [0038.424] lstrlenA (lpString="6A") returned 2 [0038.424] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x6790a8 [0038.424] lstrcpyA (in: lpString1=0x6790a8, lpString2="2FA295088FADA6F5A82F86423F187387D4" | out: lpString1="2FA295088FADA6F5A82F86423F187387D4") returned="2FA295088FADA6F5A82F86423F187387D4" [0038.425] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F187387D4", lpString2="6A" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A") returned="2FA295088FADA6F5A82F86423F187387D46A" [0038.425] LocalFree (hMem=0x678f48) returned 0x0 [0038.425] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="61") returned 2 [0038.425] lstrlenA (lpString="2FA295088FADA6F5A82F86423F187387D46A") returned 36 [0038.425] lstrlenA (lpString="61") returned 2 [0038.425] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678f48 [0038.425] lstrcpyA (in: lpString1=0x678f48, lpString2="2FA295088FADA6F5A82F86423F187387D46A" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A") returned="2FA295088FADA6F5A82F86423F187387D46A" [0038.425] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F187387D46A", lpString2="61" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A61") returned="2FA295088FADA6F5A82F86423F187387D46A61" [0038.425] LocalFree (hMem=0x6790a8) returned 0x0 [0038.425] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C6") returned 2 [0038.425] lstrlenA (lpString="2FA295088FADA6F5A82F86423F187387D46A61") returned 38 [0038.425] lstrlenA (lpString="C6") returned 2 [0038.425] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x6771d8 [0038.425] lstrcpyA (in: lpString1=0x6771d8, lpString2="2FA295088FADA6F5A82F86423F187387D46A61" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A61") returned="2FA295088FADA6F5A82F86423F187387D46A61" [0038.425] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F187387D46A61", lpString2="C6" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A61C6") returned="2FA295088FADA6F5A82F86423F187387D46A61C6" [0038.425] LocalFree (hMem=0x678f48) returned 0x0 [0038.425] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9A") returned 2 [0038.425] lstrlenA (lpString="2FA295088FADA6F5A82F86423F187387D46A61C6") returned 40 [0038.425] lstrlenA (lpString="9A") returned 2 [0038.425] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6519e0 [0038.425] lstrcpyA (in: lpString1=0x6519e0, lpString2="2FA295088FADA6F5A82F86423F187387D46A61C6" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A61C6") returned="2FA295088FADA6F5A82F86423F187387D46A61C6" [0038.425] lstrcatA (in: lpString1="2FA295088FADA6F5A82F86423F187387D46A61C6", lpString2="9A" | out: lpString1="2FA295088FADA6F5A82F86423F187387D46A61C69A") returned="2FA295088FADA6F5A82F86423F187387D46A61C69A" [0038.425] LocalFree (hMem=0x6771d8) returned 0x0 [0038.425] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.425] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.425] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.425] LocalFree (hMem=0x6519e0) returned 0x0 [0038.425] CoTaskMemFree (pv=0x677298) [0038.426] StrStrIW (lpFirst="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/kwJm8SY40P/QM6or.rtf", lpSrch="?") returned 0x0 [0038.426] lstrlenW (lpString="file:///C:/Users/Nd9E1FYi/Desktop/7r4iWh/kwJm8SY40P/QM6or.rtf") returned 61 [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="82") returned 2 [0038.488] lstrlenA (lpString="") returned 0 [0038.488] lstrlenA (lpString="82") returned 2 [0038.488] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x6a3370 [0038.488] lstrcpyA (in: lpString1=0x6a3370, lpString2="" | out: lpString1="") returned="" [0038.488] lstrcatA (in: lpString1="", lpString2="82" | out: lpString1="82") returned="82" [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="52") returned 2 [0038.488] lstrlenA (lpString="82") returned 2 [0038.488] lstrlenA (lpString="52") returned 2 [0038.488] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x6a35b0 [0038.488] lstrcpyA (in: lpString1=0x6a35b0, lpString2="82" | out: lpString1="82") returned="82" [0038.488] lstrcatA (in: lpString1="82", lpString2="52" | out: lpString1="8252") returned="8252" [0038.488] LocalFree (hMem=0x6a3370) returned 0x0 [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="57") returned 2 [0038.488] lstrlenA (lpString="8252") returned 4 [0038.488] lstrlenA (lpString="57") returned 2 [0038.488] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x6a39a0 [0038.488] lstrcpyA (in: lpString1=0x6a39a0, lpString2="8252" | out: lpString1="8252") returned="8252" [0038.488] lstrcatA (in: lpString1="8252", lpString2="57" | out: lpString1="825257") returned="825257" [0038.488] LocalFree (hMem=0x6a35b0) returned 0x0 [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0038.488] lstrlenA (lpString="825257") returned 6 [0038.488] lstrlenA (lpString="FF") returned 2 [0038.488] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x69aea8 [0038.488] lstrcpyA (in: lpString1=0x69aea8, lpString2="825257" | out: lpString1="825257") returned="825257" [0038.488] lstrcatA (in: lpString1="825257", lpString2="FF" | out: lpString1="825257FF") returned="825257FF" [0038.488] LocalFree (hMem=0x6a39a0) returned 0x0 [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="56") returned 2 [0038.488] lstrlenA (lpString="825257FF") returned 8 [0038.488] lstrlenA (lpString="56") returned 2 [0038.488] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x651a98 [0038.488] lstrcpyA (in: lpString1=0x651a98, lpString2="825257FF" | out: lpString1="825257FF") returned="825257FF" [0038.488] lstrcatA (in: lpString1="825257FF", lpString2="56" | out: lpString1="825257FF56") returned="825257FF56" [0038.488] LocalFree (hMem=0x69aea8) returned 0x0 [0038.488] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="4B") returned 2 [0038.488] lstrlenA (lpString="825257FF56") returned 10 [0038.489] lstrlenA (lpString="4B") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x651b30 [0038.489] lstrcpyA (in: lpString1=0x651b30, lpString2="825257FF56" | out: lpString1="825257FF56") returned="825257FF56" [0038.489] lstrcatA (in: lpString1="825257FF56", lpString2="4B" | out: lpString1="825257FF564B") returned="825257FF564B" [0038.489] LocalFree (hMem=0x651a98) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="15") returned 2 [0038.489] lstrlenA (lpString="825257FF564B") returned 12 [0038.489] lstrlenA (lpString="15") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x651a98 [0038.489] lstrcpyA (in: lpString1=0x651a98, lpString2="825257FF564B" | out: lpString1="825257FF564B") returned="825257FF564B" [0038.489] lstrcatA (in: lpString1="825257FF564B", lpString2="15" | out: lpString1="825257FF564B15") returned="825257FF564B15" [0038.489] LocalFree (hMem=0x651b30) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7D") returned 2 [0038.489] lstrlenA (lpString="825257FF564B15") returned 14 [0038.489] lstrlenA (lpString="7D") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e050 [0038.489] lstrcpyA (in: lpString1=0x66e050, lpString2="825257FF564B15" | out: lpString1="825257FF564B15") returned="825257FF564B15" [0038.489] lstrcatA (in: lpString1="825257FF564B15", lpString2="7D" | out: lpString1="825257FF564B157D") returned="825257FF564B157D" [0038.489] LocalFree (hMem=0x651a98) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="95") returned 2 [0038.489] lstrlenA (lpString="825257FF564B157D") returned 16 [0038.489] lstrlenA (lpString="95") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e870 [0038.489] lstrcpyA (in: lpString1=0x66e870, lpString2="825257FF564B157D" | out: lpString1="825257FF564B157D") returned="825257FF564B157D" [0038.489] lstrcatA (in: lpString1="825257FF564B157D", lpString2="95" | out: lpString1="825257FF564B157D95") returned="825257FF564B157D95" [0038.489] LocalFree (hMem=0x66e050) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F0") returned 2 [0038.489] lstrlenA (lpString="825257FF564B157D95") returned 18 [0038.489] lstrlenA (lpString="F0") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e4b0 [0038.489] lstrcpyA (in: lpString1=0x66e4b0, lpString2="825257FF564B157D95" | out: lpString1="825257FF564B157D95") returned="825257FF564B157D95" [0038.489] lstrcatA (in: lpString1="825257FF564B157D95", lpString2="F0" | out: lpString1="825257FF564B157D95F0") returned="825257FF564B157D95F0" [0038.489] LocalFree (hMem=0x66e870) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="C9") returned 2 [0038.489] lstrlenA (lpString="825257FF564B157D95F0") returned 20 [0038.489] lstrlenA (lpString="C9") returned 2 [0038.489] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e730 [0038.489] lstrcpyA (in: lpString1=0x66e730, lpString2="825257FF564B157D95F0" | out: lpString1="825257FF564B157D95F0") returned="825257FF564B157D95F0" [0038.489] lstrcatA (in: lpString1="825257FF564B157D95F0", lpString2="C9" | out: lpString1="825257FF564B157D95F0C9") returned="825257FF564B157D95F0C9" [0038.489] LocalFree (hMem=0x66e4b0) returned 0x0 [0038.489] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="13") returned 2 [0038.489] lstrlenA (lpString="825257FF564B157D95F0C9") returned 22 [0038.489] lstrlenA (lpString="13") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670f58 [0038.490] lstrcpyA (in: lpString1=0x670f58, lpString2="825257FF564B157D95F0C9" | out: lpString1="825257FF564B157D95F0C9") returned="825257FF564B157D95F0C9" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C9", lpString2="13" | out: lpString1="825257FF564B157D95F0C913") returned="825257FF564B157D95F0C913" [0038.490] LocalFree (hMem=0x66e730) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="60") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C913") returned 24 [0038.490] lstrlenA (lpString="60") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66fda0 [0038.490] lstrcpyA (in: lpString1=0x66fda0, lpString2="825257FF564B157D95F0C913" | out: lpString1="825257FF564B157D95F0C913") returned="825257FF564B157D95F0C913" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C913", lpString2="60" | out: lpString1="825257FF564B157D95F0C91360") returned="825257FF564B157D95F0C91360" [0038.490] LocalFree (hMem=0x670f58) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="89") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C91360") returned 26 [0038.490] lstrlenA (lpString="89") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670a18 [0038.490] lstrcpyA (in: lpString1=0x670a18, lpString2="825257FF564B157D95F0C91360" | out: lpString1="825257FF564B157D95F0C91360") returned="825257FF564B157D95F0C91360" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C91360", lpString2="89" | out: lpString1="825257FF564B157D95F0C9136089") returned="825257FF564B157D95F0C9136089" [0038.490] LocalFree (hMem=0x66fda0) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="B3") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C9136089") returned 28 [0038.490] lstrlenA (lpString="B3") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0038.490] lstrcpyA (in: lpString1=0x66ff98, lpString2="825257FF564B157D95F0C9136089" | out: lpString1="825257FF564B157D95F0C9136089") returned="825257FF564B157D95F0C9136089" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089", lpString2="B3" | out: lpString1="825257FF564B157D95F0C9136089B3") returned="825257FF564B157D95F0C9136089B3" [0038.490] LocalFree (hMem=0x670a18) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A4") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C9136089B3") returned 30 [0038.490] lstrlenA (lpString="A4") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679418 [0038.490] lstrcpyA (in: lpString1=0x679418, lpString2="825257FF564B157D95F0C9136089B3" | out: lpString1="825257FF564B157D95F0C9136089B3") returned="825257FF564B157D95F0C9136089B3" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3", lpString2="A4" | out: lpString1="825257FF564B157D95F0C9136089B3A4") returned="825257FF564B157D95F0C9136089B3A4" [0038.490] LocalFree (hMem=0x66ff98) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="73") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C9136089B3A4") returned 32 [0038.490] lstrlenA (lpString="73") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x6794c8 [0038.490] lstrcpyA (in: lpString1=0x6794c8, lpString2="825257FF564B157D95F0C9136089B3A4" | out: lpString1="825257FF564B157D95F0C9136089B3A4") returned="825257FF564B157D95F0C9136089B3A4" [0038.490] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3A4", lpString2="73" | out: lpString1="825257FF564B157D95F0C9136089B3A473") returned="825257FF564B157D95F0C9136089B3A473" [0038.490] LocalFree (hMem=0x679418) returned 0x0 [0038.490] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="66") returned 2 [0038.490] lstrlenA (lpString="825257FF564B157D95F0C9136089B3A473") returned 34 [0038.490] lstrlenA (lpString="66") returned 2 [0038.490] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679838 [0038.491] lstrcpyA (in: lpString1=0x679838, lpString2="825257FF564B157D95F0C9136089B3A473" | out: lpString1="825257FF564B157D95F0C9136089B3A473") returned="825257FF564B157D95F0C9136089B3A473" [0038.491] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3A473", lpString2="66" | out: lpString1="825257FF564B157D95F0C9136089B3A47366") returned="825257FF564B157D95F0C9136089B3A47366" [0038.491] LocalFree (hMem=0x6794c8) returned 0x0 [0038.491] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="A8") returned 2 [0038.491] lstrlenA (lpString="825257FF564B157D95F0C9136089B3A47366") returned 36 [0038.491] lstrlenA (lpString="A8") returned 2 [0038.491] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678de8 [0038.491] lstrcpyA (in: lpString1=0x678de8, lpString2="825257FF564B157D95F0C9136089B3A47366" | out: lpString1="825257FF564B157D95F0C9136089B3A47366") returned="825257FF564B157D95F0C9136089B3A47366" [0038.491] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3A47366", lpString2="A8" | out: lpString1="825257FF564B157D95F0C9136089B3A47366A8") returned="825257FF564B157D95F0C9136089B3A47366A8" [0038.491] LocalFree (hMem=0x679838) returned 0x0 [0038.491] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="18") returned 2 [0038.491] lstrlenA (lpString="825257FF564B157D95F0C9136089B3A47366A8") returned 38 [0038.491] lstrlenA (lpString="18") returned 2 [0038.491] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69aea8 [0038.491] lstrcpyA (in: lpString1=0x69aea8, lpString2="825257FF564B157D95F0C9136089B3A47366A8" | out: lpString1="825257FF564B157D95F0C9136089B3A47366A8") returned="825257FF564B157D95F0C9136089B3A47366A8" [0038.491] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3A47366A8", lpString2="18" | out: lpString1="825257FF564B157D95F0C9136089B3A47366A818") returned="825257FF564B157D95F0C9136089B3A47366A818" [0038.491] LocalFree (hMem=0x678de8) returned 0x0 [0038.491] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="97") returned 2 [0038.491] lstrlenA (lpString="825257FF564B157D95F0C9136089B3A47366A818") returned 40 [0038.491] lstrlenA (lpString="97") returned 2 [0038.491] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x651a98 [0038.491] lstrcpyA (in: lpString1=0x651a98, lpString2="825257FF564B157D95F0C9136089B3A47366A818" | out: lpString1="825257FF564B157D95F0C9136089B3A47366A818") returned="825257FF564B157D95F0C9136089B3A47366A818" [0038.491] lstrcatA (in: lpString1="825257FF564B157D95F0C9136089B3A47366A818", lpString2="97" | out: lpString1="825257FF564B157D95F0C9136089B3A47366A81897") returned="825257FF564B157D95F0C9136089B3A47366A81897" [0038.491] LocalFree (hMem=0x69aea8) returned 0x0 [0038.491] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.491] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.491] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.491] LocalFree (hMem=0x651a98) returned 0x0 [0038.491] CoTaskMemFree (pv=0x668738) [0038.492] IUnknown:Release (This=0x657098) returned 0x1 [0038.492] lstrlenW (lpString="http://www.facebook.com/") returned 24 [0038.537] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F6") returned 2 [0038.537] lstrlenA (lpString="") returned 0 [0038.537] lstrlenA (lpString="F6") returned 2 [0038.537] LocalAlloc (uFlags=0x40, uBytes=0x83) returned 0x66f678 [0038.537] lstrcpyA (in: lpString1=0x66f678, lpString2="" | out: lpString1="") returned="" [0038.537] lstrcatA (in: lpString1="", lpString2="F6" | out: lpString1="F6") returned="F6" [0038.537] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="FF") returned 2 [0038.537] lstrlenA (lpString="F6") returned 2 [0038.537] lstrlenA (lpString="FF") returned 2 [0038.537] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66fc18 [0038.537] lstrcpyA (in: lpString1=0x66fc18, lpString2="F6" | out: lpString1="F6") returned="F6" [0038.537] lstrcatA (in: lpString1="F6", lpString2="FF" | out: lpString1="F6FF") returned="F6FF" [0038.537] LocalFree (hMem=0x66f678) returned 0x0 [0038.537] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E3") returned 2 [0038.537] lstrlenA (lpString="F6FF") returned 4 [0038.537] lstrlenA (lpString="E3") returned 2 [0038.537] LocalAlloc (uFlags=0x40, uBytes=0x87) returned 0x66f0d8 [0038.537] lstrcpyA (in: lpString1=0x66f0d8, lpString2="F6FF" | out: lpString1="F6FF") returned="F6FF" [0038.538] lstrcatA (in: lpString1="F6FF", lpString2="E3" | out: lpString1="F6FFE3") returned="F6FFE3" [0038.538] LocalFree (hMem=0x66fc18) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="3B") returned 2 [0038.538] lstrlenA (lpString="F6FFE3") returned 6 [0038.538] lstrlenA (lpString="3B") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x89) returned 0x69aea8 [0038.538] lstrcpyA (in: lpString1=0x69aea8, lpString2="F6FFE3" | out: lpString1="F6FFE3") returned="F6FFE3" [0038.538] lstrcatA (in: lpString1="F6FFE3", lpString2="3B" | out: lpString1="F6FFE33B") returned="F6FFE33B" [0038.538] LocalFree (hMem=0x66f0d8) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="9E") returned 2 [0038.538] lstrlenA (lpString="F6FFE33B") returned 8 [0038.538] lstrlenA (lpString="9E") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x8b) returned 0x6519e0 [0038.538] lstrcpyA (in: lpString1=0x6519e0, lpString2="F6FFE33B" | out: lpString1="F6FFE33B") returned="F6FFE33B" [0038.538] lstrcatA (in: lpString1="F6FFE33B", lpString2="9E" | out: lpString1="F6FFE33B9E") returned="F6FFE33B9E" [0038.538] LocalFree (hMem=0x69aea8) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F4") returned 2 [0038.538] lstrlenA (lpString="F6FFE33B9E") returned 10 [0038.538] lstrlenA (lpString="F4") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69aea8 [0038.538] lstrcpyA (in: lpString1=0x69aea8, lpString2="F6FFE33B9E" | out: lpString1="F6FFE33B9E") returned="F6FFE33B9E" [0038.538] lstrcatA (in: lpString1="F6FFE33B9E", lpString2="F4" | out: lpString1="F6FFE33B9EF4") returned="F6FFE33B9EF4" [0038.538] LocalFree (hMem=0x6519e0) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="D7") returned 2 [0038.538] lstrlenA (lpString="F6FFE33B9EF4") returned 12 [0038.538] lstrlenA (lpString="D7") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x8f) returned 0x6519e0 [0038.538] lstrcpyA (in: lpString1=0x6519e0, lpString2="F6FFE33B9EF4" | out: lpString1="F6FFE33B9EF4") returned="F6FFE33B9EF4" [0038.538] lstrcatA (in: lpString1="F6FFE33B9EF4", lpString2="D7" | out: lpString1="F6FFE33B9EF4D7") returned="F6FFE33B9EF4D7" [0038.538] LocalFree (hMem=0x69aea8) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="CB") returned 2 [0038.538] lstrlenA (lpString="F6FFE33B9EF4D7") returned 14 [0038.538] lstrlenA (lpString="CB") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66dbf0 [0038.538] lstrcpyA (in: lpString1=0x66dbf0, lpString2="F6FFE33B9EF4D7" | out: lpString1="F6FFE33B9EF4D7") returned="F6FFE33B9EF4D7" [0038.538] lstrcatA (in: lpString1="F6FFE33B9EF4D7", lpString2="CB" | out: lpString1="F6FFE33B9EF4D7CB") returned="F6FFE33B9EF4D7CB" [0038.538] LocalFree (hMem=0x6519e0) returned 0x0 [0038.538] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="8F") returned 2 [0038.538] lstrlenA (lpString="F6FFE33B9EF4D7CB") returned 16 [0038.538] lstrlenA (lpString="8F") returned 2 [0038.538] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e7d0 [0038.539] lstrcpyA (in: lpString1=0x66e7d0, lpString2="F6FFE33B9EF4D7CB" | out: lpString1="F6FFE33B9EF4D7CB") returned="F6FFE33B9EF4D7CB" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB", lpString2="8F" | out: lpString1="F6FFE33B9EF4D7CB8F") returned="F6FFE33B9EF4D7CB8F" [0038.539] LocalFree (hMem=0x66dbf0) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="5A") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F") returned 18 [0038.539] lstrlenA (lpString="5A") returned 2 [0038.539] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e050 [0038.539] lstrcpyA (in: lpString1=0x66e050, lpString2="F6FFE33B9EF4D7CB8F" | out: lpString1="F6FFE33B9EF4D7CB8F") returned="F6FFE33B9EF4D7CB8F" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F", lpString2="5A" | out: lpString1="F6FFE33B9EF4D7CB8F5A") returned="F6FFE33B9EF4D7CB8F5A" [0038.539] LocalFree (hMem=0x66e7d0) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2F") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A") returned 20 [0038.539] lstrlenA (lpString="2F") returned 2 [0038.539] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e730 [0038.539] lstrcpyA (in: lpString1=0x66e730, lpString2="F6FFE33B9EF4D7CB8F5A" | out: lpString1="F6FFE33B9EF4D7CB8F5A") returned="F6FFE33B9EF4D7CB8F5A" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A", lpString2="2F" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F") returned="F6FFE33B9EF4D7CB8F5A2F" [0038.539] LocalFree (hMem=0x66e050) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="41") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F") returned 22 [0038.539] lstrlenA (lpString="41") returned 2 [0038.539] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fda0 [0038.539] lstrcpyA (in: lpString1=0x66fda0, lpString2="F6FFE33B9EF4D7CB8F5A2F" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F") returned="F6FFE33B9EF4D7CB8F5A2F" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F", lpString2="41" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41") returned="F6FFE33B9EF4D7CB8F5A2F41" [0038.539] LocalFree (hMem=0x66e730) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="F3") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41") returned 24 [0038.539] lstrlenA (lpString="F3") returned 2 [0038.539] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66fe48 [0038.539] lstrcpyA (in: lpString1=0x66fe48, lpString2="F6FFE33B9EF4D7CB8F5A2F41" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41") returned="F6FFE33B9EF4D7CB8F5A2F41" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41", lpString2="F3" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3") returned="F6FFE33B9EF4D7CB8F5A2F41F3" [0038.539] LocalFree (hMem=0x66fda0) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="22") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3") returned 26 [0038.539] lstrlenA (lpString="22") returned 2 [0038.539] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6702e0 [0038.539] lstrcpyA (in: lpString1=0x6702e0, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3") returned="F6FFE33B9EF4D7CB8F5A2F41F3" [0038.539] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3", lpString2="22" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F322") returned="F6FFE33B9EF4D7CB8F5A2F41F322" [0038.539] LocalFree (hMem=0x66fe48) returned 0x0 [0038.539] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="2D") returned 2 [0038.539] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F322") returned 28 [0038.540] lstrlenA (lpString="2D") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0038.540] lstrcpyA (in: lpString1=0x66ff98, lpString2="F6FFE33B9EF4D7CB8F5A2F41F322" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F322") returned="F6FFE33B9EF4D7CB8F5A2F41F322" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F322", lpString2="2D" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D" [0038.540] LocalFree (hMem=0x6702e0) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="21") returned 2 [0038.540] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D") returned 30 [0038.540] lstrlenA (lpString="21") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678d38 [0038.540] lstrcpyA (in: lpString1=0x678d38, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D", lpString2="21" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21" [0038.540] LocalFree (hMem=0x66ff98) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="E1") returned 2 [0038.540] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D21") returned 32 [0038.540] lstrlenA (lpString="E1") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x679af8 [0038.540] lstrcpyA (in: lpString1=0x679af8, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D21" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21", lpString2="E1" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1" [0038.540] LocalFree (hMem=0x678d38) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="31") returned 2 [0038.540] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1") returned 34 [0038.540] lstrlenA (lpString="31") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0xa5) returned 0x679998 [0038.540] lstrcpyA (in: lpString1=0x679998, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E1", lpString2="31" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131" [0038.540] LocalFree (hMem=0x679af8) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="ED") returned 2 [0038.540] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131") returned 36 [0038.540] lstrlenA (lpString="ED") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679158 [0038.540] lstrcpyA (in: lpString1=0x679158, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131", lpString2="ED" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED" [0038.540] LocalFree (hMem=0x679998) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="78") returned 2 [0038.540] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED") returned 38 [0038.540] lstrlenA (lpString="78") returned 2 [0038.540] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69aea8 [0038.540] lstrcpyA (in: lpString1=0x69aea8, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED" [0038.540] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED", lpString2="78" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78" [0038.540] LocalFree (hMem=0x679158) returned 0x0 [0038.540] wsprintfA (in: param_1=0x19fe60, param_2="%02X" | out: param_1="7A") returned 2 [0038.541] lstrlenA (lpString="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78") returned 40 [0038.541] lstrlenA (lpString="7A") returned 2 [0038.541] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6519e0 [0038.541] lstrcpyA (in: lpString1=0x6519e0, lpString2="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78" [0038.541] lstrcatA (in: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED78", lpString2="7A" | out: lpString1="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED787A") returned="F6FFE33B9EF4D7CB8F5A2F41F3222D21E131ED787A" [0038.541] LocalFree (hMem=0x69aea8) returned 0x0 [0038.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fdfc | out: phkResult=0x19fdfc*=0x0) returned 0x2 [0038.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fdd0 | out: phkResult=0x19fdd0*=0x0) returned 0x2 [0038.541] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fda4 | out: phkResult=0x19fda4*=0x0) returned 0x2 [0038.541] LocalFree (hMem=0x6519e0) returned 0x0 [0038.541] CredEnumerateA (in: Filter="Microsoft_WinInet_*", Flags=0x0, Count=0x19fecc, Credential=0x19fed0 | out: Count=0x19fecc, Credential=0x19fed0) returned 0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.544] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.544] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.544] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.544] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0038.545] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0038.545] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x30, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0038.545] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0038.545] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Adobe\\Common", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0038.545] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.545] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.545] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0038.545] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.545] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.545] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0038.545] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.546] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.546] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0038.546] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0038.546] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x31, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0038.546] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0038.546] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="DeluxeFTP") returned 0x0 [0038.546] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="DeluxeFTP") returned 0x0 [0038.546] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.546] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.547] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0038.547] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0038.547] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0038.547] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0038.547] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.547] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0038.547] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0038.547] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0038.547] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x32, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0038.547] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0038.547] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0038.547] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0038.547] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0038.547] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0038.547] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69aea8 [0038.547] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0038.547] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" [0038.547] LocalFree (hMem=0x6519e0) returned 0x0 [0038.547] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned 47 [0038.548] lstrlenA (lpString="\\*.*") returned 4 [0038.548] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x6519e0 [0038.548] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" [0038.548] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*" [0038.548] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0038.548] LocalFree (hMem=0x6519e0) returned 0x0 [0038.548] LocalFree (hMem=0x69aea8) returned 0x0 [0038.548] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0038.548] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0038.548] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0038.548] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0038.548] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69aea8 [0038.548] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0038.548] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" [0038.548] LocalFree (hMem=0x6519e0) returned 0x0 [0038.548] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned 47 [0038.548] lstrlenA (lpString="\\*.*") returned 4 [0038.548] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x6519e0 [0038.548] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome" [0038.548] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*" [0038.548] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0038.548] LocalFree (hMem=0x6519e0) returned 0x0 [0038.548] LocalFree (hMem=0x69aea8) returned 0x0 [0038.548] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0038.548] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0038.548] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0038.549] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0038.549] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69aea8 [0038.549] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0038.549] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0038.549] LocalFree (hMem=0x6519e0) returned 0x0 [0038.549] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned 45 [0038.549] lstrlenA (lpString="\\*.*") returned 4 [0038.549] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x6519e0 [0038.549] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0038.549] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*" [0038.549] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0x690228 [0038.599] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.599] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 1 [0038.599] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.599] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.599] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 1 [0038.599] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0038.600] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0038.600] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned 45 [0038.600] lstrlenA (lpString="\\") returned 1 [0038.600] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x651aa0 [0038.600] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0038.600] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" [0038.600] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned 46 [0038.600] lstrlenA (lpString="User Data") returned 9 [0038.600] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69de98 [0038.600] lstrcpyA (in: lpString1=0x69de98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" [0038.601] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0038.601] LocalFree (hMem=0x651aa0) returned 0x0 [0038.601] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0038.601] lstrlenA (lpString="\\*.*") returned 4 [0038.601] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x6631b0 [0038.601] lstrcpyA (in: lpString1=0x6631b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0038.601] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0038.601] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 0x690168 [0038.606] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.606] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0038.607] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.607] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.607] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0038.607] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0038.607] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0038.607] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0038.607] lstrlenA (lpString="\\") returned 1 [0038.607] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663278 [0038.607] lstrcpyA (in: lpString1=0x663278, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0038.607] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.607] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0038.607] lstrlenA (lpString="CertificateTransparency") returned 23 [0038.607] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0038.607] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.607] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0038.607] LocalFree (hMem=0x663278) returned 0x0 [0038.607] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 79 [0038.607] lstrlenA (lpString="\\*.*") returned 4 [0038.608] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0038.608] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0038.608] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0038.608] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690268 [0038.609] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.609] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.609] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.609] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.609] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0038.609] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.609] LocalFree (hMem=0x69df58) returned 0x0 [0038.609] LocalFree (hMem=0x651aa0) returned 0x0 [0038.610] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0038.610] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0038.610] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0038.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0038.610] lstrlenA (lpString="\\") returned 1 [0038.610] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6638b8 [0038.610] lstrcpyA (in: lpString1=0x6638b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0038.610] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0038.610] lstrlenA (lpString="Crashpad") returned 8 [0038.610] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fec8 [0038.610] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.610] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0038.610] LocalFree (hMem=0x6638b8) returned 0x0 [0038.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 64 [0038.610] lstrlenA (lpString="\\*.*") returned 4 [0038.611] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x69fd28 [0038.611] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0038.611] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0038.611] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690068 [0038.612] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.612] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.612] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.612] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.612] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.612] StrStrIA (lpFirst="metadata", lpSrch="Web Data") returned 0x0 [0038.612] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.613] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0038.613] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0038.613] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 64 [0038.613] lstrlenA (lpString="\\") returned 1 [0038.613] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x6a0068 [0038.613] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0038.613] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0038.613] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 65 [0038.613] lstrlenA (lpString="reports") returned 7 [0038.613] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x651aa0 [0038.613] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0038.613] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0038.613] LocalFree (hMem=0x6a0068) returned 0x0 [0038.613] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 72 [0038.613] lstrlenA (lpString="\\*.*") returned 4 [0038.613] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x69df58 [0038.613] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0038.613] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0038.614] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6901a8 [0038.615] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.615] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.615] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.615] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.615] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.615] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0038.615] LocalFree (hMem=0x69df58) returned 0x0 [0038.615] LocalFree (hMem=0x651aa0) returned 0x0 [0038.615] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.615] StrStrIA (lpFirst="settings.dat", lpSrch="Web Data") returned 0x0 [0038.616] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0038.616] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0038.616] LocalFree (hMem=0x69fd28) returned 0x0 [0038.616] LocalFree (hMem=0x69fec8) returned 0x0 [0038.616] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0038.616] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Web Data") returned 0x0 [0038.616] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0038.616] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0038.616] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0038.616] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0038.616] lstrlenA (lpString="\\") returned 1 [0038.616] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663278 [0038.616] lstrcpyA (in: lpString1=0x663278, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0038.616] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.616] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0038.616] lstrlenA (lpString="Default") returned 7 [0038.616] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x663340 [0038.616] lstrcpyA (in: lpString1=0x663340, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0038.616] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.617] LocalFree (hMem=0x663278) returned 0x0 [0038.617] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.617] lstrlenA (lpString="\\*.*") returned 4 [0038.617] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x6a0068 [0038.617] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.617] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0038.617] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690428 [0038.619] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.619] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.621] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.621] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.621] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.621] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0038.621] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0038.621] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.621] lstrlenA (lpString="\\") returned 1 [0038.621] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0038.621] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.621] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.621] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.621] lstrlenA (lpString="Cache") returned 5 [0038.621] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x69fd28 [0038.621] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.621] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0038.622] LocalFree (hMem=0x6a0138) returned 0x0 [0038.622] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 69 [0038.622] lstrlenA (lpString="\\*.*") returned 4 [0038.622] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0038.622] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0038.622] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0038.622] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6901e8 [0038.625] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.625] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="data_0", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="data_1", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="data_2", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="data_3", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="f_000001", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.625] StrStrIA (lpFirst="f_000002", lpSrch="Web Data") returned 0x0 [0038.625] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000003", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000004", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000005", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000006", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000007", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000008", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_000009", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_00000a", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_00000b", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_00000c", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_00000d", lpSrch="Web Data") returned 0x0 [0038.626] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.626] StrStrIA (lpFirst="f_00000e", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.627] StrStrIA (lpFirst="f_00000f", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.627] StrStrIA (lpFirst="f_000010", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.627] StrStrIA (lpFirst="f_000011", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.627] StrStrIA (lpFirst="f_000012", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.627] StrStrIA (lpFirst="index", lpSrch="Web Data") returned 0x0 [0038.627] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.627] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0038.628] LocalFree (hMem=0x651aa0) returned 0x0 [0038.628] LocalFree (hMem=0x69fd28) returned 0x0 [0038.628] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.628] StrStrIA (lpFirst="Cookies", lpSrch="Web Data") returned 0x0 [0038.628] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.628] StrStrIA (lpFirst="Cookies-journal", lpSrch="Web Data") returned 0x0 [0038.628] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.628] StrStrIA (lpFirst="Current Session", lpSrch="Web Data") returned 0x0 [0038.628] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.629] StrStrIA (lpFirst="Current Tabs", lpSrch="Web Data") returned 0x0 [0038.629] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.629] lstrcmpiA (lpString1=".", lpString2="databases") returned -1 [0038.629] lstrcmpiA (lpString1="..", lpString2="databases") returned -1 [0038.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.629] lstrlenA (lpString="\\") returned 1 [0038.629] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fdf8 [0038.629] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.629] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.629] lstrlenA (lpString="databases") returned 9 [0038.629] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0038.629] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.629] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="databases" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" [0038.629] LocalFree (hMem=0x69fdf8) returned 0x0 [0038.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned 73 [0038.629] lstrlenA (lpString="\\*.*") returned 4 [0038.629] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69df58 [0038.630] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" [0038.630] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*" [0038.630] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6901a8 [0038.632] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.632] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.632] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.632] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.632] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.632] StrStrIA (lpFirst="Databases.db", lpSrch="Web Data") returned 0x0 [0038.632] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.632] StrStrIA (lpFirst="Databases.db-journal", lpSrch="Web Data") returned 0x0 [0038.633] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.633] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0038.633] LocalFree (hMem=0x69df58) returned 0x0 [0038.633] LocalFree (hMem=0x651aa0) returned 0x0 [0038.633] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.633] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0038.633] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0038.633] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.633] lstrlenA (lpString="\\") returned 1 [0038.633] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0038.633] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.633] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.633] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.633] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0038.633] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x651aa0 [0038.634] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.634] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0038.634] LocalFree (hMem=0x6a0138) returned 0x0 [0038.634] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 92 [0038.634] lstrlenA (lpString="\\*.*") returned 4 [0038.634] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x6741c0 [0038.634] lstrcpyA (in: lpString1=0x6741c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0038.634] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0038.634] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x68ff68 [0038.636] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.636] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.636] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.636] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.636] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.636] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0038.637] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.637] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0038.637] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.637] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0038.637] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.637] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0038.637] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.637] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Web Data") returned 0x0 [0038.637] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.637] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0038.638] LocalFree (hMem=0x6741c0) returned 0x0 [0038.638] LocalFree (hMem=0x651aa0) returned 0x0 [0038.638] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.638] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0038.638] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0038.638] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.638] lstrlenA (lpString="\\") returned 1 [0038.638] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0038.638] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.638] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.638] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.638] lstrlenA (lpString="Extension Rules") returned 15 [0038.638] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0038.638] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.639] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0038.639] LocalFree (hMem=0x69fd28) returned 0x0 [0038.639] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 79 [0038.639] lstrlenA (lpString="\\*.*") returned 4 [0038.639] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0038.639] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0038.639] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0038.639] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x68ff68 [0038.680] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.680] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.681] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.681] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0038.681] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.681] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0038.682] LocalFree (hMem=0x69df58) returned 0x0 [0038.682] LocalFree (hMem=0x651aa0) returned 0x0 [0038.682] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.682] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0038.682] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0038.682] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.682] lstrlenA (lpString="\\") returned 1 [0038.682] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fec8 [0038.683] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.683] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.683] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.683] lstrlenA (lpString="Extension State") returned 15 [0038.683] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0038.683] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.683] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0038.683] LocalFree (hMem=0x69fec8) returned 0x0 [0038.683] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 79 [0038.683] lstrlenA (lpString="\\*.*") returned 4 [0038.683] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0038.683] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0038.683] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0038.683] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6904a8 [0038.685] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.685] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.685] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.685] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.685] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.685] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0038.685] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.686] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0038.686] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.686] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0038.686] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.686] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0038.686] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.686] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0038.686] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0038.686] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0038.687] LocalFree (hMem=0x69df58) returned 0x0 [0038.687] LocalFree (hMem=0x651aa0) returned 0x0 [0038.687] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0038.687] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0038.687] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0038.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0038.687] lstrlenA (lpString="\\") returned 1 [0038.687] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69ff98 [0038.687] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0038.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0038.687] lstrlenA (lpString="Extensions") returned 10 [0038.687] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x651aa0 [0038.687] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0038.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0038.687] LocalFree (hMem=0x69ff98) returned 0x0 [0038.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0038.687] lstrlenA (lpString="\\*.*") returned 4 [0038.687] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x69df58 [0038.687] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0038.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0038.687] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690668 [0038.689] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.689] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.690] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.690] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.690] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.690] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0038.690] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0038.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0038.690] lstrlenA (lpString="\\") returned 1 [0038.690] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0038.690] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0038.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0038.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0038.690] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0038.690] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0038.690] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0038.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0038.690] LocalFree (hMem=0x69e030) returned 0x0 [0038.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 107 [0038.690] lstrlenA (lpString="\\*.*") returned 4 [0038.690] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0038.690] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0038.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0038.690] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690528 [0038.695] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.695] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0038.695] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.695] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.695] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0038.695] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0038.695] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0038.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 107 [0038.696] lstrlenA (lpString="\\") returned 1 [0038.696] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0038.696] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0038.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0038.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 108 [0038.696] lstrlenA (lpString="0.9_0") returned 5 [0038.696] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x665bc8 [0038.696] lstrcpyA (in: lpString1=0x665bc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0038.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0038.696] LocalFree (hMem=0x6772d0) returned 0x0 [0038.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 113 [0038.696] lstrlenA (lpString="\\*.*") returned 4 [0038.696] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x663dc8 [0038.696] lstrcpyA (in: lpString1=0x663dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0038.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0038.696] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6900a8 [0038.698] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.698] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0038.698] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.698] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0038.699] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0038.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 113 [0038.699] lstrlenA (lpString="\\") returned 1 [0038.699] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6654c8 [0038.699] lstrcpyA (in: lpString1=0x6654c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0038.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0038.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 114 [0038.699] lstrlenA (lpString="_locales") returned 8 [0038.699] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0038.699] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0038.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.699] LocalFree (hMem=0x6654c8) returned 0x0 [0038.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.699] lstrlenA (lpString="\\*.*") returned 4 [0038.699] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0038.699] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0038.699] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690068 [0038.701] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.701] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.702] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.702] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.702] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.702] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0038.702] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0038.702] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.702] lstrlenA (lpString="\\") returned 1 [0038.702] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.702] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.702] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.702] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.702] lstrlenA (lpString="ar") returned 2 [0038.702] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.702] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.702] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0038.702] LocalFree (hMem=0x6774e0) returned 0x0 [0038.702] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 125 [0038.702] lstrlenA (lpString="\\*.*") returned 4 [0038.702] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.702] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0038.702] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0038.702] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.703] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.703] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.703] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.703] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.703] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.703] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.703] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.703] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.703] LocalFree (hMem=0x6776f0) returned 0x0 [0038.703] LocalFree (hMem=0x6775e8) returned 0x0 [0038.703] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.703] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0038.703] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0038.703] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.703] lstrlenA (lpString="\\") returned 1 [0038.703] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.703] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.704] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.704] lstrlenA (lpString="bg") returned 2 [0038.704] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.704] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0038.704] LocalFree (hMem=0x6774e0) returned 0x0 [0038.704] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 125 [0038.704] lstrlenA (lpString="\\*.*") returned 4 [0038.704] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.704] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0038.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0038.704] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0038.704] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.704] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.704] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.704] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.704] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.704] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.704] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.704] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0038.705] LocalFree (hMem=0x6776f0) returned 0x0 [0038.705] LocalFree (hMem=0x6775e8) returned 0x0 [0038.705] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.705] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0038.705] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0038.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.705] lstrlenA (lpString="\\") returned 1 [0038.705] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.705] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.705] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.705] lstrlenA (lpString="ca") returned 2 [0038.705] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.705] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.705] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0038.705] LocalFree (hMem=0x6774e0) returned 0x0 [0038.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 125 [0038.705] lstrlenA (lpString="\\*.*") returned 4 [0038.706] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.706] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0038.706] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0038.706] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.706] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.706] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.706] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.706] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.707] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.707] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.707] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.707] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.707] LocalFree (hMem=0x6776f0) returned 0x0 [0038.707] LocalFree (hMem=0x6775e8) returned 0x0 [0038.707] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.707] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0038.707] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0038.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.707] lstrlenA (lpString="\\") returned 1 [0038.707] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.707] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.707] lstrlenA (lpString="cs") returned 2 [0038.707] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.707] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0038.707] LocalFree (hMem=0x6774e0) returned 0x0 [0038.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 125 [0038.707] lstrlenA (lpString="\\*.*") returned 4 [0038.707] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.707] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0038.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0038.707] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0038.708] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.708] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.708] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.708] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.708] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.708] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.708] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.708] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0038.708] LocalFree (hMem=0x6776f0) returned 0x0 [0038.708] LocalFree (hMem=0x6775e8) returned 0x0 [0038.708] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.708] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0038.708] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0038.708] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.708] lstrlenA (lpString="\\") returned 1 [0038.708] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.708] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.708] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.708] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.709] lstrlenA (lpString="da") returned 2 [0038.709] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.709] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.709] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0038.709] LocalFree (hMem=0x6774e0) returned 0x0 [0038.709] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 125 [0038.709] lstrlenA (lpString="\\*.*") returned 4 [0038.709] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.709] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0038.709] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0038.709] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0038.710] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.710] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.710] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.710] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.710] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.710] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.710] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.710] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0038.710] LocalFree (hMem=0x6776f0) returned 0x0 [0038.710] LocalFree (hMem=0x6775e8) returned 0x0 [0038.710] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.710] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0038.710] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0038.710] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.710] lstrlenA (lpString="\\") returned 1 [0038.710] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.710] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.710] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.710] lstrlenA (lpString="de") returned 2 [0038.710] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.710] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0038.711] LocalFree (hMem=0x6774e0) returned 0x0 [0038.711] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 125 [0038.711] lstrlenA (lpString="\\*.*") returned 4 [0038.711] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.711] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0038.711] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0038.711] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.711] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.711] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.711] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.711] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.711] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.712] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.712] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.712] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.712] LocalFree (hMem=0x6776f0) returned 0x0 [0038.712] LocalFree (hMem=0x6775e8) returned 0x0 [0038.712] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.712] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0038.712] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0038.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.712] lstrlenA (lpString="\\") returned 1 [0038.712] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.712] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.712] lstrlenA (lpString="el") returned 2 [0038.712] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.712] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0038.712] LocalFree (hMem=0x6774e0) returned 0x0 [0038.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 125 [0038.712] lstrlenA (lpString="\\*.*") returned 4 [0038.712] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.712] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0038.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0038.712] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.713] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.713] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.713] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.713] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.713] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.713] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.713] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.714] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.714] LocalFree (hMem=0x6776f0) returned 0x0 [0038.714] LocalFree (hMem=0x6775e8) returned 0x0 [0038.714] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.714] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0038.714] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0038.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.714] lstrlenA (lpString="\\") returned 1 [0038.714] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.714] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.714] lstrlenA (lpString="en_GB") returned 5 [0038.714] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.714] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0038.714] LocalFree (hMem=0x6774e0) returned 0x0 [0038.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 128 [0038.714] lstrlenA (lpString="\\*.*") returned 4 [0038.714] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.714] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0038.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0038.714] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0038.715] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.715] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.715] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.715] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.715] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.715] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.715] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.715] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0038.715] LocalFree (hMem=0x6776f8) returned 0x0 [0038.715] LocalFree (hMem=0x6775e8) returned 0x0 [0038.715] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.715] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0038.715] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0038.715] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.715] lstrlenA (lpString="\\") returned 1 [0038.715] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.715] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.715] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.715] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.715] lstrlenA (lpString="en_US") returned 5 [0038.715] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.715] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.715] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0038.715] LocalFree (hMem=0x6774e0) returned 0x0 [0038.715] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 128 [0038.716] lstrlenA (lpString="\\*.*") returned 4 [0038.716] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.716] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0038.716] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0038.716] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0038.716] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.716] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.716] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.716] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.716] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.717] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.717] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.717] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0038.717] LocalFree (hMem=0x6776f8) returned 0x0 [0038.717] LocalFree (hMem=0x6775e8) returned 0x0 [0038.717] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.717] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0038.717] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0038.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.717] lstrlenA (lpString="\\") returned 1 [0038.717] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.717] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.717] lstrlenA (lpString="es") returned 2 [0038.717] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.717] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0038.717] LocalFree (hMem=0x6774e0) returned 0x0 [0038.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 125 [0038.717] lstrlenA (lpString="\\*.*") returned 4 [0038.761] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.761] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0038.761] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0038.761] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.762] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.762] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.762] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.762] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.762] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.762] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.762] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.762] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.762] LocalFree (hMem=0x6776f0) returned 0x0 [0038.762] LocalFree (hMem=0x6775e8) returned 0x0 [0038.762] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.762] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0038.762] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0038.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.762] lstrlenA (lpString="\\") returned 1 [0038.762] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.762] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.762] lstrlenA (lpString="es_419") returned 6 [0038.762] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0038.762] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0038.763] LocalFree (hMem=0x6774e0) returned 0x0 [0038.763] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 129 [0038.763] lstrlenA (lpString="\\*.*") returned 4 [0038.763] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0038.763] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0038.763] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0038.763] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.763] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.763] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.764] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.764] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.764] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.764] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.764] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.764] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.779] LocalFree (hMem=0x6776f8) returned 0x0 [0038.779] LocalFree (hMem=0x6775e8) returned 0x0 [0038.779] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.779] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0038.779] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0038.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.780] lstrlenA (lpString="\\") returned 1 [0038.780] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.780] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.780] lstrlenA (lpString="et") returned 2 [0038.780] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.780] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0038.780] LocalFree (hMem=0x6774e0) returned 0x0 [0038.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 125 [0038.780] lstrlenA (lpString="\\*.*") returned 4 [0038.780] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.780] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0038.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0038.780] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0038.782] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.782] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.782] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.782] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.782] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.782] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.782] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.782] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0038.782] LocalFree (hMem=0x6776f0) returned 0x0 [0038.782] LocalFree (hMem=0x6775e8) returned 0x0 [0038.782] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.782] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0038.782] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0038.782] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.782] lstrlenA (lpString="\\") returned 1 [0038.782] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.782] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.782] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.782] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.783] lstrlenA (lpString="fi") returned 2 [0038.783] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.783] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.783] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0038.783] LocalFree (hMem=0x6774e0) returned 0x0 [0038.783] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 125 [0038.783] lstrlenA (lpString="\\*.*") returned 4 [0038.783] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.783] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0038.783] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0038.783] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.783] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.783] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.784] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.784] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.784] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.784] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.784] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.784] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.784] LocalFree (hMem=0x6776f0) returned 0x0 [0038.784] LocalFree (hMem=0x6775e8) returned 0x0 [0038.784] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.784] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0038.784] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0038.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.784] lstrlenA (lpString="\\") returned 1 [0038.784] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.784] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.784] lstrlenA (lpString="fil") returned 3 [0038.784] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0038.784] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0038.784] LocalFree (hMem=0x6774e0) returned 0x0 [0038.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 126 [0038.784] lstrlenA (lpString="\\*.*") returned 4 [0038.784] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0038.784] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0038.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0038.784] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.785] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.785] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.785] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.785] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.785] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.785] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.785] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.785] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.785] LocalFree (hMem=0x6776f0) returned 0x0 [0038.785] LocalFree (hMem=0x6775e8) returned 0x0 [0038.785] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.785] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0038.785] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0038.785] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.785] lstrlenA (lpString="\\") returned 1 [0038.785] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.785] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.786] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.786] lstrlenA (lpString="fr") returned 2 [0038.786] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.786] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0038.786] LocalFree (hMem=0x6774e0) returned 0x0 [0038.786] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 125 [0038.786] lstrlenA (lpString="\\*.*") returned 4 [0038.786] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.786] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0038.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0038.786] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.786] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.786] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.787] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.787] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.787] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.787] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.787] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.787] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.787] LocalFree (hMem=0x6776f0) returned 0x0 [0038.787] LocalFree (hMem=0x6775e8) returned 0x0 [0038.787] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.787] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0038.787] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0038.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.787] lstrlenA (lpString="\\") returned 1 [0038.787] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.787] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.787] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.787] lstrlenA (lpString="he") returned 2 [0038.787] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.787] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.787] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0038.787] LocalFree (hMem=0x6774e0) returned 0x0 [0038.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 125 [0038.787] lstrlenA (lpString="\\*.*") returned 4 [0038.787] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.787] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0038.787] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0038.787] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0038.793] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.793] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.793] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.793] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.793] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.793] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.793] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.793] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0038.793] LocalFree (hMem=0x6776f0) returned 0x0 [0038.793] LocalFree (hMem=0x6775e8) returned 0x0 [0038.793] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.793] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0038.793] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0038.794] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.794] lstrlenA (lpString="\\") returned 1 [0038.794] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.794] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.794] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.794] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.794] lstrlenA (lpString="hi") returned 2 [0038.794] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.794] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.794] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0038.794] LocalFree (hMem=0x6774e0) returned 0x0 [0038.794] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 125 [0038.794] lstrlenA (lpString="\\*.*") returned 4 [0038.794] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.794] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0038.794] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0038.794] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0038.794] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.794] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.794] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.794] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.794] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.794] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.795] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.795] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0038.795] LocalFree (hMem=0x6776f0) returned 0x0 [0038.795] LocalFree (hMem=0x6775e8) returned 0x0 [0038.795] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.795] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0038.795] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0038.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.795] lstrlenA (lpString="\\") returned 1 [0038.795] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.795] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.795] lstrlenA (lpString="hu") returned 2 [0038.795] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.795] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0038.795] LocalFree (hMem=0x6774e0) returned 0x0 [0038.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 125 [0038.795] lstrlenA (lpString="\\*.*") returned 4 [0038.795] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.795] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0038.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0038.795] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0038.797] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.797] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.797] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.797] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.797] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.797] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.797] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.798] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0038.798] LocalFree (hMem=0x6776f0) returned 0x0 [0038.798] LocalFree (hMem=0x6775e8) returned 0x0 [0038.798] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.798] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0038.798] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0038.798] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.798] lstrlenA (lpString="\\") returned 1 [0038.798] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.798] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.799] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.799] lstrlenA (lpString="id") returned 2 [0038.799] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.799] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0038.799] LocalFree (hMem=0x6774e0) returned 0x0 [0038.799] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 125 [0038.799] lstrlenA (lpString="\\*.*") returned 4 [0038.799] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.799] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0038.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0038.799] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.802] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.802] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.803] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.803] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.803] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.803] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.803] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.803] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.803] LocalFree (hMem=0x6776f0) returned 0x0 [0038.803] LocalFree (hMem=0x6775e8) returned 0x0 [0038.803] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.803] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0038.803] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0038.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.803] lstrlenA (lpString="\\") returned 1 [0038.803] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.803] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.803] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.803] lstrlenA (lpString="it") returned 2 [0038.803] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.803] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.803] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0038.803] LocalFree (hMem=0x6774e0) returned 0x0 [0038.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 125 [0038.804] lstrlenA (lpString="\\*.*") returned 4 [0038.804] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.804] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0038.804] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0038.804] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.804] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.804] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.804] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.804] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.804] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.804] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.804] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.804] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.804] LocalFree (hMem=0x6776f0) returned 0x0 [0038.804] LocalFree (hMem=0x6775e8) returned 0x0 [0038.804] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.805] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0038.805] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0038.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.805] lstrlenA (lpString="\\") returned 1 [0038.805] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.805] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.805] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.805] lstrlenA (lpString="ja") returned 2 [0038.805] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.805] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.805] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0038.805] LocalFree (hMem=0x6774e0) returned 0x0 [0038.805] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 125 [0038.805] lstrlenA (lpString="\\*.*") returned 4 [0038.805] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.805] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0038.805] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0038.805] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0038.806] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.806] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.806] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.806] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.806] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.806] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.806] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.806] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0038.806] LocalFree (hMem=0x6776f0) returned 0x0 [0038.806] LocalFree (hMem=0x6775e8) returned 0x0 [0038.806] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.806] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0038.806] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0038.806] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.807] lstrlenA (lpString="\\") returned 1 [0038.807] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.807] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.807] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.807] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.807] lstrlenA (lpString="ko") returned 2 [0038.807] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.807] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.807] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0038.807] LocalFree (hMem=0x6774e0) returned 0x0 [0038.807] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 125 [0038.807] lstrlenA (lpString="\\*.*") returned 4 [0038.807] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.807] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0038.807] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0038.807] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.807] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.807] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.807] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.807] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.807] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.807] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.807] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.808] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.808] LocalFree (hMem=0x6776f0) returned 0x0 [0038.808] LocalFree (hMem=0x6775e8) returned 0x0 [0038.808] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.808] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0038.808] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0038.808] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.808] lstrlenA (lpString="\\") returned 1 [0038.808] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.808] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.808] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.808] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.808] lstrlenA (lpString="lt") returned 2 [0038.808] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.808] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.808] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0038.808] LocalFree (hMem=0x6774e0) returned 0x0 [0038.808] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 125 [0038.808] lstrlenA (lpString="\\*.*") returned 4 [0038.808] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.808] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0038.808] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0038.808] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.809] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.809] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.809] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.809] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.809] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.809] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.809] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.809] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.809] LocalFree (hMem=0x6776f0) returned 0x0 [0038.810] LocalFree (hMem=0x6775e8) returned 0x0 [0038.810] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.810] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0038.810] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0038.810] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.810] lstrlenA (lpString="\\") returned 1 [0038.810] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.810] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.810] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.810] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.810] lstrlenA (lpString="lv") returned 2 [0038.810] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.810] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.810] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0038.810] LocalFree (hMem=0x6774e0) returned 0x0 [0038.810] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 125 [0038.810] lstrlenA (lpString="\\*.*") returned 4 [0038.810] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.810] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0038.810] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0038.810] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.811] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.811] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.811] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.811] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.811] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.811] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.811] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.811] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.811] LocalFree (hMem=0x6776f0) returned 0x0 [0038.811] LocalFree (hMem=0x6775e8) returned 0x0 [0038.811] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.811] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0038.811] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0038.811] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.811] lstrlenA (lpString="\\") returned 1 [0038.811] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.811] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.811] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.811] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.811] lstrlenA (lpString="ms") returned 2 [0038.811] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.811] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.811] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0038.811] LocalFree (hMem=0x6774e0) returned 0x0 [0038.811] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 125 [0038.811] lstrlenA (lpString="\\*.*") returned 4 [0038.811] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.811] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0038.812] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0038.812] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.812] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.812] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.812] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.812] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.812] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.813] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.813] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.813] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.813] LocalFree (hMem=0x6776f0) returned 0x0 [0038.813] LocalFree (hMem=0x6775e8) returned 0x0 [0038.813] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.813] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0038.813] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0038.813] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.813] lstrlenA (lpString="\\") returned 1 [0038.813] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.813] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.813] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.813] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.813] lstrlenA (lpString="nl") returned 2 [0038.813] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.813] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.813] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0038.813] LocalFree (hMem=0x6774e0) returned 0x0 [0038.813] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 125 [0038.813] lstrlenA (lpString="\\*.*") returned 4 [0038.813] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.813] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0038.813] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0038.813] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0038.814] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.814] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.814] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.814] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.814] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.814] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.814] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.814] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0038.814] LocalFree (hMem=0x6776f0) returned 0x0 [0038.814] LocalFree (hMem=0x6775e8) returned 0x0 [0038.814] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.814] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0038.814] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0038.814] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.814] lstrlenA (lpString="\\") returned 1 [0038.814] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.814] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.814] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.814] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.814] lstrlenA (lpString="no") returned 2 [0038.814] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.814] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.814] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0038.814] LocalFree (hMem=0x6774e0) returned 0x0 [0038.815] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 125 [0038.815] lstrlenA (lpString="\\*.*") returned 4 [0038.815] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.815] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0038.815] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0038.815] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0038.815] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.816] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.816] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.816] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.816] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.816] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.816] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.816] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0038.816] LocalFree (hMem=0x6776f0) returned 0x0 [0038.816] LocalFree (hMem=0x6775e8) returned 0x0 [0038.816] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.816] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0038.816] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0038.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.816] lstrlenA (lpString="\\") returned 1 [0038.816] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.816] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.816] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.816] lstrlenA (lpString="pl") returned 2 [0038.816] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.816] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.816] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0038.816] LocalFree (hMem=0x6774e0) returned 0x0 [0038.816] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 125 [0038.816] lstrlenA (lpString="\\*.*") returned 4 [0038.816] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.817] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0038.817] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0038.817] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.817] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.817] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.817] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.817] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.817] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.817] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.817] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.817] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.817] LocalFree (hMem=0x6776f0) returned 0x0 [0038.817] LocalFree (hMem=0x6775e8) returned 0x0 [0038.817] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.817] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0038.817] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0038.817] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.817] lstrlenA (lpString="\\") returned 1 [0038.817] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.817] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.817] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.818] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.818] lstrlenA (lpString="pt_BR") returned 5 [0038.818] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.818] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.818] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0038.818] LocalFree (hMem=0x6774e0) returned 0x0 [0038.818] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 128 [0038.818] lstrlenA (lpString="\\*.*") returned 4 [0038.818] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.818] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0038.818] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0038.818] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0038.819] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.819] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.819] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.819] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.819] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.819] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.819] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.819] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0038.819] LocalFree (hMem=0x6776f8) returned 0x0 [0038.819] LocalFree (hMem=0x6775e8) returned 0x0 [0038.819] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.819] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0038.819] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0038.819] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.819] lstrlenA (lpString="\\") returned 1 [0038.819] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.819] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.819] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.819] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.819] lstrlenA (lpString="pt_PT") returned 5 [0038.819] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.819] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.819] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0038.819] LocalFree (hMem=0x6774e0) returned 0x0 [0038.819] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 128 [0038.819] lstrlenA (lpString="\\*.*") returned 4 [0038.819] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.819] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0038.820] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0038.820] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0038.820] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.820] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.820] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.820] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.820] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.820] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.820] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.820] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0038.820] LocalFree (hMem=0x6776f8) returned 0x0 [0038.820] LocalFree (hMem=0x6775e8) returned 0x0 [0038.820] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.820] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0038.820] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0038.820] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.820] lstrlenA (lpString="\\") returned 1 [0038.820] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.821] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.821] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.821] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.821] lstrlenA (lpString="ro") returned 2 [0038.821] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.821] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.821] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0038.821] LocalFree (hMem=0x6774e0) returned 0x0 [0038.821] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 125 [0038.821] lstrlenA (lpString="\\*.*") returned 4 [0038.821] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.821] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0038.821] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0038.821] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0038.875] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.875] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.875] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.875] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.875] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.875] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.875] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.875] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0038.875] LocalFree (hMem=0x6776f0) returned 0x0 [0038.875] LocalFree (hMem=0x6775e8) returned 0x0 [0038.875] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.875] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0038.875] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0038.875] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.875] lstrlenA (lpString="\\") returned 1 [0038.875] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.875] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.876] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.876] lstrlenA (lpString="ru") returned 2 [0038.876] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.876] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0038.876] LocalFree (hMem=0x6774e0) returned 0x0 [0038.876] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 125 [0038.876] lstrlenA (lpString="\\*.*") returned 4 [0038.876] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.876] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0038.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0038.876] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0038.876] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.876] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.876] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.876] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.876] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.876] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.876] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.876] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0038.876] LocalFree (hMem=0x6776f0) returned 0x0 [0038.876] LocalFree (hMem=0x6775e8) returned 0x0 [0038.876] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.876] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0038.876] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0038.876] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.876] lstrlenA (lpString="\\") returned 1 [0038.877] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.877] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.877] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.877] lstrlenA (lpString="sk") returned 2 [0038.877] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.877] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0038.877] LocalFree (hMem=0x6774e0) returned 0x0 [0038.877] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 125 [0038.877] lstrlenA (lpString="\\*.*") returned 4 [0038.877] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.877] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0038.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0038.877] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0038.878] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.878] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.878] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.878] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.878] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.878] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.878] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.878] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0038.878] LocalFree (hMem=0x6776f0) returned 0x0 [0038.878] LocalFree (hMem=0x6775e8) returned 0x0 [0038.878] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.878] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0038.878] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0038.878] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.878] lstrlenA (lpString="\\") returned 1 [0038.878] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.878] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.878] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.878] lstrlenA (lpString="sl") returned 2 [0038.878] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.878] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0038.878] LocalFree (hMem=0x6774e0) returned 0x0 [0038.878] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 125 [0038.879] lstrlenA (lpString="\\*.*") returned 4 [0038.879] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.879] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0038.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0038.879] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0038.879] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.879] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.879] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.879] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.879] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.879] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.879] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.879] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0038.879] LocalFree (hMem=0x6776f0) returned 0x0 [0038.879] LocalFree (hMem=0x6775e8) returned 0x0 [0038.879] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.879] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0038.879] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0038.879] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.879] lstrlenA (lpString="\\") returned 1 [0038.879] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.879] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.879] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.879] lstrlenA (lpString="sr") returned 2 [0038.879] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.879] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0038.879] LocalFree (hMem=0x6774e0) returned 0x0 [0038.880] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 125 [0038.880] lstrlenA (lpString="\\*.*") returned 4 [0038.880] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.880] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0038.880] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0038.880] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.880] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.880] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.881] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.881] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.881] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.881] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.881] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.881] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.881] LocalFree (hMem=0x6776f0) returned 0x0 [0038.881] LocalFree (hMem=0x6775e8) returned 0x0 [0038.881] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.881] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0038.881] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0038.881] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.881] lstrlenA (lpString="\\") returned 1 [0038.881] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.881] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.881] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.881] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.881] lstrlenA (lpString="sv") returned 2 [0038.881] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.881] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.881] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0038.881] LocalFree (hMem=0x6774e0) returned 0x0 [0038.881] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 125 [0038.881] lstrlenA (lpString="\\*.*") returned 4 [0038.881] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.881] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0038.881] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0038.881] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0038.882] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.882] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.882] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.882] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.882] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.882] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.882] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.882] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0038.882] LocalFree (hMem=0x6776f0) returned 0x0 [0038.882] LocalFree (hMem=0x6775e8) returned 0x0 [0038.882] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.882] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0038.882] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0038.882] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.882] lstrlenA (lpString="\\") returned 1 [0038.882] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.882] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.882] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.882] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.882] lstrlenA (lpString="th") returned 2 [0038.882] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.882] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.882] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0038.882] LocalFree (hMem=0x6774e0) returned 0x0 [0038.882] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 125 [0038.882] lstrlenA (lpString="\\*.*") returned 4 [0038.882] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.882] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0038.882] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0038.882] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.883] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.883] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.883] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.883] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.883] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.883] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.883] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.883] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.883] LocalFree (hMem=0x6776f0) returned 0x0 [0038.883] LocalFree (hMem=0x6775e8) returned 0x0 [0038.883] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.883] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0038.883] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0038.883] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.884] lstrlenA (lpString="\\") returned 1 [0038.884] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.884] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.884] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.884] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.884] lstrlenA (lpString="tr") returned 2 [0038.884] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.884] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.884] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0038.884] LocalFree (hMem=0x6774e0) returned 0x0 [0038.884] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 125 [0038.884] lstrlenA (lpString="\\*.*") returned 4 [0038.884] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.884] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0038.884] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0038.884] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0038.884] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.884] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.884] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.884] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.884] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.884] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.884] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.884] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0038.884] LocalFree (hMem=0x6776f0) returned 0x0 [0038.884] LocalFree (hMem=0x6775e8) returned 0x0 [0038.884] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.885] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0038.885] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0038.885] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.885] lstrlenA (lpString="\\") returned 1 [0038.885] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.885] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.885] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.885] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.885] lstrlenA (lpString="uk") returned 2 [0038.885] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.885] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.885] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0038.885] LocalFree (hMem=0x6774e0) returned 0x0 [0038.885] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 125 [0038.885] lstrlenA (lpString="\\*.*") returned 4 [0038.885] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.885] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0038.885] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0038.885] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0038.886] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.886] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.886] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.886] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.886] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.886] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.886] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.886] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0038.886] LocalFree (hMem=0x6776f0) returned 0x0 [0038.886] LocalFree (hMem=0x6775e8) returned 0x0 [0038.886] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.886] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0038.886] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0038.886] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.886] lstrlenA (lpString="\\") returned 1 [0038.886] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.886] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.886] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.886] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.886] lstrlenA (lpString="vi") returned 2 [0038.886] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.886] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.886] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0038.886] LocalFree (hMem=0x6774e0) returned 0x0 [0038.886] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 125 [0038.886] lstrlenA (lpString="\\*.*") returned 4 [0038.886] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.886] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0038.886] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0038.886] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0038.887] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.887] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.887] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.887] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.887] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.887] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.887] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.887] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0038.887] LocalFree (hMem=0x6776f0) returned 0x0 [0038.887] LocalFree (hMem=0x6775e8) returned 0x0 [0038.887] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.887] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0038.887] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0038.887] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.887] lstrlenA (lpString="\\") returned 1 [0038.887] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.887] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.887] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.887] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.887] lstrlenA (lpString="zh_CN") returned 5 [0038.887] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.887] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.887] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0038.887] LocalFree (hMem=0x6774e0) returned 0x0 [0038.887] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 128 [0038.887] lstrlenA (lpString="\\*.*") returned 4 [0038.887] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.887] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0038.887] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0038.888] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.888] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.888] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.888] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.888] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.888] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.888] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.888] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.888] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.888] LocalFree (hMem=0x6776f8) returned 0x0 [0038.888] LocalFree (hMem=0x6775e8) returned 0x0 [0038.888] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.888] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0038.888] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0038.888] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0038.889] lstrlenA (lpString="\\") returned 1 [0038.889] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.889] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0038.889] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.889] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0038.889] lstrlenA (lpString="zh_TW") returned 5 [0038.889] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.889] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0038.889] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0038.889] LocalFree (hMem=0x6774e0) returned 0x0 [0038.889] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 128 [0038.889] lstrlenA (lpString="\\*.*") returned 4 [0038.889] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.889] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0038.889] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0038.889] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0038.889] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.889] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.889] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.889] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.889] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.889] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.889] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.889] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0038.889] LocalFree (hMem=0x6776f8) returned 0x0 [0038.889] LocalFree (hMem=0x6775e8) returned 0x0 [0038.889] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0038.890] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0038.890] LocalFree (hMem=0x6773d8) returned 0x0 [0038.890] LocalFree (hMem=0x6772d0) returned 0x0 [0038.890] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.890] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0038.890] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0038.890] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 113 [0038.890] lstrlenA (lpString="\\") returned 1 [0038.890] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6659c8 [0038.890] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0038.890] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0038.890] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 114 [0038.890] lstrlenA (lpString="_metadata") returned 9 [0038.890] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0038.890] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0038.890] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0038.890] LocalFree (hMem=0x6659c8) returned 0x0 [0038.890] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 123 [0038.890] lstrlenA (lpString="\\*.*") returned 4 [0038.890] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0038.890] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0038.890] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0038.890] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690268 [0038.891] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.891] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.891] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.891] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.891] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.891] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0038.891] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.891] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0038.891] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0038.891] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.891] LocalFree (hMem=0x6773d8) returned 0x0 [0038.891] LocalFree (hMem=0x6772d0) returned 0x0 [0038.891] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0038.891] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0038.891] LocalFree (hMem=0x663dc8) returned 0x0 [0038.891] LocalFree (hMem=0x665bc8) returned 0x0 [0038.891] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0038.891] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0038.892] LocalFree (hMem=0x6771d8) returned 0x0 [0038.892] LocalFree (hMem=0x69e108) returned 0x0 [0038.892] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0038.892] lstrcmpiA (lpString1=".", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0038.892] lstrcmpiA (lpString1="..", lpString2="aohghmighlieiainnegkcijnfilokake") returned -1 [0038.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0038.892] lstrlenA (lpString="\\") returned 1 [0038.892] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0038.892] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0038.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0038.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0038.892] lstrlenA (lpString="aohghmighlieiainnegkcijnfilokake") returned 32 [0038.892] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0038.892] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0038.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0038.892] LocalFree (hMem=0x69e030) returned 0x0 [0038.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 107 [0038.892] lstrlenA (lpString="\\*.*") returned 4 [0038.892] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0038.892] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0038.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0038.892] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6904e8 [0038.892] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.892] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0038.892] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.892] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.892] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0038.892] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0038.892] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0038.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 107 [0038.892] lstrlenA (lpString="\\") returned 1 [0038.892] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0038.892] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0038.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0038.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned 108 [0038.893] lstrlenA (lpString="0.9_0") returned 5 [0038.893] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x664ac8 [0038.893] lstrcpyA (in: lpString1=0x664ac8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0038.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0038.893] LocalFree (hMem=0x6772d0) returned 0x0 [0038.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 113 [0038.893] lstrlenA (lpString="\\*.*") returned 4 [0038.893] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x664ec8 [0038.893] lstrcpyA (in: lpString1=0x664ec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0038.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0038.893] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6901a8 [0038.894] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.894] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.895] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0038.895] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0038.895] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0038.895] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0038.895] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 113 [0038.895] lstrlenA (lpString="\\") returned 1 [0038.895] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6651c8 [0038.895] lstrcpyA (in: lpString1=0x6651c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0038.895] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0038.895] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 114 [0038.895] lstrlenA (lpString="_locales") returned 8 [0038.895] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0038.895] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0038.895] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.895] LocalFree (hMem=0x6651c8) returned 0x0 [0038.895] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.895] lstrlenA (lpString="\\*.*") returned 4 [0038.895] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0038.895] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.895] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0038.895] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690528 [0038.897] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.897] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.897] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.897] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.897] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.897] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0038.897] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0038.897] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.897] lstrlenA (lpString="\\") returned 1 [0038.897] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.897] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.897] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.897] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.897] lstrlenA (lpString="ar") returned 2 [0038.897] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.897] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.897] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0038.897] LocalFree (hMem=0x6774e0) returned 0x0 [0038.897] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 125 [0038.897] lstrlenA (lpString="\\*.*") returned 4 [0038.897] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.897] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0038.897] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0038.897] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0038.898] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.898] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.898] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.898] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.898] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.898] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.898] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.898] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0038.898] LocalFree (hMem=0x6776f0) returned 0x0 [0038.898] LocalFree (hMem=0x6775e8) returned 0x0 [0038.898] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.898] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0038.898] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0038.898] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.898] lstrlenA (lpString="\\") returned 1 [0038.898] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.898] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.898] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.898] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.898] lstrlenA (lpString="bg") returned 2 [0038.898] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.898] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.898] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0038.898] LocalFree (hMem=0x6774e0) returned 0x0 [0038.898] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 125 [0038.898] lstrlenA (lpString="\\*.*") returned 4 [0038.898] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.898] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0038.898] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0038.898] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.900] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.900] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.900] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.900] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.900] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.900] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.900] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.900] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.900] LocalFree (hMem=0x6776f0) returned 0x0 [0038.900] LocalFree (hMem=0x6775e8) returned 0x0 [0038.900] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.900] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0038.900] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0038.900] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.900] lstrlenA (lpString="\\") returned 1 [0038.900] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.900] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.900] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.900] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.900] lstrlenA (lpString="ca") returned 2 [0038.900] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.900] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.900] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0038.900] LocalFree (hMem=0x6774e0) returned 0x0 [0038.900] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 125 [0038.900] lstrlenA (lpString="\\*.*") returned 4 [0038.900] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.900] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0038.900] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0038.901] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.901] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.901] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.901] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.901] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.901] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.901] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.901] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.901] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.901] LocalFree (hMem=0x6776f0) returned 0x0 [0038.901] LocalFree (hMem=0x6775e8) returned 0x0 [0038.901] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.901] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0038.901] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0038.901] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.901] lstrlenA (lpString="\\") returned 1 [0038.901] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.901] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.901] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.901] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.901] lstrlenA (lpString="cs") returned 2 [0038.901] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.901] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.901] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0038.901] LocalFree (hMem=0x6774e0) returned 0x0 [0038.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 125 [0038.902] lstrlenA (lpString="\\*.*") returned 4 [0038.902] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.902] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0038.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0038.902] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.903] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.903] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.903] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.903] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.903] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.903] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.903] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.903] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.903] LocalFree (hMem=0x6776f0) returned 0x0 [0038.903] LocalFree (hMem=0x6775e8) returned 0x0 [0038.903] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.903] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0038.903] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0038.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.904] lstrlenA (lpString="\\") returned 1 [0038.904] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.904] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.904] lstrlenA (lpString="da") returned 2 [0038.904] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.904] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0038.904] LocalFree (hMem=0x6774e0) returned 0x0 [0038.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 125 [0038.904] lstrlenA (lpString="\\*.*") returned 4 [0038.904] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.904] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0038.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0038.904] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0038.904] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.904] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.904] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.904] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.904] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.904] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.904] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.904] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0038.904] LocalFree (hMem=0x6776f0) returned 0x0 [0038.904] LocalFree (hMem=0x6775e8) returned 0x0 [0038.904] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.904] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0038.905] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0038.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.905] lstrlenA (lpString="\\") returned 1 [0038.905] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.905] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.905] lstrlenA (lpString="de") returned 2 [0038.905] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.905] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0038.905] LocalFree (hMem=0x6774e0) returned 0x0 [0038.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 125 [0038.905] lstrlenA (lpString="\\*.*") returned 4 [0038.905] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.905] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0038.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0038.905] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0038.906] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.906] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.906] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.906] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.906] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.906] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.906] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.906] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0038.906] LocalFree (hMem=0x6776f0) returned 0x0 [0038.906] LocalFree (hMem=0x6775e8) returned 0x0 [0038.906] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.906] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0038.906] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0038.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.906] lstrlenA (lpString="\\") returned 1 [0038.906] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.906] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.906] lstrlenA (lpString="el") returned 2 [0038.906] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.906] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0038.906] LocalFree (hMem=0x6774e0) returned 0x0 [0038.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 125 [0038.906] lstrlenA (lpString="\\*.*") returned 4 [0038.906] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.906] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0038.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0038.906] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0038.907] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.907] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.907] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.907] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.907] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.907] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.907] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.907] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0038.907] LocalFree (hMem=0x6776f0) returned 0x0 [0038.907] LocalFree (hMem=0x6775e8) returned 0x0 [0038.907] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.907] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0038.907] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0038.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.907] lstrlenA (lpString="\\") returned 1 [0038.907] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.907] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.907] lstrlenA (lpString="en_GB") returned 5 [0038.907] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.907] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0038.907] LocalFree (hMem=0x6774e0) returned 0x0 [0038.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 128 [0038.907] lstrlenA (lpString="\\*.*") returned 4 [0038.907] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.907] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0038.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0038.908] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0038.908] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.908] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.908] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.908] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.908] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.908] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.908] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.909] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0038.909] LocalFree (hMem=0x6776f8) returned 0x0 [0038.909] LocalFree (hMem=0x6775e8) returned 0x0 [0038.909] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.909] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0038.909] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0038.909] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.909] lstrlenA (lpString="\\") returned 1 [0038.909] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.909] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.909] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.909] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.909] lstrlenA (lpString="en_US") returned 5 [0038.909] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.909] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.909] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0038.909] LocalFree (hMem=0x6774e0) returned 0x0 [0038.909] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 128 [0038.909] lstrlenA (lpString="\\*.*") returned 4 [0038.909] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.909] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0038.909] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0038.909] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0038.909] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.909] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.909] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.909] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.909] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.910] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.910] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.910] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0038.910] LocalFree (hMem=0x6776f8) returned 0x0 [0038.910] LocalFree (hMem=0x6775e8) returned 0x0 [0038.910] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.910] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0038.910] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0038.910] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.910] lstrlenA (lpString="\\") returned 1 [0038.910] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.910] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.910] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.910] lstrlenA (lpString="es") returned 2 [0038.910] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.910] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0038.910] LocalFree (hMem=0x6774e0) returned 0x0 [0038.910] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 125 [0038.910] lstrlenA (lpString="\\*.*") returned 4 [0038.910] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.910] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0038.910] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0038.910] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0038.911] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.911] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.911] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.911] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.911] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.911] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.911] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.911] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0038.911] LocalFree (hMem=0x6776f0) returned 0x0 [0038.911] LocalFree (hMem=0x6775e8) returned 0x0 [0038.911] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.911] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0038.911] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0038.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.911] lstrlenA (lpString="\\") returned 1 [0038.911] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.911] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.911] lstrlenA (lpString="es_419") returned 6 [0038.911] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0038.911] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0038.911] LocalFree (hMem=0x6774e0) returned 0x0 [0038.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 129 [0038.912] lstrlenA (lpString="\\*.*") returned 4 [0038.912] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0038.912] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0038.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0038.912] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0038.912] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.912] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.912] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.912] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.912] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.912] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.912] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.912] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0038.912] LocalFree (hMem=0x6776f8) returned 0x0 [0038.912] LocalFree (hMem=0x6775e8) returned 0x0 [0038.912] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.912] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0038.912] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0038.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.912] lstrlenA (lpString="\\") returned 1 [0038.912] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.912] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.912] lstrlenA (lpString="et") returned 2 [0038.912] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.912] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0038.912] LocalFree (hMem=0x6774e0) returned 0x0 [0038.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 125 [0038.913] lstrlenA (lpString="\\*.*") returned 4 [0038.913] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.913] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0038.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*" [0038.913] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0038.913] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.913] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.913] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.913] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.913] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.913] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.913] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.913] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0038.913] LocalFree (hMem=0x6776f0) returned 0x0 [0038.913] LocalFree (hMem=0x6775e8) returned 0x0 [0038.913] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.914] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0038.914] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0038.914] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.914] lstrlenA (lpString="\\") returned 1 [0038.914] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.914] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.914] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.914] lstrlenA (lpString="fi") returned 2 [0038.914] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.914] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0038.961] LocalFree (hMem=0x6774e0) returned 0x0 [0038.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 125 [0038.961] lstrlenA (lpString="\\*.*") returned 4 [0038.962] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.962] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0038.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*" [0038.962] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0038.962] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.962] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.962] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.962] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.962] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.962] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.962] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.962] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0038.962] LocalFree (hMem=0x6776f0) returned 0x0 [0038.962] LocalFree (hMem=0x6775e8) returned 0x0 [0038.962] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.962] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0038.962] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0038.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.962] lstrlenA (lpString="\\") returned 1 [0038.962] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.962] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.962] lstrlenA (lpString="fil") returned 3 [0038.962] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0038.962] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0038.963] LocalFree (hMem=0x6774e0) returned 0x0 [0038.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 126 [0038.963] lstrlenA (lpString="\\*.*") returned 4 [0038.963] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0038.963] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0038.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*" [0038.963] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0038.963] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.963] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.963] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.963] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.963] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.964] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.964] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.964] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0038.964] LocalFree (hMem=0x6776f0) returned 0x0 [0038.964] LocalFree (hMem=0x6775e8) returned 0x0 [0038.964] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.964] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0038.964] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0038.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.964] lstrlenA (lpString="\\") returned 1 [0038.964] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.964] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.964] lstrlenA (lpString="fr") returned 2 [0038.964] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.964] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0038.964] LocalFree (hMem=0x6774e0) returned 0x0 [0038.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 125 [0038.964] lstrlenA (lpString="\\*.*") returned 4 [0038.964] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.964] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0038.964] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*" [0038.964] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0038.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.964] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.964] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.964] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.964] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.965] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.965] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.965] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0038.965] LocalFree (hMem=0x6776f0) returned 0x0 [0038.965] LocalFree (hMem=0x6775e8) returned 0x0 [0038.965] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.965] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0038.965] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0038.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.965] lstrlenA (lpString="\\") returned 1 [0038.965] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.965] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.965] lstrlenA (lpString="he") returned 2 [0038.965] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.965] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0038.965] LocalFree (hMem=0x6774e0) returned 0x0 [0038.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned 125 [0038.965] lstrlenA (lpString="\\*.*") returned 4 [0038.965] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.965] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0038.965] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*" [0038.965] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.966] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.966] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.966] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.966] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.966] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.966] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.966] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.966] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.966] LocalFree (hMem=0x6776f0) returned 0x0 [0038.966] LocalFree (hMem=0x6775e8) returned 0x0 [0038.966] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.966] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0038.966] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0038.966] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.966] lstrlenA (lpString="\\") returned 1 [0038.966] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.966] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.966] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.966] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.967] lstrlenA (lpString="hi") returned 2 [0038.967] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.967] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0038.967] LocalFree (hMem=0x6774e0) returned 0x0 [0038.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned 125 [0038.967] lstrlenA (lpString="\\*.*") returned 4 [0038.967] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.967] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0038.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*" [0038.967] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0038.967] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.967] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.967] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.967] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.967] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.967] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.967] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.967] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0038.967] LocalFree (hMem=0x6776f0) returned 0x0 [0038.967] LocalFree (hMem=0x6775e8) returned 0x0 [0038.967] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.967] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0038.967] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0038.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.967] lstrlenA (lpString="\\") returned 1 [0038.967] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.967] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.967] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.967] lstrlenA (lpString="hu") returned 2 [0038.967] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.967] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.967] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0038.968] LocalFree (hMem=0x6774e0) returned 0x0 [0038.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned 125 [0038.968] lstrlenA (lpString="\\*.*") returned 4 [0038.968] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.968] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0038.968] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*" [0038.968] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0038.968] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.968] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.968] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.968] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.968] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.968] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.968] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.968] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0038.969] LocalFree (hMem=0x6776f0) returned 0x0 [0038.969] LocalFree (hMem=0x6775e8) returned 0x0 [0038.969] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.969] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0038.969] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0038.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.969] lstrlenA (lpString="\\") returned 1 [0038.969] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.969] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.969] lstrlenA (lpString="id") returned 2 [0038.969] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.969] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0038.969] LocalFree (hMem=0x6774e0) returned 0x0 [0038.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned 125 [0038.969] lstrlenA (lpString="\\*.*") returned 4 [0038.969] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.969] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0038.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*" [0038.969] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0038.969] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.969] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.969] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.969] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.969] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0038.970] LocalFree (hMem=0x6776f0) returned 0x0 [0038.970] LocalFree (hMem=0x6775e8) returned 0x0 [0038.970] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.970] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0038.970] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0038.970] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.970] lstrlenA (lpString="\\") returned 1 [0038.970] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.970] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.970] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.970] lstrlenA (lpString="it") returned 2 [0038.970] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.970] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0038.970] LocalFree (hMem=0x6774e0) returned 0x0 [0038.970] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned 125 [0038.970] lstrlenA (lpString="\\*.*") returned 4 [0038.970] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.970] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0038.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*" [0038.970] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0038.970] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.971] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.971] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.971] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.971] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.971] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.971] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.971] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0038.976] LocalFree (hMem=0x6776f0) returned 0x0 [0038.976] LocalFree (hMem=0x6775e8) returned 0x0 [0038.976] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.976] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0038.976] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0038.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.976] lstrlenA (lpString="\\") returned 1 [0038.976] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.976] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.976] lstrlenA (lpString="ja") returned 2 [0038.976] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.976] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0038.976] LocalFree (hMem=0x6774e0) returned 0x0 [0038.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned 125 [0038.977] lstrlenA (lpString="\\*.*") returned 4 [0038.977] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.977] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0038.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*" [0038.977] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0038.977] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.977] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.977] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.977] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.977] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.977] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.977] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.977] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0038.977] LocalFree (hMem=0x6776f0) returned 0x0 [0038.977] LocalFree (hMem=0x6775e8) returned 0x0 [0038.977] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.977] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0038.977] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0038.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.977] lstrlenA (lpString="\\") returned 1 [0038.977] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.977] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.977] lstrlenA (lpString="ko") returned 2 [0038.977] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.977] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0038.977] LocalFree (hMem=0x6774e0) returned 0x0 [0038.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned 125 [0038.977] lstrlenA (lpString="\\*.*") returned 4 [0038.977] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.977] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0038.978] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*" [0038.978] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.978] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.978] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.978] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.978] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.978] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.978] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.978] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.978] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.978] LocalFree (hMem=0x6776f0) returned 0x0 [0038.978] LocalFree (hMem=0x6775e8) returned 0x0 [0038.978] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.978] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0038.978] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0038.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.978] lstrlenA (lpString="\\") returned 1 [0038.978] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.978] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.979] lstrlenA (lpString="lt") returned 2 [0038.979] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.979] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0038.979] LocalFree (hMem=0x6774e0) returned 0x0 [0038.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned 125 [0038.979] lstrlenA (lpString="\\*.*") returned 4 [0038.979] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.979] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0038.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*" [0038.979] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.979] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.979] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.979] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.979] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.979] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.979] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.979] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.979] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.979] LocalFree (hMem=0x6776f0) returned 0x0 [0038.979] LocalFree (hMem=0x6775e8) returned 0x0 [0038.979] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.979] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0038.979] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0038.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.979] lstrlenA (lpString="\\") returned 1 [0038.979] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.979] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.979] lstrlenA (lpString="lv") returned 2 [0038.980] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.980] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.980] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0038.980] LocalFree (hMem=0x6774e0) returned 0x0 [0038.980] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned 125 [0038.980] lstrlenA (lpString="\\*.*") returned 4 [0038.980] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.980] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0038.980] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*" [0038.980] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0038.980] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.980] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.980] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.980] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.980] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.980] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.980] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0038.981] LocalFree (hMem=0x6776f0) returned 0x0 [0038.981] LocalFree (hMem=0x6775e8) returned 0x0 [0038.981] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.981] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0038.981] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0038.981] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.981] lstrlenA (lpString="\\") returned 1 [0038.981] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.981] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.981] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.981] lstrlenA (lpString="ms") returned 2 [0038.981] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.981] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0038.981] LocalFree (hMem=0x6774e0) returned 0x0 [0038.981] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned 125 [0038.981] lstrlenA (lpString="\\*.*") returned 4 [0038.981] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.981] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0038.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*" [0038.981] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0038.981] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.981] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.981] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.981] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.981] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.981] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.982] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.982] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0038.982] LocalFree (hMem=0x6776f0) returned 0x0 [0038.982] LocalFree (hMem=0x6775e8) returned 0x0 [0038.982] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.982] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0038.982] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0038.982] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.982] lstrlenA (lpString="\\") returned 1 [0038.982] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.982] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.982] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.982] lstrlenA (lpString="nl") returned 2 [0038.982] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.982] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0038.982] LocalFree (hMem=0x6774e0) returned 0x0 [0038.982] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned 125 [0038.982] lstrlenA (lpString="\\*.*") returned 4 [0038.982] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.982] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0038.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*" [0038.982] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.983] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.983] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.983] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.983] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.983] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.983] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.983] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.983] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.983] LocalFree (hMem=0x6776f0) returned 0x0 [0038.983] LocalFree (hMem=0x6775e8) returned 0x0 [0038.983] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.983] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0038.983] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0038.983] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.983] lstrlenA (lpString="\\") returned 1 [0038.983] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.983] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.983] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.983] lstrlenA (lpString="no") returned 2 [0038.983] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.983] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0038.983] LocalFree (hMem=0x6774e0) returned 0x0 [0038.983] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned 125 [0038.983] lstrlenA (lpString="\\*.*") returned 4 [0038.983] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.983] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0038.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*" [0038.983] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0038.984] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.984] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.984] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.984] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.984] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.984] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.984] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.984] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0038.984] LocalFree (hMem=0x6776f0) returned 0x0 [0038.984] LocalFree (hMem=0x6775e8) returned 0x0 [0038.984] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.984] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0038.984] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0038.984] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.984] lstrlenA (lpString="\\") returned 1 [0038.984] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.984] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.984] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.984] lstrlenA (lpString="pl") returned 2 [0038.984] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.984] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0038.984] LocalFree (hMem=0x6774e0) returned 0x0 [0038.984] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned 125 [0038.984] lstrlenA (lpString="\\*.*") returned 4 [0038.984] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.984] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0038.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*" [0038.984] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0038.985] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.985] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.985] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.985] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.985] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.985] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.985] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.985] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0038.985] LocalFree (hMem=0x6776f0) returned 0x0 [0038.985] LocalFree (hMem=0x6775e8) returned 0x0 [0038.985] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.985] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0038.985] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0038.985] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.985] lstrlenA (lpString="\\") returned 1 [0038.985] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.985] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.985] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.985] lstrlenA (lpString="pt_BR") returned 5 [0038.985] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.985] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0038.986] LocalFree (hMem=0x6774e0) returned 0x0 [0038.986] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned 128 [0038.986] lstrlenA (lpString="\\*.*") returned 4 [0038.986] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.986] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0038.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*" [0038.986] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0038.986] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.986] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.986] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.986] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.986] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.986] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.986] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.986] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0038.986] LocalFree (hMem=0x6776f8) returned 0x0 [0038.986] LocalFree (hMem=0x6775e8) returned 0x0 [0038.986] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.986] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0038.986] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0038.986] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.986] lstrlenA (lpString="\\") returned 1 [0038.986] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.986] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.986] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.986] lstrlenA (lpString="pt_PT") returned 5 [0038.986] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0038.986] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0038.986] LocalFree (hMem=0x6774e0) returned 0x0 [0038.986] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned 128 [0038.986] lstrlenA (lpString="\\*.*") returned 4 [0038.987] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0038.987] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0038.987] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*" [0038.987] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0038.987] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.987] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.987] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.987] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.987] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.987] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.987] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.987] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0038.987] LocalFree (hMem=0x6776f8) returned 0x0 [0038.987] LocalFree (hMem=0x6775e8) returned 0x0 [0038.987] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.987] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0038.987] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0038.987] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.987] lstrlenA (lpString="\\") returned 1 [0038.987] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.987] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.988] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.988] lstrlenA (lpString="ro") returned 2 [0038.988] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.988] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0038.988] LocalFree (hMem=0x6774e0) returned 0x0 [0038.988] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned 125 [0038.988] lstrlenA (lpString="\\*.*") returned 4 [0038.988] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.988] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0038.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*" [0038.988] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0038.988] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.988] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.988] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.988] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.988] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.988] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.988] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.988] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0038.988] LocalFree (hMem=0x6776f0) returned 0x0 [0038.988] LocalFree (hMem=0x6775e8) returned 0x0 [0038.988] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.988] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0038.988] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0038.988] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.988] lstrlenA (lpString="\\") returned 1 [0038.988] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.988] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.988] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.988] lstrlenA (lpString="ru") returned 2 [0038.988] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.988] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0038.989] LocalFree (hMem=0x6774e0) returned 0x0 [0038.989] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned 125 [0038.989] lstrlenA (lpString="\\*.*") returned 4 [0038.989] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.989] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0038.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*" [0038.989] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0038.989] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.989] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.989] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.989] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.989] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.989] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.989] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.989] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0038.990] LocalFree (hMem=0x6776f0) returned 0x0 [0038.990] LocalFree (hMem=0x6775e8) returned 0x0 [0038.990] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.990] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0038.990] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0038.990] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.990] lstrlenA (lpString="\\") returned 1 [0038.990] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.990] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.990] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.990] lstrlenA (lpString="sk") returned 2 [0038.990] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.990] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0038.990] LocalFree (hMem=0x6774e0) returned 0x0 [0038.990] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned 125 [0038.990] lstrlenA (lpString="\\*.*") returned 4 [0038.990] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.990] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0038.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*" [0038.990] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0038.990] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.990] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.990] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.990] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.990] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.990] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.990] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.990] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0038.990] LocalFree (hMem=0x6776f0) returned 0x0 [0038.990] LocalFree (hMem=0x6775e8) returned 0x0 [0038.990] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.990] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0038.991] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0038.991] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.991] lstrlenA (lpString="\\") returned 1 [0038.991] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.991] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.991] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.991] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.991] lstrlenA (lpString="sl") returned 2 [0038.991] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.991] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.991] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0038.991] LocalFree (hMem=0x6774e0) returned 0x0 [0038.993] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned 125 [0038.993] lstrlenA (lpString="\\*.*") returned 4 [0038.993] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.993] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0038.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*" [0038.993] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0038.993] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.993] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.993] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.994] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.994] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.994] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.994] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.994] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0038.994] LocalFree (hMem=0x6776f0) returned 0x0 [0038.994] LocalFree (hMem=0x6775e8) returned 0x0 [0038.994] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.994] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0038.994] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0038.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.994] lstrlenA (lpString="\\") returned 1 [0038.994] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.994] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.994] lstrlenA (lpString="sr") returned 2 [0038.994] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.994] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0038.994] LocalFree (hMem=0x6774e0) returned 0x0 [0038.994] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned 125 [0038.994] lstrlenA (lpString="\\*.*") returned 4 [0038.994] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.994] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0038.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*" [0038.994] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0038.994] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.994] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.994] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.994] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.994] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.994] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.994] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.995] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0038.995] LocalFree (hMem=0x6776f0) returned 0x0 [0038.995] LocalFree (hMem=0x6775e8) returned 0x0 [0038.995] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.995] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0038.995] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0038.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.995] lstrlenA (lpString="\\") returned 1 [0038.995] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.995] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.995] lstrlenA (lpString="sv") returned 2 [0038.995] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.995] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0038.995] LocalFree (hMem=0x6774e0) returned 0x0 [0038.995] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned 125 [0038.995] lstrlenA (lpString="\\*.*") returned 4 [0038.995] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.995] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0038.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*" [0038.995] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0038.996] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.996] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.996] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.996] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.996] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.996] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.996] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.996] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0038.996] LocalFree (hMem=0x6776f0) returned 0x0 [0038.996] LocalFree (hMem=0x6775e8) returned 0x0 [0038.996] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.996] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0038.996] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0038.996] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.996] lstrlenA (lpString="\\") returned 1 [0038.996] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.996] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.996] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.996] lstrlenA (lpString="th") returned 2 [0038.996] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.996] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0038.996] LocalFree (hMem=0x6774e0) returned 0x0 [0038.996] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned 125 [0038.996] lstrlenA (lpString="\\*.*") returned 4 [0038.996] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.996] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0038.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*" [0038.996] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0038.997] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0038.997] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.997] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0038.997] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0038.997] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0038.997] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0038.997] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0038.997] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0038.997] LocalFree (hMem=0x6776f0) returned 0x0 [0038.997] LocalFree (hMem=0x6775e8) returned 0x0 [0038.997] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0038.997] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0038.997] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0038.997] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0038.997] lstrlenA (lpString="\\") returned 1 [0038.997] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0038.997] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0038.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.997] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0038.997] lstrlenA (lpString="tr") returned 2 [0038.997] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0038.997] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0038.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0038.997] LocalFree (hMem=0x6774e0) returned 0x0 [0038.997] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned 125 [0038.997] lstrlenA (lpString="\\*.*") returned 4 [0038.997] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0038.997] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0038.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*" [0039.004] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.006] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.006] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.006] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.006] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.006] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.006] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.006] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.006] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.006] LocalFree (hMem=0x6776f0) returned 0x0 [0039.006] LocalFree (hMem=0x6775e8) returned 0x0 [0039.006] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.006] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.006] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0039.006] lstrlenA (lpString="\\") returned 1 [0039.006] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.006] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0039.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0039.006] lstrlenA (lpString="uk") returned 2 [0039.006] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.006] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0039.007] LocalFree (hMem=0x6774e0) returned 0x0 [0039.007] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned 125 [0039.007] lstrlenA (lpString="\\*.*") returned 4 [0039.007] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.007] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0039.007] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*" [0039.007] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.008] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.008] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.008] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.008] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.008] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.008] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.008] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.008] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.008] LocalFree (hMem=0x6776f0) returned 0x0 [0039.008] LocalFree (hMem=0x6775e8) returned 0x0 [0039.008] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.008] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.008] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0039.008] lstrlenA (lpString="\\") returned 1 [0039.008] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.008] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0039.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0039.008] lstrlenA (lpString="vi") returned 2 [0039.009] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.009] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.009] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0039.009] LocalFree (hMem=0x6774e0) returned 0x0 [0039.009] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned 125 [0039.009] lstrlenA (lpString="\\*.*") returned 4 [0039.009] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.009] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0039.009] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*" [0039.009] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.009] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.009] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.009] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.009] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.009] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.009] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.009] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.009] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.010] LocalFree (hMem=0x6776f0) returned 0x0 [0039.010] LocalFree (hMem=0x6775e8) returned 0x0 [0039.010] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.010] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.010] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0039.010] lstrlenA (lpString="\\") returned 1 [0039.010] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.010] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0039.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0039.010] lstrlenA (lpString="zh_CN") returned 5 [0039.010] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.010] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0039.010] LocalFree (hMem=0x6774e0) returned 0x0 [0039.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned 128 [0039.010] lstrlenA (lpString="\\*.*") returned 4 [0039.010] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.010] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0039.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*" [0039.010] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.010] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.010] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.010] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.010] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.010] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.010] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.010] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.010] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.011] LocalFree (hMem=0x6776f8) returned 0x0 [0039.011] LocalFree (hMem=0x6775e8) returned 0x0 [0039.011] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.011] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.011] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0039.011] lstrlenA (lpString="\\") returned 1 [0039.011] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.011] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0039.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0039.011] lstrlenA (lpString="zh_TW") returned 5 [0039.011] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.011] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0039.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0039.011] LocalFree (hMem=0x6774e0) returned 0x0 [0039.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned 128 [0039.011] lstrlenA (lpString="\\*.*") returned 4 [0039.011] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.011] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0039.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*" [0039.011] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.012] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.012] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.012] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.012] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.012] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.012] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.012] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.012] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.012] LocalFree (hMem=0x6776f8) returned 0x0 [0039.012] LocalFree (hMem=0x6775e8) returned 0x0 [0039.012] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.012] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.012] LocalFree (hMem=0x6773d8) returned 0x0 [0039.012] LocalFree (hMem=0x6772d0) returned 0x0 [0039.012] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.012] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.012] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 113 [0039.012] lstrlenA (lpString="\\") returned 1 [0039.012] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x664fc8 [0039.012] lstrcpyA (in: lpString1=0x664fc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0039.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0039.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 114 [0039.012] lstrlenA (lpString="_metadata") returned 9 [0039.012] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0039.012] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0039.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0039.013] LocalFree (hMem=0x664fc8) returned 0x0 [0039.013] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned 123 [0039.013] lstrlenA (lpString="\\*.*") returned 4 [0039.013] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0039.013] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0039.013] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*" [0039.013] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690468 [0039.013] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.013] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.013] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.013] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.013] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.013] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0039.049] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.049] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.049] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.049] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.049] LocalFree (hMem=0x6773d8) returned 0x0 [0039.049] LocalFree (hMem=0x6772d0) returned 0x0 [0039.049] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0039.050] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.050] LocalFree (hMem=0x664ec8) returned 0x0 [0039.050] LocalFree (hMem=0x664ac8) returned 0x0 [0039.050] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0039.050] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0039.050] LocalFree (hMem=0x6771d8) returned 0x0 [0039.050] LocalFree (hMem=0x69e108) returned 0x0 [0039.050] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0039.050] lstrcmpiA (lpString1=".", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0039.050] lstrcmpiA (lpString1="..", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0039.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0039.050] lstrlenA (lpString="\\") returned 1 [0039.050] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.050] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0039.050] lstrlenA (lpString="apdfllckaahabafndbhieahigkjlhalf") returned 32 [0039.050] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.050] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0039.050] LocalFree (hMem=0x69e030) returned 0x0 [0039.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 107 [0039.050] lstrlenA (lpString="\\*.*") returned 4 [0039.050] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.050] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0039.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*" [0039.050] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690268 [0039.051] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.051] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.051] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.051] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.051] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.051] lstrcmpiA (lpString1=".", lpString2="14.1_0") returned -1 [0039.051] lstrcmpiA (lpString1="..", lpString2="14.1_0") returned -1 [0039.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 107 [0039.051] lstrlenA (lpString="\\") returned 1 [0039.051] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.051] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0039.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0039.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned 108 [0039.051] lstrlenA (lpString="14.1_0") returned 6 [0039.051] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6659c8 [0039.051] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0039.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpString2="14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0039.051] LocalFree (hMem=0x6772d0) returned 0x0 [0039.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0039.051] lstrlenA (lpString="\\*.*") returned 4 [0039.051] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x663ec8 [0039.051] lstrcpyA (in: lpString1=0x663ec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0039.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*" [0039.051] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690068 [0039.052] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.052] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.053] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.053] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.053] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.053] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0039.053] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.053] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.053] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.053] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.053] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0039.053] lstrlenA (lpString="\\") returned 1 [0039.053] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x663fc8 [0039.053] lstrcpyA (in: lpString1=0x663fc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0039.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0039.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 115 [0039.053] lstrlenA (lpString="_locales") returned 8 [0039.053] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0039.053] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0039.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.053] LocalFree (hMem=0x663fc8) returned 0x0 [0039.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.053] lstrlenA (lpString="\\*.*") returned 4 [0039.053] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0039.053] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*" [0039.053] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6903a8 [0039.055] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.055] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.055] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.055] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.055] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.055] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0039.055] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0039.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.055] lstrlenA (lpString="\\") returned 1 [0039.055] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.055] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.055] lstrlenA (lpString="ar") returned 2 [0039.055] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.055] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0039.055] LocalFree (hMem=0x6774e0) returned 0x0 [0039.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned 126 [0039.056] lstrlenA (lpString="\\*.*") returned 4 [0039.056] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.056] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0039.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*" [0039.056] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.056] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.056] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.056] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.056] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.056] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.056] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.056] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.056] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.056] LocalFree (hMem=0x6776f0) returned 0x0 [0039.056] LocalFree (hMem=0x6775e8) returned 0x0 [0039.056] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.056] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.057] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.057] lstrlenA (lpString="\\") returned 1 [0039.057] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.057] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.057] lstrlenA (lpString="bg") returned 2 [0039.057] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.057] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0039.057] LocalFree (hMem=0x6774e0) returned 0x0 [0039.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned 126 [0039.057] lstrlenA (lpString="\\*.*") returned 4 [0039.057] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.057] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0039.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*" [0039.057] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.057] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.057] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.057] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.057] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.057] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.057] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.057] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.057] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.057] LocalFree (hMem=0x6776f0) returned 0x0 [0039.058] LocalFree (hMem=0x6775e8) returned 0x0 [0039.058] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.058] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.058] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.058] lstrlenA (lpString="\\") returned 1 [0039.058] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.058] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.058] lstrlenA (lpString="ca") returned 2 [0039.058] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.058] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0039.058] LocalFree (hMem=0x6774e0) returned 0x0 [0039.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned 126 [0039.058] lstrlenA (lpString="\\*.*") returned 4 [0039.058] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.058] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0039.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*" [0039.058] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.059] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.059] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.059] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.059] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.059] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.059] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.059] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.059] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.059] LocalFree (hMem=0x6776f0) returned 0x0 [0039.059] LocalFree (hMem=0x6775e8) returned 0x0 [0039.059] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.059] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.059] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.059] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.059] lstrlenA (lpString="\\") returned 1 [0039.059] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.059] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.059] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.059] lstrlenA (lpString="cs") returned 2 [0039.059] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.059] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0039.059] LocalFree (hMem=0x6774e0) returned 0x0 [0039.059] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned 126 [0039.059] lstrlenA (lpString="\\*.*") returned 4 [0039.059] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.059] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0039.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*" [0039.059] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.059] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.060] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.060] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.060] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.060] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.060] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.060] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.060] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.060] LocalFree (hMem=0x6776f0) returned 0x0 [0039.060] LocalFree (hMem=0x6775e8) returned 0x0 [0039.060] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.060] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.060] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.060] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.060] lstrlenA (lpString="\\") returned 1 [0039.060] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.060] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.060] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.060] lstrlenA (lpString="da") returned 2 [0039.060] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.060] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0039.060] LocalFree (hMem=0x6774e0) returned 0x0 [0039.060] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned 126 [0039.060] lstrlenA (lpString="\\*.*") returned 4 [0039.060] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.060] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0039.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*" [0039.060] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.061] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.061] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.061] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.061] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.061] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.061] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.061] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.061] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.061] LocalFree (hMem=0x6776f0) returned 0x0 [0039.061] LocalFree (hMem=0x6775e8) returned 0x0 [0039.061] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.061] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.061] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.061] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.061] lstrlenA (lpString="\\") returned 1 [0039.061] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.061] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.061] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.061] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.061] lstrlenA (lpString="de") returned 2 [0039.061] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.061] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.061] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0039.061] LocalFree (hMem=0x6774e0) returned 0x0 [0039.061] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned 126 [0039.061] lstrlenA (lpString="\\*.*") returned 4 [0039.061] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.061] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0039.061] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*" [0039.062] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.062] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.062] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.062] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.062] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.062] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.062] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.062] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.062] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.062] LocalFree (hMem=0x6776f0) returned 0x0 [0039.062] LocalFree (hMem=0x6775e8) returned 0x0 [0039.062] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.062] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.062] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.062] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.062] lstrlenA (lpString="\\") returned 1 [0039.062] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.062] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.062] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.062] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.062] lstrlenA (lpString="el") returned 2 [0039.062] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.062] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.062] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0039.062] LocalFree (hMem=0x6774e0) returned 0x0 [0039.062] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned 126 [0039.062] lstrlenA (lpString="\\*.*") returned 4 [0039.062] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.062] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0039.062] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*" [0039.062] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.063] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.063] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.063] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.063] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.063] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.063] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.063] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.063] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.063] LocalFree (hMem=0x6776f0) returned 0x0 [0039.063] LocalFree (hMem=0x6775e8) returned 0x0 [0039.063] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.063] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0039.063] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0039.063] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.063] lstrlenA (lpString="\\") returned 1 [0039.063] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.063] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.063] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.063] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.063] lstrlenA (lpString="en_GB") returned 5 [0039.064] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.064] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.064] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0039.064] LocalFree (hMem=0x6774e0) returned 0x0 [0039.064] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned 129 [0039.064] lstrlenA (lpString="\\*.*") returned 4 [0039.064] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.064] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0039.064] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*" [0039.064] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.064] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.064] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.064] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.064] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.064] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.064] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.064] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.064] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.064] LocalFree (hMem=0x6776f8) returned 0x0 [0039.064] LocalFree (hMem=0x6775e8) returned 0x0 [0039.064] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.064] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0039.064] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0039.064] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.064] lstrlenA (lpString="\\") returned 1 [0039.064] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.064] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.064] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.064] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.064] lstrlenA (lpString="en_US") returned 5 [0039.064] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.065] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.065] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0039.065] LocalFree (hMem=0x6774e0) returned 0x0 [0039.065] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned 129 [0039.065] lstrlenA (lpString="\\*.*") returned 4 [0039.065] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.065] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0039.065] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*" [0039.065] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.065] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.065] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.065] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.065] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.065] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.065] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.065] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.066] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.066] LocalFree (hMem=0x6776f8) returned 0x0 [0039.066] LocalFree (hMem=0x6775e8) returned 0x0 [0039.066] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.066] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.066] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.066] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.066] lstrlenA (lpString="\\") returned 1 [0039.066] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.066] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.066] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.066] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.066] lstrlenA (lpString="es") returned 2 [0039.066] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.066] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.066] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0039.066] LocalFree (hMem=0x6774e0) returned 0x0 [0039.066] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned 126 [0039.066] lstrlenA (lpString="\\*.*") returned 4 [0039.066] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.066] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0039.066] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*" [0039.066] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.066] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.066] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.066] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.066] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.066] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.066] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.066] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.066] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.067] LocalFree (hMem=0x6776f0) returned 0x0 [0039.067] LocalFree (hMem=0x6775e8) returned 0x0 [0039.067] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.067] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0039.067] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0039.067] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.067] lstrlenA (lpString="\\") returned 1 [0039.067] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.067] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.067] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.067] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.067] lstrlenA (lpString="es_419") returned 6 [0039.067] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775e8 [0039.067] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.067] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0039.067] LocalFree (hMem=0x6774e0) returned 0x0 [0039.067] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned 130 [0039.067] lstrlenA (lpString="\\*.*") returned 4 [0039.067] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x6776f8 [0039.067] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0039.067] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*" [0039.067] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.068] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.068] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.068] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.068] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.068] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.068] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.068] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.068] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.068] LocalFree (hMem=0x6776f8) returned 0x0 [0039.068] LocalFree (hMem=0x6775e8) returned 0x0 [0039.068] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.068] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0039.068] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0039.068] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.068] lstrlenA (lpString="\\") returned 1 [0039.068] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.068] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.068] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.068] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.068] lstrlenA (lpString="et") returned 2 [0039.068] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.068] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.068] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0039.068] LocalFree (hMem=0x6774e0) returned 0x0 [0039.068] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned 126 [0039.068] lstrlenA (lpString="\\*.*") returned 4 [0039.068] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.068] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0039.068] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*" [0039.068] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.069] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.069] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.069] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.070] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.070] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.070] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.070] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.070] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.070] LocalFree (hMem=0x6776f0) returned 0x0 [0039.070] LocalFree (hMem=0x6775e8) returned 0x0 [0039.070] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.070] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0039.070] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0039.070] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.070] lstrlenA (lpString="\\") returned 1 [0039.070] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.070] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.070] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.070] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.070] lstrlenA (lpString="eu") returned 2 [0039.070] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.071] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.071] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0039.071] LocalFree (hMem=0x6774e0) returned 0x0 [0039.071] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned 126 [0039.071] lstrlenA (lpString="\\*.*") returned 4 [0039.071] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.071] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0039.071] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*" [0039.071] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.071] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.071] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.071] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.071] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.071] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.071] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.072] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.072] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.072] LocalFree (hMem=0x6776f0) returned 0x0 [0039.072] LocalFree (hMem=0x6775e8) returned 0x0 [0039.072] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.072] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.072] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.072] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.072] lstrlenA (lpString="\\") returned 1 [0039.072] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.072] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.072] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.072] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.072] lstrlenA (lpString="fi") returned 2 [0039.072] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.072] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.072] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0039.072] LocalFree (hMem=0x6774e0) returned 0x0 [0039.072] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned 126 [0039.072] lstrlenA (lpString="\\*.*") returned 4 [0039.072] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.072] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0039.072] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*" [0039.072] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0039.072] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.072] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.072] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.072] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.072] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.072] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.072] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.073] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0039.073] LocalFree (hMem=0x6776f0) returned 0x0 [0039.073] LocalFree (hMem=0x6775e8) returned 0x0 [0039.073] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.073] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.073] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.073] lstrlenA (lpString="\\") returned 1 [0039.073] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.073] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.073] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.073] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.073] lstrlenA (lpString="fil") returned 3 [0039.073] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775e8 [0039.073] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.073] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0039.073] LocalFree (hMem=0x6774e0) returned 0x0 [0039.073] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned 127 [0039.073] lstrlenA (lpString="\\*.*") returned 4 [0039.073] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f0 [0039.073] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0039.073] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*" [0039.073] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.074] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.074] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.074] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.074] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.074] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.074] LocalFree (hMem=0x6776f0) returned 0x0 [0039.074] LocalFree (hMem=0x6775e8) returned 0x0 [0039.074] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.074] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.074] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.074] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.074] lstrlenA (lpString="\\") returned 1 [0039.074] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.074] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.074] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.074] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.074] lstrlenA (lpString="fr") returned 2 [0039.074] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.074] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.074] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0039.074] LocalFree (hMem=0x6774e0) returned 0x0 [0039.074] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned 126 [0039.074] lstrlenA (lpString="\\*.*") returned 4 [0039.074] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.075] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0039.075] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*" [0039.075] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.075] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.075] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.075] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.075] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.075] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.075] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.075] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.075] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.075] LocalFree (hMem=0x6776f0) returned 0x0 [0039.075] LocalFree (hMem=0x6775e8) returned 0x0 [0039.075] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.075] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0039.075] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0039.075] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.075] lstrlenA (lpString="\\") returned 1 [0039.075] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.075] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.075] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.076] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.076] lstrlenA (lpString="he") returned 2 [0039.076] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.076] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.076] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0039.076] LocalFree (hMem=0x6774e0) returned 0x0 [0039.076] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned 126 [0039.076] lstrlenA (lpString="\\*.*") returned 4 [0039.076] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.076] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0039.076] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*" [0039.076] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.076] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.076] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.076] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.076] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.076] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.076] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.076] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.076] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.077] LocalFree (hMem=0x6776f0) returned 0x0 [0039.077] LocalFree (hMem=0x6775e8) returned 0x0 [0039.077] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.077] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.077] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.077] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.077] lstrlenA (lpString="\\") returned 1 [0039.077] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.077] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.077] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.077] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.077] lstrlenA (lpString="hi") returned 2 [0039.077] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.077] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.077] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0039.077] LocalFree (hMem=0x6774e0) returned 0x0 [0039.077] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned 126 [0039.077] lstrlenA (lpString="\\*.*") returned 4 [0039.077] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.077] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0039.077] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*" [0039.077] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.077] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.077] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.077] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.077] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.077] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.078] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.078] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.078] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.078] LocalFree (hMem=0x6776f0) returned 0x0 [0039.078] LocalFree (hMem=0x6775e8) returned 0x0 [0039.078] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.078] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0039.078] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0039.078] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.078] lstrlenA (lpString="\\") returned 1 [0039.078] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.078] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.078] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.078] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.078] lstrlenA (lpString="hr") returned 2 [0039.078] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.078] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.078] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0039.078] LocalFree (hMem=0x6774e0) returned 0x0 [0039.078] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned 126 [0039.078] lstrlenA (lpString="\\*.*") returned 4 [0039.078] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.078] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0039.078] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*" [0039.078] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.079] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.079] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.079] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.079] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.079] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.079] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.079] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.079] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.079] LocalFree (hMem=0x6776f0) returned 0x0 [0039.079] LocalFree (hMem=0x6775e8) returned 0x0 [0039.079] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.079] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0039.079] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0039.079] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.079] lstrlenA (lpString="\\") returned 1 [0039.079] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.079] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.079] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.079] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.079] lstrlenA (lpString="hu") returned 2 [0039.079] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.079] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.079] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0039.079] LocalFree (hMem=0x6774e0) returned 0x0 [0039.079] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned 126 [0039.079] lstrlenA (lpString="\\*.*") returned 4 [0039.079] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.079] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0039.079] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*" [0039.079] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.080] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.080] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.080] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.080] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.080] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.080] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.080] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.080] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.080] LocalFree (hMem=0x6776f0) returned 0x0 [0039.080] LocalFree (hMem=0x6775e8) returned 0x0 [0039.080] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.080] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0039.080] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0039.080] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.080] lstrlenA (lpString="\\") returned 1 [0039.080] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.080] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.080] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.080] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.080] lstrlenA (lpString="id") returned 2 [0039.080] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.080] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.080] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0039.080] LocalFree (hMem=0x6774e0) returned 0x0 [0039.080] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned 126 [0039.080] lstrlenA (lpString="\\*.*") returned 4 [0039.080] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.080] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0039.080] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*" [0039.080] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.081] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.081] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.081] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.081] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.081] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.081] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.081] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.081] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.081] LocalFree (hMem=0x6776f0) returned 0x0 [0039.081] LocalFree (hMem=0x6775e8) returned 0x0 [0039.081] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.081] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0039.081] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0039.081] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.081] lstrlenA (lpString="\\") returned 1 [0039.081] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.081] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.081] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.081] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.081] lstrlenA (lpString="it") returned 2 [0039.081] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.081] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.082] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0039.082] LocalFree (hMem=0x6774e0) returned 0x0 [0039.082] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned 126 [0039.082] lstrlenA (lpString="\\*.*") returned 4 [0039.082] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.082] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0039.082] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*" [0039.082] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.082] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.082] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.082] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.082] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.082] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.082] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.082] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.082] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.082] LocalFree (hMem=0x6776f0) returned 0x0 [0039.082] LocalFree (hMem=0x6775e8) returned 0x0 [0039.082] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.082] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0039.082] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0039.082] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.082] lstrlenA (lpString="\\") returned 1 [0039.082] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.082] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.082] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.082] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.082] lstrlenA (lpString="ja") returned 2 [0039.082] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.083] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.083] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0039.083] LocalFree (hMem=0x6774e0) returned 0x0 [0039.083] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned 126 [0039.083] lstrlenA (lpString="\\*.*") returned 4 [0039.083] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.083] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0039.083] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*" [0039.083] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.083] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.083] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.083] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.083] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.083] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.083] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.084] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.084] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.084] LocalFree (hMem=0x6776f0) returned 0x0 [0039.084] LocalFree (hMem=0x6775e8) returned 0x0 [0039.084] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.084] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0039.084] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0039.084] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.084] lstrlenA (lpString="\\") returned 1 [0039.084] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.084] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.084] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.084] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.084] lstrlenA (lpString="ko") returned 2 [0039.084] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.084] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.084] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0039.084] LocalFree (hMem=0x6774e0) returned 0x0 [0039.084] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned 126 [0039.084] lstrlenA (lpString="\\*.*") returned 4 [0039.084] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.084] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0039.084] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*" [0039.084] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.084] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.084] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.084] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.084] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.084] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.084] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.084] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.085] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.085] LocalFree (hMem=0x6776f0) returned 0x0 [0039.085] LocalFree (hMem=0x6775e8) returned 0x0 [0039.085] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.085] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0039.085] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0039.085] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.085] lstrlenA (lpString="\\") returned 1 [0039.085] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.085] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.085] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.085] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.085] lstrlenA (lpString="lt") returned 2 [0039.085] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.085] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.085] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0039.085] LocalFree (hMem=0x6774e0) returned 0x0 [0039.085] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned 126 [0039.085] lstrlenA (lpString="\\*.*") returned 4 [0039.085] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.085] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0039.085] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*" [0039.085] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0039.086] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.086] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.086] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.086] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.086] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.086] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.086] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.086] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.086] LocalFree (hMem=0x6776f0) returned 0x0 [0039.086] LocalFree (hMem=0x6775e8) returned 0x0 [0039.086] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.086] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0039.086] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0039.086] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.086] lstrlenA (lpString="\\") returned 1 [0039.086] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.086] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.086] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.086] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.086] lstrlenA (lpString="lv") returned 2 [0039.086] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.086] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.086] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0039.086] LocalFree (hMem=0x6774e0) returned 0x0 [0039.086] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned 126 [0039.086] lstrlenA (lpString="\\*.*") returned 4 [0039.086] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.086] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0039.086] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*" [0039.086] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.087] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.087] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.087] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.087] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.087] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.087] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.087] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.087] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.087] LocalFree (hMem=0x6776f0) returned 0x0 [0039.087] LocalFree (hMem=0x6775e8) returned 0x0 [0039.087] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.087] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0039.087] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0039.087] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.087] lstrlenA (lpString="\\") returned 1 [0039.087] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.087] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.087] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.087] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.087] lstrlenA (lpString="ms") returned 2 [0039.087] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.087] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.128] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0039.128] LocalFree (hMem=0x6774e0) returned 0x0 [0039.128] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned 126 [0039.128] lstrlenA (lpString="\\*.*") returned 4 [0039.128] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.129] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0039.129] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*" [0039.129] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.129] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.129] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.129] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.129] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.129] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.129] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.129] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.129] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.129] LocalFree (hMem=0x6776f0) returned 0x0 [0039.129] LocalFree (hMem=0x6775e8) returned 0x0 [0039.129] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.129] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0039.129] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0039.130] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.130] lstrlenA (lpString="\\") returned 1 [0039.130] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.130] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.130] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.130] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.130] lstrlenA (lpString="nl") returned 2 [0039.130] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.130] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.130] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0039.130] LocalFree (hMem=0x6774e0) returned 0x0 [0039.130] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned 126 [0039.130] lstrlenA (lpString="\\*.*") returned 4 [0039.130] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.130] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0039.130] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*" [0039.130] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.130] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.130] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.130] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.130] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.130] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.130] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.130] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.130] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.133] LocalFree (hMem=0x6776f0) returned 0x0 [0039.133] LocalFree (hMem=0x6775e8) returned 0x0 [0039.133] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.133] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0039.133] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0039.133] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.133] lstrlenA (lpString="\\") returned 1 [0039.133] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.133] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.133] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.133] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.133] lstrlenA (lpString="no") returned 2 [0039.133] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.133] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.133] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0039.133] LocalFree (hMem=0x6774e0) returned 0x0 [0039.133] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned 126 [0039.133] lstrlenA (lpString="\\*.*") returned 4 [0039.133] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.134] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0039.134] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*" [0039.134] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.134] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.134] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.134] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.134] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.134] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.134] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.134] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.134] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.134] LocalFree (hMem=0x6776f0) returned 0x0 [0039.134] LocalFree (hMem=0x6775e8) returned 0x0 [0039.134] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.134] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0039.134] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0039.135] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.135] lstrlenA (lpString="\\") returned 1 [0039.135] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.135] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.135] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.135] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.135] lstrlenA (lpString="pl") returned 2 [0039.135] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.135] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.135] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0039.135] LocalFree (hMem=0x6774e0) returned 0x0 [0039.135] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned 126 [0039.135] lstrlenA (lpString="\\*.*") returned 4 [0039.135] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.135] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0039.135] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*" [0039.135] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.135] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.135] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.135] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.135] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.135] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.135] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.135] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.135] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.135] LocalFree (hMem=0x6776f0) returned 0x0 [0039.135] LocalFree (hMem=0x6775e8) returned 0x0 [0039.135] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.136] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0039.136] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0039.136] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.136] lstrlenA (lpString="\\") returned 1 [0039.136] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.136] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.136] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.136] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.136] lstrlenA (lpString="pt_BR") returned 5 [0039.136] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.136] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.136] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0039.136] LocalFree (hMem=0x6774e0) returned 0x0 [0039.136] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned 129 [0039.136] lstrlenA (lpString="\\*.*") returned 4 [0039.136] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.136] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0039.136] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*" [0039.136] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.137] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.137] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.137] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.137] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.137] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.137] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.137] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.137] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.137] LocalFree (hMem=0x6776f8) returned 0x0 [0039.137] LocalFree (hMem=0x6775e8) returned 0x0 [0039.137] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.137] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0039.137] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0039.137] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.137] lstrlenA (lpString="\\") returned 1 [0039.137] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.137] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.137] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.137] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.137] lstrlenA (lpString="pt_PT") returned 5 [0039.137] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.137] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.137] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0039.137] LocalFree (hMem=0x6774e0) returned 0x0 [0039.137] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned 129 [0039.137] lstrlenA (lpString="\\*.*") returned 4 [0039.137] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.137] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0039.137] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*" [0039.137] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.137] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.137] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.137] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.138] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.138] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.138] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.138] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.138] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.138] LocalFree (hMem=0x6776f8) returned 0x0 [0039.138] LocalFree (hMem=0x6775e8) returned 0x0 [0039.138] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.138] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0039.138] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0039.138] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.138] lstrlenA (lpString="\\") returned 1 [0039.138] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.138] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.138] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.138] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.138] lstrlenA (lpString="ro") returned 2 [0039.138] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.138] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.138] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0039.138] LocalFree (hMem=0x6774e0) returned 0x0 [0039.138] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned 126 [0039.138] lstrlenA (lpString="\\*.*") returned 4 [0039.138] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.138] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0039.138] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*" [0039.138] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.139] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.139] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.139] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.139] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.139] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.139] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.139] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.139] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.139] LocalFree (hMem=0x6776f0) returned 0x0 [0039.139] LocalFree (hMem=0x6775e8) returned 0x0 [0039.139] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.139] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0039.139] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0039.139] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.139] lstrlenA (lpString="\\") returned 1 [0039.139] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.139] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.139] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.139] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.139] lstrlenA (lpString="ru") returned 2 [0039.139] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.139] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.139] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0039.139] LocalFree (hMem=0x6774e0) returned 0x0 [0039.139] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned 126 [0039.139] lstrlenA (lpString="\\*.*") returned 4 [0039.139] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.140] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0039.140] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*" [0039.140] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.140] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.140] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.140] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.140] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.140] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.140] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.140] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.140] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.140] LocalFree (hMem=0x6776f0) returned 0x0 [0039.140] LocalFree (hMem=0x6775e8) returned 0x0 [0039.140] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.140] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0039.140] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0039.140] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.140] lstrlenA (lpString="\\") returned 1 [0039.140] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.140] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.140] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.140] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.140] lstrlenA (lpString="sk") returned 2 [0039.140] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.140] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.140] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0039.140] LocalFree (hMem=0x6774e0) returned 0x0 [0039.140] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned 126 [0039.140] lstrlenA (lpString="\\*.*") returned 4 [0039.140] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.140] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0039.140] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*" [0039.140] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.141] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.141] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.141] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.141] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.141] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.141] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.141] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.141] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.141] LocalFree (hMem=0x6776f0) returned 0x0 [0039.141] LocalFree (hMem=0x6775e8) returned 0x0 [0039.141] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.141] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0039.141] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0039.141] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.141] lstrlenA (lpString="\\") returned 1 [0039.142] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.142] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.142] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.142] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.142] lstrlenA (lpString="sl") returned 2 [0039.142] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.142] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.142] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0039.142] LocalFree (hMem=0x6774e0) returned 0x0 [0039.142] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned 126 [0039.142] lstrlenA (lpString="\\*.*") returned 4 [0039.142] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.142] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0039.142] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*" [0039.142] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0039.142] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.142] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.142] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.142] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.142] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.142] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.142] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.142] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0039.142] LocalFree (hMem=0x6776f0) returned 0x0 [0039.142] LocalFree (hMem=0x6775e8) returned 0x0 [0039.142] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.142] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0039.142] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0039.142] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.142] lstrlenA (lpString="\\") returned 1 [0039.142] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.143] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.143] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.143] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.143] lstrlenA (lpString="sr") returned 2 [0039.143] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.143] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.143] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0039.143] LocalFree (hMem=0x6774e0) returned 0x0 [0039.143] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned 126 [0039.143] lstrlenA (lpString="\\*.*") returned 4 [0039.143] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.143] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0039.143] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*" [0039.143] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.143] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.143] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.143] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.143] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.143] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.143] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.143] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.144] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.144] LocalFree (hMem=0x6776f0) returned 0x0 [0039.144] LocalFree (hMem=0x6775e8) returned 0x0 [0039.144] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.144] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0039.144] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0039.144] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.144] lstrlenA (lpString="\\") returned 1 [0039.144] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.144] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.144] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.144] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.144] lstrlenA (lpString="sv") returned 2 [0039.144] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.144] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.144] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0039.144] LocalFree (hMem=0x6774e0) returned 0x0 [0039.144] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned 126 [0039.144] lstrlenA (lpString="\\*.*") returned 4 [0039.144] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.144] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0039.144] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*" [0039.144] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.144] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.144] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.144] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.144] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.144] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.145] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.145] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.145] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.145] LocalFree (hMem=0x6776f0) returned 0x0 [0039.145] LocalFree (hMem=0x6775e8) returned 0x0 [0039.145] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.145] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0039.145] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0039.145] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.145] lstrlenA (lpString="\\") returned 1 [0039.145] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.145] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.145] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.145] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.145] lstrlenA (lpString="th") returned 2 [0039.145] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.145] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.145] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0039.145] LocalFree (hMem=0x6774e0) returned 0x0 [0039.145] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned 126 [0039.145] lstrlenA (lpString="\\*.*") returned 4 [0039.145] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.145] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0039.145] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*" [0039.145] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.146] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.146] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.146] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.146] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.146] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.146] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.146] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.146] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.146] LocalFree (hMem=0x6776f0) returned 0x0 [0039.146] LocalFree (hMem=0x6775e8) returned 0x0 [0039.146] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.146] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0039.146] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0039.146] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.146] lstrlenA (lpString="\\") returned 1 [0039.146] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.146] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.146] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.146] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.146] lstrlenA (lpString="tr") returned 2 [0039.146] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.146] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.146] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0039.146] LocalFree (hMem=0x6774e0) returned 0x0 [0039.146] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned 126 [0039.146] lstrlenA (lpString="\\*.*") returned 4 [0039.146] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.146] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0039.146] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*" [0039.147] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.147] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.147] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.147] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.147] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.147] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.147] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.147] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.147] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.147] LocalFree (hMem=0x6776f0) returned 0x0 [0039.147] LocalFree (hMem=0x6775e8) returned 0x0 [0039.147] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.147] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.147] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.147] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.147] lstrlenA (lpString="\\") returned 1 [0039.147] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.147] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.147] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.147] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.147] lstrlenA (lpString="uk") returned 2 [0039.147] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.147] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.147] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0039.147] LocalFree (hMem=0x6774e0) returned 0x0 [0039.147] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned 126 [0039.147] lstrlenA (lpString="\\*.*") returned 4 [0039.147] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.147] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0039.148] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*" [0039.148] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.148] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.148] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.148] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.148] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.148] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.148] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.148] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.148] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.148] LocalFree (hMem=0x6776f0) returned 0x0 [0039.148] LocalFree (hMem=0x6775e8) returned 0x0 [0039.148] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.148] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.148] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.149] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.149] lstrlenA (lpString="\\") returned 1 [0039.149] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.149] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.149] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.149] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.149] lstrlenA (lpString="vi") returned 2 [0039.149] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.149] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.149] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0039.149] LocalFree (hMem=0x6774e0) returned 0x0 [0039.149] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned 126 [0039.149] lstrlenA (lpString="\\*.*") returned 4 [0039.149] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.149] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0039.149] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*" [0039.149] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.149] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.149] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.149] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.149] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.149] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.149] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.149] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.149] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.149] LocalFree (hMem=0x6776f0) returned 0x0 [0039.149] LocalFree (hMem=0x6775e8) returned 0x0 [0039.149] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.149] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.149] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.149] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.149] lstrlenA (lpString="\\") returned 1 [0039.149] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.149] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.150] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.150] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.150] lstrlenA (lpString="zh_CN") returned 5 [0039.150] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.150] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.150] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0039.150] LocalFree (hMem=0x6774e0) returned 0x0 [0039.150] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned 129 [0039.150] lstrlenA (lpString="\\*.*") returned 4 [0039.150] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.150] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0039.150] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*" [0039.150] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.150] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.150] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.150] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.150] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.150] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.150] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.150] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.151] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.151] LocalFree (hMem=0x6776f8) returned 0x0 [0039.151] LocalFree (hMem=0x6775e8) returned 0x0 [0039.151] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.151] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.151] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.151] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0039.151] lstrlenA (lpString="\\") returned 1 [0039.151] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0039.151] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0039.151] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.151] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0039.151] lstrlenA (lpString="zh_TW") returned 5 [0039.151] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.151] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0039.151] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0039.151] LocalFree (hMem=0x6774e0) returned 0x0 [0039.151] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned 129 [0039.151] lstrlenA (lpString="\\*.*") returned 4 [0039.151] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.151] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0039.151] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*" [0039.151] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.151] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.151] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.151] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.151] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.151] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.151] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.151] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.152] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.152] LocalFree (hMem=0x6776f8) returned 0x0 [0039.152] LocalFree (hMem=0x6775e8) returned 0x0 [0039.152] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.152] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.152] LocalFree (hMem=0x6773d8) returned 0x0 [0039.152] LocalFree (hMem=0x6772d0) returned 0x0 [0039.152] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.152] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.152] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.152] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0039.153] lstrlenA (lpString="\\") returned 1 [0039.153] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6646c8 [0039.153] lstrcpyA (in: lpString1=0x6646c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0039.153] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0039.153] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 115 [0039.153] lstrlenA (lpString="_metadata") returned 9 [0039.153] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6772d0 [0039.153] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0039.153] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0039.153] LocalFree (hMem=0x6646c8) returned 0x0 [0039.153] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned 124 [0039.153] lstrlenA (lpString="\\*.*") returned 4 [0039.153] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6773d8 [0039.153] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0039.153] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*" [0039.153] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x68fee8 [0039.154] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.154] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.154] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.154] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.154] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.154] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.154] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.154] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.154] LocalFree (hMem=0x6773d8) returned 0x0 [0039.154] LocalFree (hMem=0x6772d0) returned 0x0 [0039.154] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0039.154] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.154] LocalFree (hMem=0x663ec8) returned 0x0 [0039.154] LocalFree (hMem=0x6659c8) returned 0x0 [0039.154] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0039.154] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.154] LocalFree (hMem=0x6771d8) returned 0x0 [0039.154] LocalFree (hMem=0x69e108) returned 0x0 [0039.154] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0039.154] lstrcmpiA (lpString1=".", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned -1 [0039.154] lstrcmpiA (lpString1="..", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned -1 [0039.154] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0039.154] lstrlenA (lpString="\\") returned 1 [0039.154] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.154] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.154] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.154] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0039.155] lstrlenA (lpString="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 32 [0039.155] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.155] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.155] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0039.155] LocalFree (hMem=0x69e030) returned 0x0 [0039.155] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 107 [0039.155] lstrlenA (lpString="\\*.*") returned 4 [0039.155] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.155] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0039.155] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*" [0039.155] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690068 [0039.156] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.156] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.156] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.156] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.156] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.156] lstrcmpiA (lpString1=".", lpString2="4.2.8_0") returned -1 [0039.156] lstrcmpiA (lpString1="..", lpString2="4.2.8_0") returned -1 [0039.156] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 107 [0039.156] lstrlenA (lpString="\\") returned 1 [0039.156] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.156] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0039.156] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0039.156] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned 108 [0039.156] lstrlenA (lpString="4.2.8_0") returned 7 [0039.156] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6657c8 [0039.156] lstrcpyA (in: lpString1=0x6657c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0039.156] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpString2="4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0039.156] LocalFree (hMem=0x6772d0) returned 0x0 [0039.156] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 115 [0039.156] lstrlenA (lpString="\\*.*") returned 4 [0039.156] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x6655c8 [0039.156] lstrcpyA (in: lpString1=0x6655c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0039.156] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*" [0039.156] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690468 [0039.158] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.158] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.158] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.158] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.158] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.158] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0039.158] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.158] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.158] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.158] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.158] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.158] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 115 [0039.158] lstrlenA (lpString="\\") returned 1 [0039.158] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x6641c8 [0039.158] lstrcpyA (in: lpString1=0x6641c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0039.158] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0039.158] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned 116 [0039.158] lstrlenA (lpString="_locales") returned 8 [0039.158] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6772d0 [0039.158] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0039.158] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.158] LocalFree (hMem=0x6641c8) returned 0x0 [0039.158] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.158] lstrlenA (lpString="\\*.*") returned 4 [0039.158] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6773d8 [0039.158] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.158] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*" [0039.158] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6901a8 [0039.160] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.160] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.160] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.160] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.160] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.160] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0039.160] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0039.160] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.160] lstrlenA (lpString="\\") returned 1 [0039.160] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.160] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.160] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.160] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.160] lstrlenA (lpString="ar") returned 2 [0039.160] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.160] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.160] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0039.160] LocalFree (hMem=0x6774e8) returned 0x0 [0039.160] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned 127 [0039.160] lstrlenA (lpString="\\*.*") returned 4 [0039.160] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.160] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0039.160] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*" [0039.160] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.161] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.161] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.161] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.161] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.161] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.161] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.161] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.161] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.161] LocalFree (hMem=0x6776f8) returned 0x0 [0039.161] LocalFree (hMem=0x6775f0) returned 0x0 [0039.161] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.161] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.161] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.161] lstrlenA (lpString="\\") returned 1 [0039.161] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.161] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.161] lstrlenA (lpString="bg") returned 2 [0039.161] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.161] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0039.161] LocalFree (hMem=0x6774e8) returned 0x0 [0039.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned 127 [0039.161] lstrlenA (lpString="\\*.*") returned 4 [0039.161] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.161] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0039.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*" [0039.161] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.162] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.162] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.162] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.162] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.162] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.162] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.162] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.162] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.162] LocalFree (hMem=0x6776f8) returned 0x0 [0039.162] LocalFree (hMem=0x6775f0) returned 0x0 [0039.162] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.162] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.162] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.162] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.162] lstrlenA (lpString="\\") returned 1 [0039.162] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.162] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.162] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.162] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.162] lstrlenA (lpString="ca") returned 2 [0039.162] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.162] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.162] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0039.162] LocalFree (hMem=0x6774e8) returned 0x0 [0039.162] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned 127 [0039.162] lstrlenA (lpString="\\*.*") returned 4 [0039.162] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.162] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0039.162] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*" [0039.162] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.163] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.163] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.163] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.163] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.163] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.163] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.163] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.163] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.163] LocalFree (hMem=0x6776f8) returned 0x0 [0039.163] LocalFree (hMem=0x6775f0) returned 0x0 [0039.163] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.163] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.163] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.163] lstrlenA (lpString="\\") returned 1 [0039.163] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.163] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.163] lstrlenA (lpString="cs") returned 2 [0039.163] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.163] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0039.163] LocalFree (hMem=0x6774e8) returned 0x0 [0039.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned 127 [0039.164] lstrlenA (lpString="\\*.*") returned 4 [0039.164] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.164] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0039.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*" [0039.164] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.164] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.164] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.164] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.164] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.164] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.164] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.164] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.164] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.164] LocalFree (hMem=0x6776f8) returned 0x0 [0039.164] LocalFree (hMem=0x6775f0) returned 0x0 [0039.164] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.164] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.164] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.164] lstrlenA (lpString="\\") returned 1 [0039.164] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.164] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.164] lstrlenA (lpString="da") returned 2 [0039.164] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.164] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0039.164] LocalFree (hMem=0x6774e8) returned 0x0 [0039.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned 127 [0039.164] lstrlenA (lpString="\\*.*") returned 4 [0039.165] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.165] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0039.165] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*" [0039.165] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.165] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.165] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.165] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.165] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.165] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.165] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.165] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.165] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.165] LocalFree (hMem=0x6776f8) returned 0x0 [0039.165] LocalFree (hMem=0x6775f0) returned 0x0 [0039.165] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.166] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.166] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.166] lstrlenA (lpString="\\") returned 1 [0039.166] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.166] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.166] lstrlenA (lpString="de") returned 2 [0039.166] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.166] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0039.166] LocalFree (hMem=0x6774e8) returned 0x0 [0039.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned 127 [0039.166] lstrlenA (lpString="\\*.*") returned 4 [0039.166] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.166] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0039.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*" [0039.166] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.166] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.166] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.166] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.166] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.166] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.166] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.166] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.166] LocalFree (hMem=0x6776f8) returned 0x0 [0039.166] LocalFree (hMem=0x6775f0) returned 0x0 [0039.166] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.167] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.167] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.167] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.167] lstrlenA (lpString="\\") returned 1 [0039.167] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.167] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.167] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.167] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.167] lstrlenA (lpString="el") returned 2 [0039.167] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.167] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.167] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0039.167] LocalFree (hMem=0x6774e8) returned 0x0 [0039.167] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned 127 [0039.167] lstrlenA (lpString="\\*.*") returned 4 [0039.167] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.167] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0039.167] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*" [0039.167] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.168] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.168] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.168] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.168] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.168] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.168] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.168] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.168] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.168] LocalFree (hMem=0x6776f8) returned 0x0 [0039.168] LocalFree (hMem=0x6775f0) returned 0x0 [0039.168] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.168] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0039.168] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0039.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.168] lstrlenA (lpString="\\") returned 1 [0039.168] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.168] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.168] lstrlenA (lpString="en") returned 2 [0039.168] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.168] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0039.168] LocalFree (hMem=0x6774e8) returned 0x0 [0039.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned 127 [0039.168] lstrlenA (lpString="\\*.*") returned 4 [0039.168] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.168] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0039.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*" [0039.168] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.169] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.169] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.169] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.169] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.169] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.169] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.169] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.169] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.169] LocalFree (hMem=0x6776f8) returned 0x0 [0039.169] LocalFree (hMem=0x6775f0) returned 0x0 [0039.169] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.169] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.169] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.169] lstrlenA (lpString="\\") returned 1 [0039.169] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.169] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.169] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.169] lstrlenA (lpString="es") returned 2 [0039.169] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.169] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.169] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0039.169] LocalFree (hMem=0x6774e8) returned 0x0 [0039.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned 127 [0039.169] lstrlenA (lpString="\\*.*") returned 4 [0039.169] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.169] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0039.255] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*" [0039.255] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.257] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.257] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.257] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.257] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.257] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.257] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.257] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.258] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.258] LocalFree (hMem=0x6776f8) returned 0x0 [0039.258] LocalFree (hMem=0x6775f0) returned 0x0 [0039.258] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.258] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.258] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.258] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.258] lstrlenA (lpString="\\") returned 1 [0039.258] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.258] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.258] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.258] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.258] lstrlenA (lpString="fi") returned 2 [0039.258] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.258] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.258] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0039.258] LocalFree (hMem=0x6774e8) returned 0x0 [0039.259] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned 127 [0039.259] lstrlenA (lpString="\\*.*") returned 4 [0039.259] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.259] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0039.259] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*" [0039.259] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.259] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.259] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.259] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.259] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.259] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.259] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.259] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.259] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.260] LocalFree (hMem=0x6776f8) returned 0x0 [0039.260] LocalFree (hMem=0x6775f0) returned 0x0 [0039.260] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.260] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.260] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0039.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.260] lstrlenA (lpString="\\") returned 1 [0039.260] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.260] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.260] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.260] lstrlenA (lpString="fil") returned 3 [0039.260] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775f0 [0039.260] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.260] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0039.260] LocalFree (hMem=0x6774e8) returned 0x0 [0039.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned 128 [0039.260] lstrlenA (lpString="\\*.*") returned 4 [0039.260] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677700 [0039.260] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0039.261] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*" [0039.261] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.262] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.262] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.262] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.262] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.262] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.262] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.262] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.262] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.262] LocalFree (hMem=0x677700) returned 0x0 [0039.262] LocalFree (hMem=0x6775f0) returned 0x0 [0039.262] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.262] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.262] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.262] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.262] lstrlenA (lpString="\\") returned 1 [0039.262] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.262] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.263] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.263] lstrlenA (lpString="fr") returned 2 [0039.263] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.263] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0039.263] LocalFree (hMem=0x6774e8) returned 0x0 [0039.263] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned 127 [0039.263] lstrlenA (lpString="\\*.*") returned 4 [0039.263] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.263] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0039.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*" [0039.263] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.264] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.264] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.264] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.264] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.264] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.264] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.264] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.264] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.264] LocalFree (hMem=0x6776f8) returned 0x0 [0039.264] LocalFree (hMem=0x6775f0) returned 0x0 [0039.264] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.264] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0039.264] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0039.264] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.264] lstrlenA (lpString="\\") returned 1 [0039.264] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.264] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.264] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.265] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.265] lstrlenA (lpString="he") returned 2 [0039.265] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.265] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.265] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0039.265] LocalFree (hMem=0x6774e8) returned 0x0 [0039.265] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned 127 [0039.265] lstrlenA (lpString="\\*.*") returned 4 [0039.265] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.265] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0039.265] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*" [0039.265] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.266] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.266] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.267] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.267] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.267] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.267] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.267] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.267] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.267] LocalFree (hMem=0x6776f8) returned 0x0 [0039.267] LocalFree (hMem=0x6775f0) returned 0x0 [0039.267] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.267] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.267] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.267] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.267] lstrlenA (lpString="\\") returned 1 [0039.267] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.267] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.267] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.267] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.267] lstrlenA (lpString="hi") returned 2 [0039.267] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.268] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.268] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0039.268] LocalFree (hMem=0x6774e8) returned 0x0 [0039.268] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned 127 [0039.268] lstrlenA (lpString="\\*.*") returned 4 [0039.268] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.268] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0039.268] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*" [0039.268] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.268] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.268] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.268] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.268] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.268] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.269] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.269] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.269] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.269] LocalFree (hMem=0x6776f8) returned 0x0 [0039.269] LocalFree (hMem=0x6775f0) returned 0x0 [0039.269] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.269] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0039.269] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0039.269] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.269] lstrlenA (lpString="\\") returned 1 [0039.269] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.269] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.269] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.269] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.269] lstrlenA (lpString="hr") returned 2 [0039.269] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.269] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.269] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0039.269] LocalFree (hMem=0x6774e8) returned 0x0 [0039.269] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned 127 [0039.269] lstrlenA (lpString="\\*.*") returned 4 [0039.269] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.269] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0039.270] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*" [0039.270] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.271] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.271] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.271] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.271] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.271] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.271] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.271] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.271] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.271] LocalFree (hMem=0x6776f8) returned 0x0 [0039.271] LocalFree (hMem=0x6775f0) returned 0x0 [0039.271] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.271] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0039.271] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0039.271] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.271] lstrlenA (lpString="\\") returned 1 [0039.271] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.271] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.271] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.271] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.271] lstrlenA (lpString="hu") returned 2 [0039.271] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.271] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.272] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0039.272] LocalFree (hMem=0x6774e8) returned 0x0 [0039.272] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned 127 [0039.272] lstrlenA (lpString="\\*.*") returned 4 [0039.272] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.272] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0039.272] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*" [0039.272] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.272] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.272] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.272] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.272] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.272] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.272] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.272] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.272] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.273] LocalFree (hMem=0x6776f8) returned 0x0 [0039.273] LocalFree (hMem=0x6775f0) returned 0x0 [0039.273] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.273] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0039.273] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0039.273] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.273] lstrlenA (lpString="\\") returned 1 [0039.273] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.273] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.273] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.273] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.273] lstrlenA (lpString="id") returned 2 [0039.273] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.273] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.273] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0039.273] LocalFree (hMem=0x6774e8) returned 0x0 [0039.273] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned 127 [0039.273] lstrlenA (lpString="\\*.*") returned 4 [0039.273] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.273] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0039.273] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*" [0039.273] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.274] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.274] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.274] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.274] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.274] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.274] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.274] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.274] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.275] LocalFree (hMem=0x6776f8) returned 0x0 [0039.275] LocalFree (hMem=0x6775f0) returned 0x0 [0039.275] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.275] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0039.275] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0039.275] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.275] lstrlenA (lpString="\\") returned 1 [0039.275] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.275] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.275] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.275] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.275] lstrlenA (lpString="it") returned 2 [0039.275] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.275] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.275] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0039.275] LocalFree (hMem=0x6774e8) returned 0x0 [0039.275] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned 127 [0039.275] lstrlenA (lpString="\\*.*") returned 4 [0039.275] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.275] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0039.275] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*" [0039.275] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0039.275] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.275] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.276] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.276] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.276] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.276] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.276] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.276] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0039.276] LocalFree (hMem=0x6776f8) returned 0x0 [0039.276] LocalFree (hMem=0x6775f0) returned 0x0 [0039.276] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.276] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0039.276] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0039.276] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.276] lstrlenA (lpString="\\") returned 1 [0039.276] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.276] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.276] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.276] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.276] lstrlenA (lpString="ja") returned 2 [0039.276] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.276] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.276] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0039.277] LocalFree (hMem=0x6774e8) returned 0x0 [0039.277] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned 127 [0039.277] lstrlenA (lpString="\\*.*") returned 4 [0039.277] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.277] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0039.277] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*" [0039.277] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.277] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.277] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.278] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.278] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.278] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.278] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.278] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.278] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.278] LocalFree (hMem=0x6776f8) returned 0x0 [0039.278] LocalFree (hMem=0x6775f0) returned 0x0 [0039.278] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.278] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0039.278] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0039.278] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.278] lstrlenA (lpString="\\") returned 1 [0039.278] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.278] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.280] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.280] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.280] lstrlenA (lpString="ko") returned 2 [0039.280] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.280] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.280] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0039.281] LocalFree (hMem=0x6774e8) returned 0x0 [0039.281] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned 127 [0039.281] lstrlenA (lpString="\\*.*") returned 4 [0039.281] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.281] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0039.281] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*" [0039.281] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.281] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.281] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.281] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.281] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.281] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.281] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.281] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.281] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.281] LocalFree (hMem=0x6776f8) returned 0x0 [0039.281] LocalFree (hMem=0x6775f0) returned 0x0 [0039.281] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.281] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0039.282] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0039.282] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.282] lstrlenA (lpString="\\") returned 1 [0039.282] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.282] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.282] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.282] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.282] lstrlenA (lpString="lt") returned 2 [0039.282] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.282] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.282] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0039.282] LocalFree (hMem=0x6774e8) returned 0x0 [0039.282] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned 127 [0039.282] lstrlenA (lpString="\\*.*") returned 4 [0039.282] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.282] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0039.282] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*" [0039.282] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.283] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.283] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.283] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.283] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.283] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.283] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.283] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.283] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.283] LocalFree (hMem=0x6776f8) returned 0x0 [0039.283] LocalFree (hMem=0x6775f0) returned 0x0 [0039.283] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.283] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0039.283] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0039.283] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.283] lstrlenA (lpString="\\") returned 1 [0039.283] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.283] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.283] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.284] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.284] lstrlenA (lpString="lv") returned 2 [0039.284] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.284] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.284] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0039.284] LocalFree (hMem=0x6774e8) returned 0x0 [0039.284] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned 127 [0039.284] lstrlenA (lpString="\\*.*") returned 4 [0039.284] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.284] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0039.284] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*" [0039.284] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.284] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.284] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.284] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.284] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.284] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.284] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.284] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.284] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.285] LocalFree (hMem=0x6776f8) returned 0x0 [0039.285] LocalFree (hMem=0x6775f0) returned 0x0 [0039.285] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.285] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0039.285] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0039.285] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.285] lstrlenA (lpString="\\") returned 1 [0039.285] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.285] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.285] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.285] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.285] lstrlenA (lpString="nl") returned 2 [0039.285] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.285] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.285] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0039.285] LocalFree (hMem=0x6774e8) returned 0x0 [0039.285] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned 127 [0039.285] lstrlenA (lpString="\\*.*") returned 4 [0039.285] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.285] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0039.285] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*" [0039.285] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.286] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.286] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.286] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.286] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.286] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.286] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.286] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.286] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.286] LocalFree (hMem=0x6776f8) returned 0x0 [0039.287] LocalFree (hMem=0x6775f0) returned 0x0 [0039.287] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.287] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0039.287] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0039.287] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.287] lstrlenA (lpString="\\") returned 1 [0039.287] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.287] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.287] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.287] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.287] lstrlenA (lpString="no") returned 2 [0039.287] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.287] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.287] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0039.287] LocalFree (hMem=0x6774e8) returned 0x0 [0039.287] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned 127 [0039.287] lstrlenA (lpString="\\*.*") returned 4 [0039.287] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.287] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0039.287] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*" [0039.288] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.289] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.289] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.289] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.289] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.289] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.289] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.289] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.289] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.289] LocalFree (hMem=0x6776f8) returned 0x0 [0039.289] LocalFree (hMem=0x6775f0) returned 0x0 [0039.289] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.289] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0039.289] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0039.289] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.289] lstrlenA (lpString="\\") returned 1 [0039.289] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.289] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.289] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.289] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.289] lstrlenA (lpString="pl") returned 2 [0039.289] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.289] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.289] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0039.289] LocalFree (hMem=0x6774e8) returned 0x0 [0039.290] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned 127 [0039.290] lstrlenA (lpString="\\*.*") returned 4 [0039.290] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.290] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0039.290] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*" [0039.290] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.290] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.290] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.290] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.290] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.290] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.291] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.291] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.291] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.291] LocalFree (hMem=0x6776f8) returned 0x0 [0039.291] LocalFree (hMem=0x6775f0) returned 0x0 [0039.291] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.291] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0039.291] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0039.291] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.291] lstrlenA (lpString="\\") returned 1 [0039.291] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.291] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.291] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.291] lstrlenA (lpString="pt_BR") returned 5 [0039.291] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775f0 [0039.291] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0039.291] LocalFree (hMem=0x6774e8) returned 0x0 [0039.291] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned 130 [0039.291] lstrlenA (lpString="\\*.*") returned 4 [0039.291] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677700 [0039.291] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0039.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*" [0039.291] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.292] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.292] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.292] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.292] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.292] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.292] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.292] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.292] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.292] LocalFree (hMem=0x677700) returned 0x0 [0039.292] LocalFree (hMem=0x6775f0) returned 0x0 [0039.292] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.292] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0039.292] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0039.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.292] lstrlenA (lpString="\\") returned 1 [0039.292] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.292] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.292] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.292] lstrlenA (lpString="pt_PT") returned 5 [0039.292] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775f0 [0039.292] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.292] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0039.292] LocalFree (hMem=0x6774e8) returned 0x0 [0039.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned 130 [0039.292] lstrlenA (lpString="\\*.*") returned 4 [0039.292] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677700 [0039.293] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0039.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*" [0039.293] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.293] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.293] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.293] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.293] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.293] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.294] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.294] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.294] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.294] LocalFree (hMem=0x677700) returned 0x0 [0039.294] LocalFree (hMem=0x6775f0) returned 0x0 [0039.294] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.294] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0039.294] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0039.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.294] lstrlenA (lpString="\\") returned 1 [0039.294] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.294] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.294] lstrlenA (lpString="ro") returned 2 [0039.294] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.294] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0039.294] LocalFree (hMem=0x6774e8) returned 0x0 [0039.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned 127 [0039.294] lstrlenA (lpString="\\*.*") returned 4 [0039.294] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.294] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0039.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*" [0039.294] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.295] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.295] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.295] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.295] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.295] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.295] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.295] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.295] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.295] LocalFree (hMem=0x6776f8) returned 0x0 [0039.295] LocalFree (hMem=0x6775f0) returned 0x0 [0039.295] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.295] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0039.295] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0039.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.334] lstrlenA (lpString="\\") returned 1 [0039.334] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.335] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.335] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.335] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.335] lstrlenA (lpString="ru") returned 2 [0039.335] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.335] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.335] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0039.335] LocalFree (hMem=0x6774e8) returned 0x0 [0039.335] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned 127 [0039.335] lstrlenA (lpString="\\*.*") returned 4 [0039.335] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.335] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0039.335] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*" [0039.335] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.336] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.336] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.336] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.336] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.336] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.336] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.336] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.336] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.336] LocalFree (hMem=0x6776f8) returned 0x0 [0039.336] LocalFree (hMem=0x6775f0) returned 0x0 [0039.336] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.336] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0039.336] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0039.336] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.336] lstrlenA (lpString="\\") returned 1 [0039.336] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.336] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.336] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.336] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.336] lstrlenA (lpString="sk") returned 2 [0039.336] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.336] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.337] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0039.337] LocalFree (hMem=0x6774e8) returned 0x0 [0039.337] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned 127 [0039.337] lstrlenA (lpString="\\*.*") returned 4 [0039.337] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.337] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0039.337] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*" [0039.337] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.337] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.337] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.337] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.337] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.337] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.337] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.337] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.337] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.337] LocalFree (hMem=0x6776f8) returned 0x0 [0039.337] LocalFree (hMem=0x6775f0) returned 0x0 [0039.337] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.337] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0039.337] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0039.337] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.337] lstrlenA (lpString="\\") returned 1 [0039.337] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.338] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.338] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.338] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.338] lstrlenA (lpString="sl") returned 2 [0039.338] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.338] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.338] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0039.338] LocalFree (hMem=0x6774e8) returned 0x0 [0039.338] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned 127 [0039.338] lstrlenA (lpString="\\*.*") returned 4 [0039.338] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.338] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0039.338] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*" [0039.338] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.339] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.339] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.339] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.339] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.339] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.339] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.339] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.339] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.339] LocalFree (hMem=0x6776f8) returned 0x0 [0039.339] LocalFree (hMem=0x6775f0) returned 0x0 [0039.339] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.339] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0039.339] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0039.339] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.339] lstrlenA (lpString="\\") returned 1 [0039.339] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.339] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.339] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.339] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.339] lstrlenA (lpString="sr") returned 2 [0039.339] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.339] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.339] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0039.339] LocalFree (hMem=0x6774e8) returned 0x0 [0039.339] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned 127 [0039.339] lstrlenA (lpString="\\*.*") returned 4 [0039.339] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.339] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0039.339] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*" [0039.340] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.340] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.340] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.340] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.340] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.340] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.340] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.340] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.340] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.340] LocalFree (hMem=0x6776f8) returned 0x0 [0039.340] LocalFree (hMem=0x6775f0) returned 0x0 [0039.340] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.340] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0039.340] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0039.340] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.340] lstrlenA (lpString="\\") returned 1 [0039.340] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.340] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.340] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.340] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.340] lstrlenA (lpString="sv") returned 2 [0039.340] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.340] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.340] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0039.341] LocalFree (hMem=0x6774e8) returned 0x0 [0039.341] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned 127 [0039.341] lstrlenA (lpString="\\*.*") returned 4 [0039.341] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.341] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0039.341] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*" [0039.341] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.341] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.341] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.342] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.342] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.342] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.342] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.342] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.342] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.342] LocalFree (hMem=0x6776f8) returned 0x0 [0039.342] LocalFree (hMem=0x6775f0) returned 0x0 [0039.342] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.342] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0039.342] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0039.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.342] lstrlenA (lpString="\\") returned 1 [0039.342] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.342] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.342] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.342] lstrlenA (lpString="th") returned 2 [0039.342] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.342] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.342] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0039.342] LocalFree (hMem=0x6774e8) returned 0x0 [0039.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned 127 [0039.342] lstrlenA (lpString="\\*.*") returned 4 [0039.342] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.342] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0039.342] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*" [0039.342] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.343] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.343] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.343] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.343] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.343] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.343] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.343] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.343] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.343] LocalFree (hMem=0x6776f8) returned 0x0 [0039.343] LocalFree (hMem=0x6775f0) returned 0x0 [0039.343] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.343] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0039.343] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0039.343] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.343] lstrlenA (lpString="\\") returned 1 [0039.343] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.343] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.343] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.343] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.343] lstrlenA (lpString="tr") returned 2 [0039.343] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.343] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.343] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0039.343] LocalFree (hMem=0x6774e8) returned 0x0 [0039.343] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned 127 [0039.343] lstrlenA (lpString="\\*.*") returned 4 [0039.343] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.343] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0039.343] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*" [0039.343] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.344] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.344] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.344] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.344] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.344] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.344] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.344] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.344] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.347] LocalFree (hMem=0x6776f8) returned 0x0 [0039.347] LocalFree (hMem=0x6775f0) returned 0x0 [0039.347] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.348] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.348] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.348] lstrlenA (lpString="\\") returned 1 [0039.348] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.348] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.348] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.348] lstrlenA (lpString="uk") returned 2 [0039.348] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.348] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.348] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0039.348] LocalFree (hMem=0x6774e8) returned 0x0 [0039.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned 127 [0039.348] lstrlenA (lpString="\\*.*") returned 4 [0039.348] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.348] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0039.348] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*" [0039.348] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.348] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.348] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.348] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.348] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.348] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.348] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.348] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.348] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.349] LocalFree (hMem=0x6776f8) returned 0x0 [0039.349] LocalFree (hMem=0x6775f0) returned 0x0 [0039.349] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.349] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.349] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.349] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.349] lstrlenA (lpString="\\") returned 1 [0039.349] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.349] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.349] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.349] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.349] lstrlenA (lpString="vi") returned 2 [0039.349] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.349] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.349] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0039.349] LocalFree (hMem=0x6774e8) returned 0x0 [0039.349] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned 127 [0039.349] lstrlenA (lpString="\\*.*") returned 4 [0039.349] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0039.349] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0039.349] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*" [0039.349] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.350] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.350] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.350] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.350] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.350] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.350] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.350] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.350] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.350] LocalFree (hMem=0x6776f8) returned 0x0 [0039.350] LocalFree (hMem=0x6775f0) returned 0x0 [0039.350] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.350] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.350] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.350] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.350] lstrlenA (lpString="\\") returned 1 [0039.350] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.350] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.350] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.350] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.350] lstrlenA (lpString="zh_CN") returned 5 [0039.350] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775f0 [0039.350] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.350] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0039.350] LocalFree (hMem=0x6774e8) returned 0x0 [0039.350] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned 130 [0039.350] lstrlenA (lpString="\\*.*") returned 4 [0039.350] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677700 [0039.351] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0039.351] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*" [0039.351] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.351] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.351] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.351] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.351] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.351] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.351] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.351] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.351] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.351] LocalFree (hMem=0x677700) returned 0x0 [0039.351] LocalFree (hMem=0x6775f0) returned 0x0 [0039.351] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.351] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.351] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.351] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0039.351] lstrlenA (lpString="\\") returned 1 [0039.351] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0039.351] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0039.351] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.351] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0039.351] lstrlenA (lpString="zh_TW") returned 5 [0039.351] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775f0 [0039.351] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0039.352] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0039.352] LocalFree (hMem=0x6774e8) returned 0x0 [0039.352] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned 130 [0039.352] lstrlenA (lpString="\\*.*") returned 4 [0039.352] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677700 [0039.352] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0039.352] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*" [0039.352] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.352] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.352] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.352] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.352] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.352] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.352] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.352] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.353] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.353] LocalFree (hMem=0x677700) returned 0x0 [0039.353] LocalFree (hMem=0x6775f0) returned 0x0 [0039.353] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.353] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.353] LocalFree (hMem=0x6773d8) returned 0x0 [0039.353] LocalFree (hMem=0x6772d0) returned 0x0 [0039.353] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.353] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.353] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.353] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 115 [0039.353] lstrlenA (lpString="\\") returned 1 [0039.353] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x6649c8 [0039.353] lstrcpyA (in: lpString1=0x6649c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0039.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0039.353] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned 116 [0039.353] lstrlenA (lpString="_metadata") returned 9 [0039.353] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6772d0 [0039.353] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0039.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0039.353] LocalFree (hMem=0x6649c8) returned 0x0 [0039.353] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned 125 [0039.353] lstrlenA (lpString="\\*.*") returned 4 [0039.353] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6773d8 [0039.353] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0039.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*" [0039.353] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690268 [0039.354] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.354] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.354] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.354] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.354] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.354] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.354] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.354] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.354] LocalFree (hMem=0x6773d8) returned 0x0 [0039.354] LocalFree (hMem=0x6772d0) returned 0x0 [0039.354] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0039.354] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.354] LocalFree (hMem=0x6655c8) returned 0x0 [0039.354] LocalFree (hMem=0x6657c8) returned 0x0 [0039.354] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0039.354] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.354] LocalFree (hMem=0x6771d8) returned 0x0 [0039.354] LocalFree (hMem=0x69e108) returned 0x0 [0039.354] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0039.354] lstrcmpiA (lpString1=".", lpString2="felcaaldnbdncclmgdcncolpebgiejap") returned -1 [0039.354] lstrcmpiA (lpString1="..", lpString2="felcaaldnbdncclmgdcncolpebgiejap") returned -1 [0039.354] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0039.354] lstrlenA (lpString="\\") returned 1 [0039.354] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.354] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.354] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.355] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0039.355] lstrlenA (lpString="felcaaldnbdncclmgdcncolpebgiejap") returned 32 [0039.355] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.355] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.355] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0039.355] LocalFree (hMem=0x69e030) returned 0x0 [0039.355] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 107 [0039.355] lstrlenA (lpString="\\*.*") returned 4 [0039.355] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.355] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0039.355] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*" [0039.355] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6906a8 [0039.356] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.356] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.356] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.356] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.356] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.356] lstrcmpiA (lpString1=".", lpString2="1.1_0") returned -1 [0039.356] lstrcmpiA (lpString1="..", lpString2="1.1_0") returned -1 [0039.356] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 107 [0039.356] lstrlenA (lpString="\\") returned 1 [0039.356] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.356] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" [0039.356] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" [0039.356] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned 108 [0039.356] lstrlenA (lpString="1.1_0") returned 5 [0039.356] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x6649c8 [0039.356] lstrcpyA (in: lpString1=0x6649c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\" [0039.356] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpString2="1.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0039.356] LocalFree (hMem=0x6772d0) returned 0x0 [0039.356] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 113 [0039.356] lstrlenA (lpString="\\*.*") returned 4 [0039.356] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6659c8 [0039.356] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0039.356] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*" [0039.356] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690268 [0039.357] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.358] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] StrStrIA (lpFirst="main.html", lpSrch="Web Data") returned 0x0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] StrStrIA (lpFirst="main.js", lpSrch="Web Data") returned 0x0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.358] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.358] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.358] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.358] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 113 [0039.358] lstrlenA (lpString="\\") returned 1 [0039.358] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6646c8 [0039.358] lstrcpyA (in: lpString1=0x6646c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0039.358] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0039.358] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned 114 [0039.358] lstrlenA (lpString="_locales") returned 8 [0039.358] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0039.358] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0039.358] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.358] LocalFree (hMem=0x6646c8) returned 0x0 [0039.358] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.358] lstrlenA (lpString="\\*.*") returned 4 [0039.358] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0039.358] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.358] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*" [0039.358] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690368 [0039.360] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.360] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.360] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.360] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.360] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.360] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0039.360] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0039.360] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.360] lstrlenA (lpString="\\") returned 1 [0039.360] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.360] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.360] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.360] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.360] lstrlenA (lpString="ar") returned 2 [0039.360] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.360] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.361] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" [0039.361] LocalFree (hMem=0x6774e0) returned 0x0 [0039.361] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned 125 [0039.361] lstrlenA (lpString="\\*.*") returned 4 [0039.361] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.361] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" [0039.361] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*" [0039.361] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.361] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.361] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.361] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.361] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.361] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.361] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.361] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.361] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.361] LocalFree (hMem=0x6776f0) returned 0x0 [0039.361] LocalFree (hMem=0x6775e8) returned 0x0 [0039.361] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.361] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.361] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.361] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.361] lstrlenA (lpString="\\") returned 1 [0039.361] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.361] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.361] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.361] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.361] lstrlenA (lpString="bg") returned 2 [0039.361] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.362] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.362] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" [0039.362] LocalFree (hMem=0x6774e0) returned 0x0 [0039.362] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned 125 [0039.362] lstrlenA (lpString="\\*.*") returned 4 [0039.362] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.362] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" [0039.362] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*" [0039.362] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.362] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.362] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.362] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.362] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.362] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.362] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.363] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.363] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.363] LocalFree (hMem=0x6776f0) returned 0x0 [0039.363] LocalFree (hMem=0x6775e8) returned 0x0 [0039.363] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.363] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.363] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.363] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.363] lstrlenA (lpString="\\") returned 1 [0039.363] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.363] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.363] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.363] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.363] lstrlenA (lpString="ca") returned 2 [0039.363] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.363] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.363] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" [0039.363] LocalFree (hMem=0x6774e0) returned 0x0 [0039.363] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned 125 [0039.363] lstrlenA (lpString="\\*.*") returned 4 [0039.363] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.363] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" [0039.363] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*" [0039.363] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.363] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.363] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.363] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.364] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.364] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.364] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.364] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.364] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.364] LocalFree (hMem=0x6776f0) returned 0x0 [0039.364] LocalFree (hMem=0x6775e8) returned 0x0 [0039.364] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.364] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.364] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.364] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.364] lstrlenA (lpString="\\") returned 1 [0039.364] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.364] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.364] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.364] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.364] lstrlenA (lpString="cs") returned 2 [0039.364] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.364] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.364] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" [0039.364] LocalFree (hMem=0x6774e0) returned 0x0 [0039.364] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned 125 [0039.364] lstrlenA (lpString="\\*.*") returned 4 [0039.364] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.364] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" [0039.364] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*" [0039.364] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.365] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.365] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.365] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.365] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.365] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.365] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.365] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.365] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.365] LocalFree (hMem=0x6776f0) returned 0x0 [0039.365] LocalFree (hMem=0x6775e8) returned 0x0 [0039.365] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.365] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.365] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.365] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.365] lstrlenA (lpString="\\") returned 1 [0039.365] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.365] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.365] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.366] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.366] lstrlenA (lpString="da") returned 2 [0039.366] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.366] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.366] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" [0039.366] LocalFree (hMem=0x6774e0) returned 0x0 [0039.366] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned 125 [0039.366] lstrlenA (lpString="\\*.*") returned 4 [0039.366] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.366] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" [0039.366] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*" [0039.366] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.366] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.366] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.366] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.366] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.366] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.366] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.366] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.366] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.366] LocalFree (hMem=0x6776f0) returned 0x0 [0039.366] LocalFree (hMem=0x6775e8) returned 0x0 [0039.366] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.366] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.366] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.366] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.366] lstrlenA (lpString="\\") returned 1 [0039.366] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.367] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.367] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.367] lstrlenA (lpString="de") returned 2 [0039.367] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.367] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" [0039.367] LocalFree (hMem=0x6774e0) returned 0x0 [0039.367] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned 125 [0039.367] lstrlenA (lpString="\\*.*") returned 4 [0039.367] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.367] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" [0039.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*" [0039.367] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0039.368] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.368] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.368] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.368] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.368] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.368] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.368] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.368] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0039.368] LocalFree (hMem=0x6776f0) returned 0x0 [0039.368] LocalFree (hMem=0x6775e8) returned 0x0 [0039.368] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.368] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.368] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.368] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.368] lstrlenA (lpString="\\") returned 1 [0039.368] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.368] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.368] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.368] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.368] lstrlenA (lpString="el") returned 2 [0039.368] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.368] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.368] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" [0039.368] LocalFree (hMem=0x6774e0) returned 0x0 [0039.368] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned 125 [0039.368] lstrlenA (lpString="\\*.*") returned 4 [0039.368] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.368] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" [0039.368] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*" [0039.368] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.369] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.369] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.369] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.369] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.369] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.369] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.369] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.369] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.369] LocalFree (hMem=0x6776f0) returned 0x0 [0039.369] LocalFree (hMem=0x6775e8) returned 0x0 [0039.369] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.369] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0039.369] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0039.369] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.369] lstrlenA (lpString="\\") returned 1 [0039.369] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.369] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.369] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.369] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.369] lstrlenA (lpString="en_GB") returned 5 [0039.369] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.369] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.369] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" [0039.369] LocalFree (hMem=0x6774e0) returned 0x0 [0039.369] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned 128 [0039.369] lstrlenA (lpString="\\*.*") returned 4 [0039.369] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.369] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" [0039.370] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*" [0039.370] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.370] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.370] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.370] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.370] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.370] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.370] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.370] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.370] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.370] LocalFree (hMem=0x6776f8) returned 0x0 [0039.370] LocalFree (hMem=0x6775e8) returned 0x0 [0039.370] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.371] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0039.371] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0039.371] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.371] lstrlenA (lpString="\\") returned 1 [0039.371] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.371] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.371] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.371] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.371] lstrlenA (lpString="en_US") returned 5 [0039.371] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.371] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.371] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" [0039.371] LocalFree (hMem=0x6774e0) returned 0x0 [0039.371] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned 128 [0039.371] lstrlenA (lpString="\\*.*") returned 4 [0039.371] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.371] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" [0039.371] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*" [0039.371] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.371] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.371] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.371] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.371] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.371] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.371] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.371] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.371] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.372] LocalFree (hMem=0x6776f8) returned 0x0 [0039.372] LocalFree (hMem=0x6775e8) returned 0x0 [0039.372] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.372] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.372] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.372] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.372] lstrlenA (lpString="\\") returned 1 [0039.372] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.372] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.372] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.372] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.372] lstrlenA (lpString="es") returned 2 [0039.372] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.372] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.372] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" [0039.372] LocalFree (hMem=0x6774e0) returned 0x0 [0039.372] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned 125 [0039.372] lstrlenA (lpString="\\*.*") returned 4 [0039.372] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.372] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" [0039.372] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*" [0039.372] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.373] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.373] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.373] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.373] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.373] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.373] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.373] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.373] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.373] LocalFree (hMem=0x6776f0) returned 0x0 [0039.373] LocalFree (hMem=0x6775e8) returned 0x0 [0039.373] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.373] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0039.373] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0039.373] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.373] lstrlenA (lpString="\\") returned 1 [0039.373] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.373] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.373] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.373] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.373] lstrlenA (lpString="es_419") returned 6 [0039.373] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.373] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.373] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" [0039.373] LocalFree (hMem=0x6774e0) returned 0x0 [0039.373] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned 129 [0039.373] lstrlenA (lpString="\\*.*") returned 4 [0039.373] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.373] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" [0039.373] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*" [0039.374] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.374] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.374] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.374] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.374] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.374] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.374] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.374] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.374] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.374] LocalFree (hMem=0x6776f8) returned 0x0 [0039.374] LocalFree (hMem=0x6775e8) returned 0x0 [0039.374] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.374] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0039.374] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0039.374] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.374] lstrlenA (lpString="\\") returned 1 [0039.374] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.374] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.411] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.411] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.411] lstrlenA (lpString="et") returned 2 [0039.411] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.411] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.411] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" [0039.411] LocalFree (hMem=0x6774e0) returned 0x0 [0039.411] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned 125 [0039.411] lstrlenA (lpString="\\*.*") returned 4 [0039.411] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.411] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" [0039.411] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*" [0039.411] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.412] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.412] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.412] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.412] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.412] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.412] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.412] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.412] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.412] LocalFree (hMem=0x6776f0) returned 0x0 [0039.412] LocalFree (hMem=0x6775e8) returned 0x0 [0039.412] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.412] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.412] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.412] lstrlenA (lpString="\\") returned 1 [0039.412] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.412] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.412] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.412] lstrlenA (lpString="fi") returned 2 [0039.412] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.412] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.412] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" [0039.412] LocalFree (hMem=0x6774e0) returned 0x0 [0039.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned 125 [0039.412] lstrlenA (lpString="\\*.*") returned 4 [0039.412] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.412] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" [0039.412] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*" [0039.412] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.413] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.413] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.413] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.413] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.413] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.413] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.413] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.413] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.413] LocalFree (hMem=0x6776f0) returned 0x0 [0039.413] LocalFree (hMem=0x6775e8) returned 0x0 [0039.413] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.413] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.413] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0039.413] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.413] lstrlenA (lpString="\\") returned 1 [0039.413] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.413] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.413] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.413] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.413] lstrlenA (lpString="fil") returned 3 [0039.413] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.413] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.420] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" [0039.420] LocalFree (hMem=0x6774e0) returned 0x0 [0039.420] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned 126 [0039.420] lstrlenA (lpString="\\*.*") returned 4 [0039.420] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.420] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" [0039.420] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*" [0039.420] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.479] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.479] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.479] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.479] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.479] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.479] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.479] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.479] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.479] LocalFree (hMem=0x6776f0) returned 0x0 [0039.479] LocalFree (hMem=0x6775e8) returned 0x0 [0039.479] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.479] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.479] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.479] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.479] lstrlenA (lpString="\\") returned 1 [0039.479] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.479] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.479] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.479] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.479] lstrlenA (lpString="fr") returned 2 [0039.480] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.480] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.480] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" [0039.480] LocalFree (hMem=0x6774e0) returned 0x0 [0039.480] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned 125 [0039.480] lstrlenA (lpString="\\*.*") returned 4 [0039.480] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.480] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" [0039.480] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*" [0039.480] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.480] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.480] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.480] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.480] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.480] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.480] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.480] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.480] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.480] LocalFree (hMem=0x6776f0) returned 0x0 [0039.480] LocalFree (hMem=0x6775e8) returned 0x0 [0039.480] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.480] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0039.481] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0039.481] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.481] lstrlenA (lpString="\\") returned 1 [0039.481] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.481] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.481] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.481] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.481] lstrlenA (lpString="he") returned 2 [0039.481] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.501] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.502] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" [0039.502] LocalFree (hMem=0x6774e0) returned 0x0 [0039.502] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned 125 [0039.502] lstrlenA (lpString="\\*.*") returned 4 [0039.502] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.502] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" [0039.502] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*" [0039.502] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.502] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.502] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.502] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.502] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.503] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.503] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.503] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.503] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.503] LocalFree (hMem=0x6776f0) returned 0x0 [0039.503] LocalFree (hMem=0x6775e8) returned 0x0 [0039.503] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.503] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.503] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.503] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.503] lstrlenA (lpString="\\") returned 1 [0039.503] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.503] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.503] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.503] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.503] lstrlenA (lpString="hi") returned 2 [0039.503] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.503] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.503] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" [0039.503] LocalFree (hMem=0x6774e0) returned 0x0 [0039.503] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned 125 [0039.503] lstrlenA (lpString="\\*.*") returned 4 [0039.503] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.503] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" [0039.503] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*" [0039.503] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0039.503] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.503] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.503] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.503] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.504] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.504] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.504] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.504] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.504] LocalFree (hMem=0x6776f0) returned 0x0 [0039.504] LocalFree (hMem=0x6775e8) returned 0x0 [0039.504] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.504] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0039.504] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0039.504] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.504] lstrlenA (lpString="\\") returned 1 [0039.504] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.504] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.504] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.505] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.505] lstrlenA (lpString="hu") returned 2 [0039.505] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.505] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.505] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" [0039.505] LocalFree (hMem=0x6774e0) returned 0x0 [0039.505] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned 125 [0039.505] lstrlenA (lpString="\\*.*") returned 4 [0039.505] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.505] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" [0039.505] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*" [0039.505] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.505] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.505] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.505] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.505] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.506] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.506] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.506] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.506] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.506] LocalFree (hMem=0x6776f0) returned 0x0 [0039.506] LocalFree (hMem=0x6775e8) returned 0x0 [0039.506] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.506] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0039.506] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0039.506] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.506] lstrlenA (lpString="\\") returned 1 [0039.506] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.506] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.506] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.506] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.506] lstrlenA (lpString="id") returned 2 [0039.506] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.506] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.506] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" [0039.506] LocalFree (hMem=0x6774e0) returned 0x0 [0039.506] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned 125 [0039.506] lstrlenA (lpString="\\*.*") returned 4 [0039.506] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.506] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" [0039.506] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*" [0039.506] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.506] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.506] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.507] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.507] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.507] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.507] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.507] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.507] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.507] LocalFree (hMem=0x6776f0) returned 0x0 [0039.507] LocalFree (hMem=0x6775e8) returned 0x0 [0039.507] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.507] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0039.507] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0039.507] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.507] lstrlenA (lpString="\\") returned 1 [0039.507] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.507] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.507] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.507] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.507] lstrlenA (lpString="it") returned 2 [0039.507] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.507] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.507] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" [0039.507] LocalFree (hMem=0x6774e0) returned 0x0 [0039.507] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned 125 [0039.507] lstrlenA (lpString="\\*.*") returned 4 [0039.507] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.507] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" [0039.507] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*" [0039.507] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.508] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.508] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.508] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.508] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.508] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.508] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.508] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.508] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.508] LocalFree (hMem=0x6776f0) returned 0x0 [0039.508] LocalFree (hMem=0x6775e8) returned 0x0 [0039.508] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.508] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0039.508] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0039.508] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.508] lstrlenA (lpString="\\") returned 1 [0039.508] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.508] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.508] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.508] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.508] lstrlenA (lpString="ja") returned 2 [0039.508] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.508] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.508] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" [0039.509] LocalFree (hMem=0x6774e0) returned 0x0 [0039.509] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned 125 [0039.509] lstrlenA (lpString="\\*.*") returned 4 [0039.509] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.509] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" [0039.509] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*" [0039.509] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.509] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.509] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.509] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.509] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.509] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.509] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.509] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.509] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.509] LocalFree (hMem=0x6776f0) returned 0x0 [0039.509] LocalFree (hMem=0x6775e8) returned 0x0 [0039.509] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.509] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0039.509] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0039.509] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.509] lstrlenA (lpString="\\") returned 1 [0039.509] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.509] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.509] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.509] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.509] lstrlenA (lpString="ko") returned 2 [0039.509] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.509] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.509] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" [0039.509] LocalFree (hMem=0x6774e0) returned 0x0 [0039.509] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned 125 [0039.509] lstrlenA (lpString="\\*.*") returned 4 [0039.510] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.510] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" [0039.510] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*" [0039.510] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.510] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.510] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.510] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.510] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.510] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.510] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.510] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.510] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.510] LocalFree (hMem=0x6776f0) returned 0x0 [0039.510] LocalFree (hMem=0x6775e8) returned 0x0 [0039.511] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.511] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0039.511] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0039.511] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.511] lstrlenA (lpString="\\") returned 1 [0039.511] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.511] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.511] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.511] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.511] lstrlenA (lpString="lt") returned 2 [0039.511] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.511] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.511] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" [0039.511] LocalFree (hMem=0x6774e0) returned 0x0 [0039.511] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned 125 [0039.511] lstrlenA (lpString="\\*.*") returned 4 [0039.511] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.511] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" [0039.511] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*" [0039.511] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.511] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.511] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.511] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.511] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.511] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.511] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.511] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.511] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.511] LocalFree (hMem=0x6776f0) returned 0x0 [0039.511] LocalFree (hMem=0x6775e8) returned 0x0 [0039.512] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.512] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0039.512] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0039.512] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.512] lstrlenA (lpString="\\") returned 1 [0039.512] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.512] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.512] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.512] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.512] lstrlenA (lpString="lv") returned 2 [0039.512] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.512] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.512] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" [0039.512] LocalFree (hMem=0x6774e0) returned 0x0 [0039.512] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned 125 [0039.512] lstrlenA (lpString="\\*.*") returned 4 [0039.512] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.512] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" [0039.512] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*" [0039.512] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.513] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.513] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.513] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.513] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.513] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.513] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.513] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.513] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.513] LocalFree (hMem=0x6776f0) returned 0x0 [0039.513] LocalFree (hMem=0x6775e8) returned 0x0 [0039.513] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.513] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0039.513] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0039.513] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.513] lstrlenA (lpString="\\") returned 1 [0039.513] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.513] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.513] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.513] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.513] lstrlenA (lpString="ms") returned 2 [0039.513] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.513] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.513] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" [0039.513] LocalFree (hMem=0x6774e0) returned 0x0 [0039.513] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned 125 [0039.513] lstrlenA (lpString="\\*.*") returned 4 [0039.513] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.513] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" [0039.514] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*" [0039.514] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.514] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.514] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.514] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.514] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.514] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.514] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.514] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.514] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.514] LocalFree (hMem=0x6776f0) returned 0x0 [0039.514] LocalFree (hMem=0x6775e8) returned 0x0 [0039.514] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.514] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0039.514] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0039.514] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.514] lstrlenA (lpString="\\") returned 1 [0039.514] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.514] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.514] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.514] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.514] lstrlenA (lpString="nl") returned 2 [0039.514] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.514] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.514] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" [0039.514] LocalFree (hMem=0x6774e0) returned 0x0 [0039.515] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned 125 [0039.515] lstrlenA (lpString="\\*.*") returned 4 [0039.515] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.515] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" [0039.515] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*" [0039.515] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.515] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.515] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.515] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.515] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.515] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.515] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.515] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.515] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.515] LocalFree (hMem=0x6776f0) returned 0x0 [0039.516] LocalFree (hMem=0x6775e8) returned 0x0 [0039.516] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.516] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0039.516] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0039.516] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.516] lstrlenA (lpString="\\") returned 1 [0039.516] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.516] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.516] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.516] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.516] lstrlenA (lpString="no") returned 2 [0039.516] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.516] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.516] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" [0039.516] LocalFree (hMem=0x6774e0) returned 0x0 [0039.516] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned 125 [0039.516] lstrlenA (lpString="\\*.*") returned 4 [0039.516] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.516] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" [0039.516] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*" [0039.516] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.516] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.516] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.516] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.516] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.516] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.516] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.516] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.516] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.516] LocalFree (hMem=0x6776f0) returned 0x0 [0039.516] LocalFree (hMem=0x6775e8) returned 0x0 [0039.516] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.516] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0039.516] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0039.517] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.517] lstrlenA (lpString="\\") returned 1 [0039.517] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.517] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.517] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.517] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.517] lstrlenA (lpString="pl") returned 2 [0039.517] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.517] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.517] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" [0039.517] LocalFree (hMem=0x6774e0) returned 0x0 [0039.517] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned 125 [0039.517] lstrlenA (lpString="\\*.*") returned 4 [0039.517] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.517] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" [0039.517] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*" [0039.517] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0039.518] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.518] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.518] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.518] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.518] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.518] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.518] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.518] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0039.518] LocalFree (hMem=0x6776f0) returned 0x0 [0039.518] LocalFree (hMem=0x6775e8) returned 0x0 [0039.518] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.518] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0039.518] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0039.518] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.518] lstrlenA (lpString="\\") returned 1 [0039.518] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.518] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.518] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.518] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.518] lstrlenA (lpString="pt_BR") returned 5 [0039.518] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.518] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.518] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" [0039.518] LocalFree (hMem=0x6774e0) returned 0x0 [0039.518] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned 128 [0039.518] lstrlenA (lpString="\\*.*") returned 4 [0039.518] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.518] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" [0039.518] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*" [0039.518] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.519] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.519] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.519] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.519] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.519] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.519] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.519] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.519] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.519] LocalFree (hMem=0x6776f8) returned 0x0 [0039.519] LocalFree (hMem=0x6775e8) returned 0x0 [0039.519] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.519] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0039.519] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0039.519] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.519] lstrlenA (lpString="\\") returned 1 [0039.519] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.519] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.519] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.519] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.519] lstrlenA (lpString="pt_PT") returned 5 [0039.519] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.519] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.519] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" [0039.519] LocalFree (hMem=0x6774e0) returned 0x0 [0039.519] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned 128 [0039.519] lstrlenA (lpString="\\*.*") returned 4 [0039.519] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.519] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" [0039.519] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*" [0039.519] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.520] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.520] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.520] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.520] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.520] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.520] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.520] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.520] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.520] LocalFree (hMem=0x6776f8) returned 0x0 [0039.520] LocalFree (hMem=0x6775e8) returned 0x0 [0039.520] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.521] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0039.521] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0039.521] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.521] lstrlenA (lpString="\\") returned 1 [0039.521] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.521] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.521] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.521] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.521] lstrlenA (lpString="ro") returned 2 [0039.521] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.521] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.521] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" [0039.521] LocalFree (hMem=0x6774e0) returned 0x0 [0039.521] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned 125 [0039.521] lstrlenA (lpString="\\*.*") returned 4 [0039.521] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.521] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" [0039.521] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*" [0039.521] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.521] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.521] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.521] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.521] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.521] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.521] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.521] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.521] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.522] LocalFree (hMem=0x6776f0) returned 0x0 [0039.522] LocalFree (hMem=0x6775e8) returned 0x0 [0039.522] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.522] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0039.522] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0039.522] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.522] lstrlenA (lpString="\\") returned 1 [0039.522] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.522] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.522] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.522] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.522] lstrlenA (lpString="ru") returned 2 [0039.522] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.522] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.522] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" [0039.522] LocalFree (hMem=0x6774e0) returned 0x0 [0039.522] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned 125 [0039.522] lstrlenA (lpString="\\*.*") returned 4 [0039.522] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.522] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" [0039.522] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*" [0039.522] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.523] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.523] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.523] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.523] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.523] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.523] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.523] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.523] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.523] LocalFree (hMem=0x6776f0) returned 0x0 [0039.523] LocalFree (hMem=0x6775e8) returned 0x0 [0039.523] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.523] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0039.523] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0039.523] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.523] lstrlenA (lpString="\\") returned 1 [0039.523] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.523] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.523] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.523] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.523] lstrlenA (lpString="sk") returned 2 [0039.523] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.523] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.523] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" [0039.523] LocalFree (hMem=0x6774e0) returned 0x0 [0039.523] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned 125 [0039.523] lstrlenA (lpString="\\*.*") returned 4 [0039.523] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.523] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" [0039.523] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*" [0039.523] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.524] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.524] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.524] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.524] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.524] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.524] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.524] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.524] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.524] LocalFree (hMem=0x6776f0) returned 0x0 [0039.524] LocalFree (hMem=0x6775e8) returned 0x0 [0039.524] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.524] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0039.524] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0039.524] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.524] lstrlenA (lpString="\\") returned 1 [0039.524] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.524] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.524] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.524] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.524] lstrlenA (lpString="sl") returned 2 [0039.524] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.524] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.524] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" [0039.524] LocalFree (hMem=0x6774e0) returned 0x0 [0039.524] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned 125 [0039.524] lstrlenA (lpString="\\*.*") returned 4 [0039.524] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.524] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" [0039.524] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*" [0039.524] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.525] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.525] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.525] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.525] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.525] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.525] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.525] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.525] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.525] LocalFree (hMem=0x6776f0) returned 0x0 [0039.525] LocalFree (hMem=0x6775e8) returned 0x0 [0039.525] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.525] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0039.525] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0039.525] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.525] lstrlenA (lpString="\\") returned 1 [0039.525] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.526] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.526] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.526] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.526] lstrlenA (lpString="sr") returned 2 [0039.526] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.526] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.526] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" [0039.526] LocalFree (hMem=0x6774e0) returned 0x0 [0039.526] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned 125 [0039.526] lstrlenA (lpString="\\*.*") returned 4 [0039.526] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.526] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" [0039.526] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*" [0039.526] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.526] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.526] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.526] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.526] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.526] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.526] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.526] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.526] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.526] LocalFree (hMem=0x6776f0) returned 0x0 [0039.526] LocalFree (hMem=0x6775e8) returned 0x0 [0039.526] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.526] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0039.526] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0039.526] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.526] lstrlenA (lpString="\\") returned 1 [0039.526] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.526] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.527] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.527] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.527] lstrlenA (lpString="sv") returned 2 [0039.527] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.527] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.527] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" [0039.527] LocalFree (hMem=0x6774e0) returned 0x0 [0039.527] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned 125 [0039.527] lstrlenA (lpString="\\*.*") returned 4 [0039.527] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.527] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" [0039.527] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*" [0039.527] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.527] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.527] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.527] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.527] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.527] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.527] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.527] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.528] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.528] LocalFree (hMem=0x6776f0) returned 0x0 [0039.528] LocalFree (hMem=0x6775e8) returned 0x0 [0039.528] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.528] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0039.528] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0039.528] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.528] lstrlenA (lpString="\\") returned 1 [0039.528] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.528] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.528] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.528] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.528] lstrlenA (lpString="th") returned 2 [0039.528] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.528] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.528] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" [0039.528] LocalFree (hMem=0x6774e0) returned 0x0 [0039.528] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned 125 [0039.528] lstrlenA (lpString="\\*.*") returned 4 [0039.528] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.528] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" [0039.528] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*" [0039.528] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0039.528] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.528] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.528] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.528] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.528] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.528] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.528] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.528] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0039.529] LocalFree (hMem=0x6776f0) returned 0x0 [0039.529] LocalFree (hMem=0x6775e8) returned 0x0 [0039.529] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.529] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0039.529] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0039.529] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.529] lstrlenA (lpString="\\") returned 1 [0039.529] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.529] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.529] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.529] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.529] lstrlenA (lpString="tr") returned 2 [0039.529] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.529] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.529] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" [0039.529] LocalFree (hMem=0x6774e0) returned 0x0 [0039.529] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned 125 [0039.529] lstrlenA (lpString="\\*.*") returned 4 [0039.529] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.529] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" [0039.529] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*" [0039.529] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.530] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.530] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.530] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.530] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.530] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.530] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.530] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.530] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.530] LocalFree (hMem=0x6776f0) returned 0x0 [0039.530] LocalFree (hMem=0x6775e8) returned 0x0 [0039.530] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.530] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.530] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.530] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.530] lstrlenA (lpString="\\") returned 1 [0039.530] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.530] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.530] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.530] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.530] lstrlenA (lpString="uk") returned 2 [0039.530] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.530] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.530] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" [0039.530] LocalFree (hMem=0x6774e0) returned 0x0 [0039.530] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned 125 [0039.530] lstrlenA (lpString="\\*.*") returned 4 [0039.530] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.530] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" [0039.530] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*" [0039.530] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.531] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.531] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.531] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.531] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.531] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.531] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.531] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.531] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.531] LocalFree (hMem=0x6776f0) returned 0x0 [0039.531] LocalFree (hMem=0x6775e8) returned 0x0 [0039.531] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.531] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.531] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.531] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.531] lstrlenA (lpString="\\") returned 1 [0039.531] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.531] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.531] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.531] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.531] lstrlenA (lpString="vi") returned 2 [0039.531] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.531] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.531] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" [0039.531] LocalFree (hMem=0x6774e0) returned 0x0 [0039.531] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned 125 [0039.531] lstrlenA (lpString="\\*.*") returned 4 [0039.531] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.531] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" [0039.531] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*" [0039.531] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.532] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.532] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.532] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.532] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.532] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.532] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.532] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.532] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.532] LocalFree (hMem=0x6776f0) returned 0x0 [0039.532] LocalFree (hMem=0x6775e8) returned 0x0 [0039.532] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.532] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.533] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.533] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.533] lstrlenA (lpString="\\") returned 1 [0039.533] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.533] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.533] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.533] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.533] lstrlenA (lpString="zh_CN") returned 5 [0039.533] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.533] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.533] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" [0039.533] LocalFree (hMem=0x6774e0) returned 0x0 [0039.533] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned 128 [0039.533] lstrlenA (lpString="\\*.*") returned 4 [0039.533] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.533] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" [0039.533] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*" [0039.533] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.533] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.533] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.601] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.601] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.601] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.601] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.601] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.601] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.601] LocalFree (hMem=0x6776f8) returned 0x0 [0039.601] LocalFree (hMem=0x6775e8) returned 0x0 [0039.601] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.601] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.601] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.601] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 122 [0039.601] lstrlenA (lpString="\\") returned 1 [0039.601] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.601] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" [0039.602] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.602] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned 123 [0039.602] lstrlenA (lpString="zh_TW") returned 5 [0039.602] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.602] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\" [0039.602] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" [0039.602] LocalFree (hMem=0x6774e0) returned 0x0 [0039.602] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned 128 [0039.602] lstrlenA (lpString="\\*.*") returned 4 [0039.602] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.602] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" [0039.602] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*" [0039.602] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.602] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.603] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.603] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.603] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.603] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.603] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.603] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.603] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.603] LocalFree (hMem=0x6776f8) returned 0x0 [0039.603] LocalFree (hMem=0x6775e8) returned 0x0 [0039.603] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.603] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.603] LocalFree (hMem=0x6773d8) returned 0x0 [0039.603] LocalFree (hMem=0x6772d0) returned 0x0 [0039.603] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.603] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.603] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.603] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 113 [0039.603] lstrlenA (lpString="\\") returned 1 [0039.603] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x663fc8 [0039.603] lstrcpyA (in: lpString1=0x663fc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" [0039.603] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0039.603] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned 114 [0039.603] lstrlenA (lpString="_metadata") returned 9 [0039.603] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0039.603] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\" [0039.603] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" [0039.603] LocalFree (hMem=0x663fc8) returned 0x0 [0039.603] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned 123 [0039.603] lstrlenA (lpString="\\*.*") returned 4 [0039.603] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0039.603] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" [0039.603] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*" [0039.603] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690068 [0039.604] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.604] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.604] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.604] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.604] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.604] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0039.604] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.604] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.604] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.604] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.604] LocalFree (hMem=0x6773d8) returned 0x0 [0039.604] LocalFree (hMem=0x6772d0) returned 0x0 [0039.604] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0039.604] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.604] LocalFree (hMem=0x6659c8) returned 0x0 [0039.604] LocalFree (hMem=0x6649c8) returned 0x0 [0039.604] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0039.604] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.604] LocalFree (hMem=0x6771d8) returned 0x0 [0039.604] LocalFree (hMem=0x69e108) returned 0x0 [0039.604] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0039.604] lstrcmpiA (lpString1=".", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0039.604] lstrcmpiA (lpString1="..", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0039.604] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0039.604] lstrlenA (lpString="\\") returned 1 [0039.604] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.604] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.605] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.605] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0039.605] lstrlenA (lpString="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 32 [0039.605] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.605] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.605] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0039.605] LocalFree (hMem=0x69e030) returned 0x0 [0039.605] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 107 [0039.605] lstrlenA (lpString="\\*.*") returned 4 [0039.605] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.605] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0039.605] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*" [0039.605] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6901a8 [0039.605] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.605] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.605] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.605] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.605] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.605] lstrcmpiA (lpString1=".", lpString2="1.4_0") returned -1 [0039.605] lstrcmpiA (lpString1="..", lpString2="1.4_0") returned -1 [0039.606] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 107 [0039.606] lstrlenA (lpString="\\") returned 1 [0039.606] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.606] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0039.606] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0039.606] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned 108 [0039.606] lstrlenA (lpString="1.4_0") returned 5 [0039.606] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x6642c8 [0039.606] lstrcpyA (in: lpString1=0x6642c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0039.606] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpString2="1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0039.606] LocalFree (hMem=0x6772d0) returned 0x0 [0039.606] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 113 [0039.606] lstrlenA (lpString="\\*.*") returned 4 [0039.606] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6654c8 [0039.606] lstrcpyA (in: lpString1=0x6654c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0039.606] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*" [0039.606] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6902e8 [0039.607] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.607] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] StrStrIA (lpFirst="contentscript_bin_prod.js", lpSrch="Web Data") returned 0x0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] StrStrIA (lpFirst="dasherSettingSchema.json", lpSrch="Web Data") returned 0x0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] StrStrIA (lpFirst="eventpage_bin_prod.js", lpSrch="Web Data") returned 0x0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.607] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.607] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.608] StrStrIA (lpFirst="page_embed_script.js", lpSrch="Web Data") returned 0x0 [0039.608] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.608] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.608] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.608] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 113 [0039.608] lstrlenA (lpString="\\") returned 1 [0039.608] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6656c8 [0039.608] lstrcpyA (in: lpString1=0x6656c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0039.608] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0039.608] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned 114 [0039.608] lstrlenA (lpString="_locales") returned 8 [0039.608] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0039.608] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0039.608] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.608] LocalFree (hMem=0x6656c8) returned 0x0 [0039.608] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.608] lstrlenA (lpString="\\*.*") returned 4 [0039.608] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0039.608] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.608] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*" [0039.608] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690268 [0039.609] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.609] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.610] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.610] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.610] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.610] lstrcmpiA (lpString1=".", lpString2="af") returned -1 [0039.610] lstrcmpiA (lpString1="..", lpString2="af") returned -1 [0039.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.610] lstrlenA (lpString="\\") returned 1 [0039.610] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.610] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.610] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.610] lstrlenA (lpString="af") returned 2 [0039.610] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.610] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.610] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="af" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0039.610] LocalFree (hMem=0x6774e0) returned 0x0 [0039.610] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned 125 [0039.610] lstrlenA (lpString="\\*.*") returned 4 [0039.610] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.610] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0039.610] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*" [0039.610] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0039.610] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.610] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.610] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.610] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.610] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.610] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.611] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.611] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.611] LocalFree (hMem=0x6776f0) returned 0x0 [0039.611] LocalFree (hMem=0x6775e8) returned 0x0 [0039.611] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.611] lstrcmpiA (lpString1=".", lpString2="am") returned -1 [0039.611] lstrcmpiA (lpString1="..", lpString2="am") returned -1 [0039.611] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.611] lstrlenA (lpString="\\") returned 1 [0039.611] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.611] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.611] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.611] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.611] lstrlenA (lpString="am") returned 2 [0039.611] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.611] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.611] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="am" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0039.611] LocalFree (hMem=0x6774e0) returned 0x0 [0039.611] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned 125 [0039.611] lstrlenA (lpString="\\*.*") returned 4 [0039.611] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.611] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0039.611] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*" [0039.611] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0039.611] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.611] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.611] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.611] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.611] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.611] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.612] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.612] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0039.617] LocalFree (hMem=0x6776f0) returned 0x0 [0039.617] LocalFree (hMem=0x6775e8) returned 0x0 [0039.617] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.617] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0039.617] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0039.617] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.617] lstrlenA (lpString="\\") returned 1 [0039.617] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.617] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.617] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.617] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.617] lstrlenA (lpString="ar") returned 2 [0039.617] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.617] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.617] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0039.617] LocalFree (hMem=0x6774e0) returned 0x0 [0039.617] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned 125 [0039.617] lstrlenA (lpString="\\*.*") returned 4 [0039.617] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.617] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0039.617] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*" [0039.617] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.618] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.618] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.618] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.618] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.618] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.618] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.618] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.618] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.618] LocalFree (hMem=0x6776f0) returned 0x0 [0039.618] LocalFree (hMem=0x6775e8) returned 0x0 [0039.618] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.618] lstrcmpiA (lpString1=".", lpString2="az") returned -1 [0039.618] lstrcmpiA (lpString1="..", lpString2="az") returned -1 [0039.618] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.618] lstrlenA (lpString="\\") returned 1 [0039.618] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.618] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.618] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.618] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.618] lstrlenA (lpString="az") returned 2 [0039.618] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.618] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.619] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="az" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0039.619] LocalFree (hMem=0x6774e0) returned 0x0 [0039.619] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned 125 [0039.619] lstrlenA (lpString="\\*.*") returned 4 [0039.619] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.619] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0039.619] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*" [0039.619] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.619] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.619] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.619] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.619] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.619] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.619] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.619] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.619] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.619] LocalFree (hMem=0x6776f0) returned 0x0 [0039.619] LocalFree (hMem=0x6775e8) returned 0x0 [0039.619] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.619] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.619] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.619] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.619] lstrlenA (lpString="\\") returned 1 [0039.619] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.619] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.619] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.619] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.619] lstrlenA (lpString="bg") returned 2 [0039.619] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.619] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.619] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0039.619] LocalFree (hMem=0x6774e0) returned 0x0 [0039.619] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned 125 [0039.619] lstrlenA (lpString="\\*.*") returned 4 [0039.620] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.620] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0039.620] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*" [0039.620] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.620] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.620] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.620] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.620] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.620] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.620] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.620] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.620] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.620] LocalFree (hMem=0x6776f0) returned 0x0 [0039.620] LocalFree (hMem=0x6775e8) returned 0x0 [0039.620] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.620] lstrcmpiA (lpString1=".", lpString2="bn") returned -1 [0039.620] lstrcmpiA (lpString1="..", lpString2="bn") returned -1 [0039.620] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.620] lstrlenA (lpString="\\") returned 1 [0039.621] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.621] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.621] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.621] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.621] lstrlenA (lpString="bn") returned 2 [0039.621] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.621] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.621] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="bn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0039.621] LocalFree (hMem=0x6774e0) returned 0x0 [0039.621] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned 125 [0039.621] lstrlenA (lpString="\\*.*") returned 4 [0039.621] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.621] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0039.621] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*" [0039.621] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.621] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.621] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.621] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.621] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.621] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.621] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.621] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.621] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.621] LocalFree (hMem=0x6776f0) returned 0x0 [0039.621] LocalFree (hMem=0x6775e8) returned 0x0 [0039.621] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.621] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.621] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.621] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.621] lstrlenA (lpString="\\") returned 1 [0039.621] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.622] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.622] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.622] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.622] lstrlenA (lpString="ca") returned 2 [0039.622] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.626] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.626] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0039.626] LocalFree (hMem=0x6774e0) returned 0x0 [0039.626] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned 125 [0039.626] lstrlenA (lpString="\\*.*") returned 4 [0039.626] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.626] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0039.626] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*" [0039.627] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.627] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.627] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.627] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.627] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.627] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.627] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.628] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.628] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.628] LocalFree (hMem=0x6776f0) returned 0x0 [0039.628] LocalFree (hMem=0x6775e8) returned 0x0 [0039.628] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.628] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.628] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.628] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.628] lstrlenA (lpString="\\") returned 1 [0039.628] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.628] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.628] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.628] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.628] lstrlenA (lpString="cs") returned 2 [0039.628] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.628] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.628] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0039.628] LocalFree (hMem=0x6774e0) returned 0x0 [0039.628] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned 125 [0039.628] lstrlenA (lpString="\\*.*") returned 4 [0039.628] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.628] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0039.628] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*" [0039.628] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.628] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.628] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.629] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.629] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.629] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.629] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.629] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.629] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.629] LocalFree (hMem=0x6776f0) returned 0x0 [0039.629] LocalFree (hMem=0x6775e8) returned 0x0 [0039.629] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.629] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.629] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.629] lstrlenA (lpString="\\") returned 1 [0039.629] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.629] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.629] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.629] lstrlenA (lpString="da") returned 2 [0039.629] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.629] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.629] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0039.629] LocalFree (hMem=0x6774e0) returned 0x0 [0039.629] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned 125 [0039.629] lstrlenA (lpString="\\*.*") returned 4 [0039.629] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.629] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0039.629] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*" [0039.629] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.630] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.630] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.630] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.630] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.630] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.630] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.630] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.630] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.630] LocalFree (hMem=0x6776f0) returned 0x0 [0039.630] LocalFree (hMem=0x6775e8) returned 0x0 [0039.630] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.630] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.630] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.630] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.630] lstrlenA (lpString="\\") returned 1 [0039.630] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.630] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.630] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.630] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.630] lstrlenA (lpString="de") returned 2 [0039.630] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.630] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.630] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0039.630] LocalFree (hMem=0x6774e0) returned 0x0 [0039.630] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned 125 [0039.631] lstrlenA (lpString="\\*.*") returned 4 [0039.631] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.631] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0039.631] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*" [0039.631] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.631] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.631] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.631] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.631] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.631] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.631] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.631] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.631] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.631] LocalFree (hMem=0x6776f0) returned 0x0 [0039.631] LocalFree (hMem=0x6775e8) returned 0x0 [0039.631] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.631] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.631] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.631] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.631] lstrlenA (lpString="\\") returned 1 [0039.631] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.631] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.631] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.631] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.631] lstrlenA (lpString="el") returned 2 [0039.631] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.631] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.631] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0039.631] LocalFree (hMem=0x6774e0) returned 0x0 [0039.631] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned 125 [0039.631] lstrlenA (lpString="\\*.*") returned 4 [0039.632] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.632] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0039.632] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*" [0039.632] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.633] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.633] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.633] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.633] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.633] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.633] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.633] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.633] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.633] LocalFree (hMem=0x6776f0) returned 0x0 [0039.633] LocalFree (hMem=0x6775e8) returned 0x0 [0039.633] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.633] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0039.633] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0039.633] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.633] lstrlenA (lpString="\\") returned 1 [0039.633] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.633] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.633] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.633] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.633] lstrlenA (lpString="en_GB") returned 5 [0039.633] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.633] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.633] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0039.633] LocalFree (hMem=0x6774e0) returned 0x0 [0039.633] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned 128 [0039.633] lstrlenA (lpString="\\*.*") returned 4 [0039.633] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.633] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0039.633] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*" [0039.634] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.634] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.634] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.634] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.634] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.634] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.634] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.634] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.634] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.634] LocalFree (hMem=0x6776f8) returned 0x0 [0039.634] LocalFree (hMem=0x6775e8) returned 0x0 [0039.634] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.634] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0039.634] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0039.634] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.634] lstrlenA (lpString="\\") returned 1 [0039.634] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.634] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.634] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.634] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.634] lstrlenA (lpString="en_US") returned 5 [0039.634] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.634] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.634] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0039.634] LocalFree (hMem=0x6774e0) returned 0x0 [0039.634] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned 128 [0039.634] lstrlenA (lpString="\\*.*") returned 4 [0039.634] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.634] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0039.634] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*" [0039.634] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.635] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.635] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.635] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.635] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.635] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.635] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.635] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.635] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.635] LocalFree (hMem=0x6776f8) returned 0x0 [0039.635] LocalFree (hMem=0x6775e8) returned 0x0 [0039.635] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.635] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.635] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.635] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.635] lstrlenA (lpString="\\") returned 1 [0039.636] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.636] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.636] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.636] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.636] lstrlenA (lpString="es") returned 2 [0039.636] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.636] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.636] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0039.636] LocalFree (hMem=0x6774e0) returned 0x0 [0039.636] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned 125 [0039.636] lstrlenA (lpString="\\*.*") returned 4 [0039.636] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.636] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0039.636] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*" [0039.636] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.636] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.636] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.636] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.636] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.636] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.636] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.636] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.636] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.636] LocalFree (hMem=0x6776f0) returned 0x0 [0039.636] LocalFree (hMem=0x6775e8) returned 0x0 [0039.636] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.636] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0039.636] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0039.636] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.637] lstrlenA (lpString="\\") returned 1 [0039.637] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.637] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.637] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.637] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.637] lstrlenA (lpString="es_419") returned 6 [0039.637] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0039.637] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.637] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0039.637] LocalFree (hMem=0x6774e0) returned 0x0 [0039.637] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned 129 [0039.637] lstrlenA (lpString="\\*.*") returned 4 [0039.637] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.637] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0039.637] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*" [0039.637] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.637] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.637] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.637] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.638] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.638] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.638] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.638] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.638] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.638] LocalFree (hMem=0x6776f8) returned 0x0 [0039.638] LocalFree (hMem=0x6775e8) returned 0x0 [0039.638] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.638] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0039.638] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0039.638] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.638] lstrlenA (lpString="\\") returned 1 [0039.638] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.638] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.638] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.638] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.638] lstrlenA (lpString="et") returned 2 [0039.638] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.638] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.638] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0039.638] LocalFree (hMem=0x6774e0) returned 0x0 [0039.638] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned 125 [0039.638] lstrlenA (lpString="\\*.*") returned 4 [0039.638] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.638] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0039.638] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*" [0039.638] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.638] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.638] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.639] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.639] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.639] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.639] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.639] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.639] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.639] LocalFree (hMem=0x6776f0) returned 0x0 [0039.639] LocalFree (hMem=0x6775e8) returned 0x0 [0039.639] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.639] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0039.639] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0039.639] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.639] lstrlenA (lpString="\\") returned 1 [0039.639] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.639] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.639] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.639] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.639] lstrlenA (lpString="eu") returned 2 [0039.639] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.639] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.639] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0039.639] LocalFree (hMem=0x6774e0) returned 0x0 [0039.639] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned 125 [0039.639] lstrlenA (lpString="\\*.*") returned 4 [0039.639] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.639] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0039.639] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*" [0039.639] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.640] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.640] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.640] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.640] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.640] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.640] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.640] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.640] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.640] LocalFree (hMem=0x6776f0) returned 0x0 [0039.640] LocalFree (hMem=0x6775e8) returned 0x0 [0039.640] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.640] lstrcmpiA (lpString1=".", lpString2="fa") returned -1 [0039.640] lstrcmpiA (lpString1="..", lpString2="fa") returned -1 [0039.640] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.640] lstrlenA (lpString="\\") returned 1 [0039.640] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.640] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.640] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.640] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.640] lstrlenA (lpString="fa") returned 2 [0039.640] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.640] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.640] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fa" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0039.640] LocalFree (hMem=0x6774e0) returned 0x0 [0039.640] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned 125 [0039.640] lstrlenA (lpString="\\*.*") returned 4 [0039.640] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.641] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0039.641] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*" [0039.641] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.641] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.641] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.641] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.641] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.641] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.641] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.641] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.641] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.641] LocalFree (hMem=0x6776f0) returned 0x0 [0039.641] LocalFree (hMem=0x6775e8) returned 0x0 [0039.641] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.641] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.641] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.641] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.641] lstrlenA (lpString="\\") returned 1 [0039.641] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.641] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.641] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.641] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.641] lstrlenA (lpString="fi") returned 2 [0039.641] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.641] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.641] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0039.641] LocalFree (hMem=0x6774e0) returned 0x0 [0039.641] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned 125 [0039.642] lstrlenA (lpString="\\*.*") returned 4 [0039.642] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.642] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0039.642] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*" [0039.642] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.642] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.642] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.642] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.642] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.642] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.642] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.642] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.642] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.642] LocalFree (hMem=0x6776f0) returned 0x0 [0039.642] LocalFree (hMem=0x6775e8) returned 0x0 [0039.642] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.642] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.642] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0039.642] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.642] lstrlenA (lpString="\\") returned 1 [0039.643] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.643] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.643] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.643] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.643] lstrlenA (lpString="fil") returned 3 [0039.643] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.643] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.643] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0039.643] LocalFree (hMem=0x6774e0) returned 0x0 [0039.643] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned 126 [0039.643] lstrlenA (lpString="\\*.*") returned 4 [0039.643] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.643] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0039.643] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*" [0039.643] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.643] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.643] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.643] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.643] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.643] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.643] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.643] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.643] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.643] LocalFree (hMem=0x6776f0) returned 0x0 [0039.643] LocalFree (hMem=0x6775e8) returned 0x0 [0039.643] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.643] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.643] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.643] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.643] lstrlenA (lpString="\\") returned 1 [0039.644] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.644] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.644] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.644] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.644] lstrlenA (lpString="fr") returned 2 [0039.644] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.644] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.644] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0039.644] LocalFree (hMem=0x6774e0) returned 0x0 [0039.644] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned 125 [0039.644] lstrlenA (lpString="\\*.*") returned 4 [0039.644] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.644] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0039.644] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*" [0039.644] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.644] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.644] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.644] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.644] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.645] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.645] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.645] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.645] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.645] LocalFree (hMem=0x6776f0) returned 0x0 [0039.645] LocalFree (hMem=0x6775e8) returned 0x0 [0039.645] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.645] lstrcmpiA (lpString1=".", lpString2="fr_CA") returned -1 [0039.645] lstrcmpiA (lpString1="..", lpString2="fr_CA") returned -1 [0039.645] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.645] lstrlenA (lpString="\\") returned 1 [0039.645] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.645] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.645] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.645] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.645] lstrlenA (lpString="fr_CA") returned 5 [0039.645] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.645] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.645] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="fr_CA" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0039.645] LocalFree (hMem=0x6774e0) returned 0x0 [0039.645] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned 128 [0039.645] lstrlenA (lpString="\\*.*") returned 4 [0039.645] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.645] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0039.645] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*" [0039.645] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.645] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.645] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.645] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.646] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.646] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.646] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.646] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.646] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.646] LocalFree (hMem=0x6776f8) returned 0x0 [0039.646] LocalFree (hMem=0x6775e8) returned 0x0 [0039.646] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.646] lstrcmpiA (lpString1=".", lpString2="gl") returned -1 [0039.646] lstrcmpiA (lpString1="..", lpString2="gl") returned -1 [0039.646] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.646] lstrlenA (lpString="\\") returned 1 [0039.646] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.646] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.646] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.646] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.646] lstrlenA (lpString="gl") returned 2 [0039.646] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.646] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.646] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="gl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0039.646] LocalFree (hMem=0x6774e0) returned 0x0 [0039.646] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned 125 [0039.646] lstrlenA (lpString="\\*.*") returned 4 [0039.646] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.646] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0039.646] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*" [0039.646] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.647] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.647] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.647] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.647] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.647] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.647] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.647] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.647] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.647] LocalFree (hMem=0x6776f0) returned 0x0 [0039.647] LocalFree (hMem=0x6775e8) returned 0x0 [0039.647] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.647] lstrcmpiA (lpString1=".", lpString2="gu") returned -1 [0039.647] lstrcmpiA (lpString1="..", lpString2="gu") returned -1 [0039.647] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.647] lstrlenA (lpString="\\") returned 1 [0039.647] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.647] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.647] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.647] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.647] lstrlenA (lpString="gu") returned 2 [0039.647] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.647] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.648] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="gu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0039.648] LocalFree (hMem=0x6774e0) returned 0x0 [0039.648] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned 125 [0039.648] lstrlenA (lpString="\\*.*") returned 4 [0039.648] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.648] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0039.648] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*" [0039.648] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.648] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.648] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.648] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.648] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.648] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.648] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.648] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.685] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.685] LocalFree (hMem=0x6776f0) returned 0x0 [0039.685] LocalFree (hMem=0x6775e8) returned 0x0 [0039.685] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.685] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.685] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.685] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.685] lstrlenA (lpString="\\") returned 1 [0039.685] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.685] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.685] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.685] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.685] lstrlenA (lpString="hi") returned 2 [0039.685] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.685] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.685] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0039.685] LocalFree (hMem=0x6774e0) returned 0x0 [0039.685] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned 125 [0039.685] lstrlenA (lpString="\\*.*") returned 4 [0039.685] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.685] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0039.685] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*.*" [0039.685] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.686] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.686] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.686] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.686] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.686] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.686] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.686] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.686] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.686] LocalFree (hMem=0x6776f0) returned 0x0 [0039.686] LocalFree (hMem=0x6775e8) returned 0x0 [0039.686] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.686] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0039.686] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0039.686] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.686] lstrlenA (lpString="\\") returned 1 [0039.686] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.686] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.687] lstrlenA (lpString="hr") returned 2 [0039.687] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.687] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0039.687] LocalFree (hMem=0x6774e0) returned 0x0 [0039.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned 125 [0039.687] lstrlenA (lpString="\\*.*") returned 4 [0039.687] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.687] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0039.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*.*" [0039.687] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.687] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.687] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.687] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.687] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.687] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.687] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.687] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.687] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.687] LocalFree (hMem=0x6776f0) returned 0x0 [0039.687] LocalFree (hMem=0x6775e8) returned 0x0 [0039.687] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.687] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0039.687] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0039.687] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.687] lstrlenA (lpString="\\") returned 1 [0039.687] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.687] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.687] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.688] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.688] lstrlenA (lpString="hu") returned 2 [0039.688] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.688] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.688] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0039.688] LocalFree (hMem=0x6774e0) returned 0x0 [0039.688] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned 125 [0039.688] lstrlenA (lpString="\\*.*") returned 4 [0039.688] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.688] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0039.688] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*.*" [0039.688] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.688] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.688] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.689] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.689] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.689] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.689] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.689] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.689] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.689] LocalFree (hMem=0x6776f0) returned 0x0 [0039.689] LocalFree (hMem=0x6775e8) returned 0x0 [0039.689] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.689] lstrcmpiA (lpString1=".", lpString2="hy") returned -1 [0039.689] lstrcmpiA (lpString1="..", lpString2="hy") returned -1 [0039.689] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.689] lstrlenA (lpString="\\") returned 1 [0039.689] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.689] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.689] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.689] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.689] lstrlenA (lpString="hy") returned 2 [0039.689] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.689] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.689] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="hy" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0039.689] LocalFree (hMem=0x6774e0) returned 0x0 [0039.689] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned 125 [0039.689] lstrlenA (lpString="\\*.*") returned 4 [0039.689] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.689] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0039.689] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*.*" [0039.689] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.689] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.689] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.690] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.690] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.690] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.690] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.690] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.690] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.690] LocalFree (hMem=0x6776f0) returned 0x0 [0039.690] LocalFree (hMem=0x6775e8) returned 0x0 [0039.690] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.690] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0039.690] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0039.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.690] lstrlenA (lpString="\\") returned 1 [0039.690] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.690] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.690] lstrlenA (lpString="id") returned 2 [0039.690] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.690] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0039.690] LocalFree (hMem=0x6774e0) returned 0x0 [0039.690] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned 125 [0039.690] lstrlenA (lpString="\\*.*") returned 4 [0039.690] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.690] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0039.690] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*.*" [0039.690] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.691] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.691] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.691] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.691] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.691] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.691] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.691] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.691] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.691] LocalFree (hMem=0x6776f0) returned 0x0 [0039.691] LocalFree (hMem=0x6775e8) returned 0x0 [0039.691] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.691] lstrcmpiA (lpString1=".", lpString2="is") returned -1 [0039.691] lstrcmpiA (lpString1="..", lpString2="is") returned -1 [0039.691] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.691] lstrlenA (lpString="\\") returned 1 [0039.691] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.691] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.691] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.691] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.691] lstrlenA (lpString="is") returned 2 [0039.691] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.691] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.691] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="is" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0039.691] LocalFree (hMem=0x6774e0) returned 0x0 [0039.691] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned 125 [0039.691] lstrlenA (lpString="\\*.*") returned 4 [0039.692] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.692] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0039.692] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*.*" [0039.692] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.692] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.692] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.692] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.692] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.692] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.692] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.692] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.692] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.692] LocalFree (hMem=0x6776f0) returned 0x0 [0039.692] LocalFree (hMem=0x6775e8) returned 0x0 [0039.692] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.692] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0039.692] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0039.692] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.692] lstrlenA (lpString="\\") returned 1 [0039.692] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.692] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.692] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.692] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.692] lstrlenA (lpString="it") returned 2 [0039.692] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.692] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.692] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0039.692] LocalFree (hMem=0x6774e0) returned 0x0 [0039.692] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned 125 [0039.693] lstrlenA (lpString="\\*.*") returned 4 [0039.693] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.693] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0039.693] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*.*" [0039.693] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.693] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.693] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.693] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.693] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.693] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.693] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.693] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.693] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.693] LocalFree (hMem=0x6776f0) returned 0x0 [0039.693] LocalFree (hMem=0x6775e8) returned 0x0 [0039.693] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.693] lstrcmpiA (lpString1=".", lpString2="iw") returned -1 [0039.694] lstrcmpiA (lpString1="..", lpString2="iw") returned -1 [0039.694] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.694] lstrlenA (lpString="\\") returned 1 [0039.694] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.694] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.694] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.694] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.694] lstrlenA (lpString="iw") returned 2 [0039.694] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.694] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.694] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="iw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0039.694] LocalFree (hMem=0x6774e0) returned 0x0 [0039.694] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned 125 [0039.694] lstrlenA (lpString="\\*.*") returned 4 [0039.694] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.694] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0039.694] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*.*" [0039.694] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.694] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.694] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.694] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.694] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.694] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.694] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.694] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.694] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.694] LocalFree (hMem=0x6776f0) returned 0x0 [0039.694] LocalFree (hMem=0x6775e8) returned 0x0 [0039.694] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.694] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0039.695] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0039.695] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.695] lstrlenA (lpString="\\") returned 1 [0039.695] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.695] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.695] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.695] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.695] lstrlenA (lpString="ja") returned 2 [0039.695] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.695] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.695] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0039.695] LocalFree (hMem=0x6774e0) returned 0x0 [0039.695] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned 125 [0039.695] lstrlenA (lpString="\\*.*") returned 4 [0039.695] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.695] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0039.695] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*.*" [0039.695] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.695] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.695] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.696] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.696] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.696] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.696] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.696] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.696] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.696] LocalFree (hMem=0x6776f0) returned 0x0 [0039.696] LocalFree (hMem=0x6775e8) returned 0x0 [0039.696] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.696] lstrcmpiA (lpString1=".", lpString2="ka") returned -1 [0039.696] lstrcmpiA (lpString1="..", lpString2="ka") returned -1 [0039.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.696] lstrlenA (lpString="\\") returned 1 [0039.696] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.696] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.696] lstrlenA (lpString="ka") returned 2 [0039.696] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.696] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ka" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0039.696] LocalFree (hMem=0x6774e0) returned 0x0 [0039.696] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned 125 [0039.696] lstrlenA (lpString="\\*.*") returned 4 [0039.696] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.696] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0039.696] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*.*" [0039.696] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.697] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.697] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.697] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.697] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.697] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.697] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.697] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.697] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.697] LocalFree (hMem=0x6776f0) returned 0x0 [0039.697] LocalFree (hMem=0x6775e8) returned 0x0 [0039.697] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.697] lstrcmpiA (lpString1=".", lpString2="km") returned -1 [0039.697] lstrcmpiA (lpString1="..", lpString2="km") returned -1 [0039.697] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.697] lstrlenA (lpString="\\") returned 1 [0039.697] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.697] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.697] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.697] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.697] lstrlenA (lpString="km") returned 2 [0039.697] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.697] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.697] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="km" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0039.697] LocalFree (hMem=0x6774e0) returned 0x0 [0039.697] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned 125 [0039.697] lstrlenA (lpString="\\*.*") returned 4 [0039.697] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.697] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0039.697] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*.*" [0039.697] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.698] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.698] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.698] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.698] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.698] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.698] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.698] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.698] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.698] LocalFree (hMem=0x6776f0) returned 0x0 [0039.698] LocalFree (hMem=0x6775e8) returned 0x0 [0039.698] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.698] lstrcmpiA (lpString1=".", lpString2="kn") returned -1 [0039.698] lstrcmpiA (lpString1="..", lpString2="kn") returned -1 [0039.698] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.698] lstrlenA (lpString="\\") returned 1 [0039.698] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.699] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.699] lstrlenA (lpString="kn") returned 2 [0039.699] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.699] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="kn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0039.699] LocalFree (hMem=0x6774e0) returned 0x0 [0039.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned 125 [0039.699] lstrlenA (lpString="\\*.*") returned 4 [0039.699] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.699] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0039.699] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*.*" [0039.699] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.699] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.699] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.699] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.699] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.699] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.699] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.699] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.699] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.699] LocalFree (hMem=0x6776f0) returned 0x0 [0039.699] LocalFree (hMem=0x6775e8) returned 0x0 [0039.699] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.699] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0039.699] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0039.699] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.699] lstrlenA (lpString="\\") returned 1 [0039.700] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.700] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.700] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.700] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.700] lstrlenA (lpString="ko") returned 2 [0039.700] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.700] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.700] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0039.700] LocalFree (hMem=0x6774e0) returned 0x0 [0039.700] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned 125 [0039.700] lstrlenA (lpString="\\*.*") returned 4 [0039.700] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.700] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0039.700] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*.*" [0039.700] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.700] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.700] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.700] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.701] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.701] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.701] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.701] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.701] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.701] LocalFree (hMem=0x6776f0) returned 0x0 [0039.701] LocalFree (hMem=0x6775e8) returned 0x0 [0039.701] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.701] lstrcmpiA (lpString1=".", lpString2="lo") returned -1 [0039.701] lstrcmpiA (lpString1="..", lpString2="lo") returned -1 [0039.701] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.701] lstrlenA (lpString="\\") returned 1 [0039.701] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.701] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.701] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.701] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.701] lstrlenA (lpString="lo") returned 2 [0039.701] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.701] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.701] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="lo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0039.701] LocalFree (hMem=0x6774e0) returned 0x0 [0039.701] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned 125 [0039.701] lstrlenA (lpString="\\*.*") returned 4 [0039.701] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.701] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0039.701] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*.*" [0039.701] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.701] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.701] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.702] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.702] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.702] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.702] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.702] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.702] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.702] LocalFree (hMem=0x6776f0) returned 0x0 [0039.702] LocalFree (hMem=0x6775e8) returned 0x0 [0039.702] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.702] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0039.702] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0039.702] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.702] lstrlenA (lpString="\\") returned 1 [0039.702] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.702] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.702] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.702] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.702] lstrlenA (lpString="lt") returned 2 [0039.702] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.702] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.702] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0039.702] LocalFree (hMem=0x6774e0) returned 0x0 [0039.703] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned 125 [0039.703] lstrlenA (lpString="\\*.*") returned 4 [0039.703] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.703] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0039.703] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*.*" [0039.703] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.703] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.703] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.703] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.703] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.703] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.703] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.703] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.703] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.703] LocalFree (hMem=0x6776f0) returned 0x0 [0039.703] LocalFree (hMem=0x6775e8) returned 0x0 [0039.704] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.704] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0039.704] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0039.704] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.704] lstrlenA (lpString="\\") returned 1 [0039.704] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.704] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.704] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.704] lstrlenA (lpString="lv") returned 2 [0039.704] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.704] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0039.704] LocalFree (hMem=0x6774e0) returned 0x0 [0039.704] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned 125 [0039.704] lstrlenA (lpString="\\*.*") returned 4 [0039.704] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.704] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0039.704] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*.*" [0039.704] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.704] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.704] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.704] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.704] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.704] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.704] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.704] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.704] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.705] LocalFree (hMem=0x6776f0) returned 0x0 [0039.705] LocalFree (hMem=0x6775e8) returned 0x0 [0039.705] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.705] lstrcmpiA (lpString1=".", lpString2="ml") returned -1 [0039.705] lstrcmpiA (lpString1="..", lpString2="ml") returned -1 [0039.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.705] lstrlenA (lpString="\\") returned 1 [0039.705] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.705] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.705] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.705] lstrlenA (lpString="ml") returned 2 [0039.705] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.705] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.705] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0039.705] LocalFree (hMem=0x6774e0) returned 0x0 [0039.705] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned 125 [0039.705] lstrlenA (lpString="\\*.*") returned 4 [0039.705] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.705] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0039.705] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*.*" [0039.705] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.706] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.706] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.706] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.706] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.706] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.706] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.706] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.706] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.706] LocalFree (hMem=0x6776f0) returned 0x0 [0039.706] LocalFree (hMem=0x6775e8) returned 0x0 [0039.706] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.706] lstrcmpiA (lpString1=".", lpString2="mn") returned -1 [0039.706] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.706] lstrlenA (lpString="\\") returned 1 [0039.706] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.706] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.706] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.706] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.706] lstrlenA (lpString="mn") returned 2 [0039.706] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.706] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.706] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="mn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0039.706] LocalFree (hMem=0x6774e0) returned 0x0 [0039.706] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned 125 [0039.706] lstrlenA (lpString="\\*.*") returned 4 [0039.706] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.706] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0039.706] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*.*" [0039.707] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.707] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.707] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.707] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.707] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.707] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.707] LocalFree (hMem=0x6776f0) returned 0x0 [0039.707] LocalFree (hMem=0x6775e8) returned 0x0 [0039.707] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.707] lstrcmpiA (lpString1=".", lpString2="mr") returned -1 [0039.707] lstrcmpiA (lpString1="..", lpString2="mr") returned -1 [0039.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.707] lstrlenA (lpString="\\") returned 1 [0039.707] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.707] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.707] lstrlenA (lpString="mr") returned 2 [0039.707] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.707] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="mr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0039.707] LocalFree (hMem=0x6774e0) returned 0x0 [0039.707] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned 125 [0039.707] lstrlenA (lpString="\\*.*") returned 4 [0039.707] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.707] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0039.707] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*.*" [0039.707] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.708] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.708] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.708] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.708] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.708] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.708] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.708] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.708] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.708] LocalFree (hMem=0x6776f0) returned 0x0 [0039.708] LocalFree (hMem=0x6775e8) returned 0x0 [0039.708] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.708] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0039.708] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0039.708] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.709] lstrlenA (lpString="\\") returned 1 [0039.709] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.709] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.709] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.709] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.709] lstrlenA (lpString="ms") returned 2 [0039.709] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.709] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.709] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0039.709] LocalFree (hMem=0x6774e0) returned 0x0 [0039.709] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned 125 [0039.709] lstrlenA (lpString="\\*.*") returned 4 [0039.709] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.709] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0039.709] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*.*" [0039.709] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.709] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.709] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.709] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.709] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.709] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.709] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.709] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.709] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.709] LocalFree (hMem=0x6776f0) returned 0x0 [0039.709] LocalFree (hMem=0x6775e8) returned 0x0 [0039.709] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.709] lstrcmpiA (lpString1=".", lpString2="ne") returned -1 [0039.709] lstrcmpiA (lpString1="..", lpString2="ne") returned -1 [0039.709] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.709] lstrlenA (lpString="\\") returned 1 [0039.710] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.710] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.710] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.710] lstrlenA (lpString="ne") returned 2 [0039.710] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.710] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ne" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0039.710] LocalFree (hMem=0x6774e0) returned 0x0 [0039.710] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned 125 [0039.710] lstrlenA (lpString="\\*.*") returned 4 [0039.710] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.710] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0039.710] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*.*" [0039.710] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.710] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.710] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.710] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.710] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.710] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.711] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.711] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.711] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.711] LocalFree (hMem=0x6776f0) returned 0x0 [0039.711] LocalFree (hMem=0x6775e8) returned 0x0 [0039.711] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.711] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0039.711] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0039.711] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.711] lstrlenA (lpString="\\") returned 1 [0039.711] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.711] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.711] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.711] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.711] lstrlenA (lpString="nl") returned 2 [0039.711] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.711] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.711] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0039.711] LocalFree (hMem=0x6774e0) returned 0x0 [0039.711] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned 125 [0039.711] lstrlenA (lpString="\\*.*") returned 4 [0039.711] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.711] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0039.711] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*.*" [0039.711] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.711] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.711] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.711] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.711] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.711] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.712] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.712] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.712] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.712] LocalFree (hMem=0x6776f0) returned 0x0 [0039.712] LocalFree (hMem=0x6775e8) returned 0x0 [0039.712] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.712] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0039.712] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0039.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.712] lstrlenA (lpString="\\") returned 1 [0039.712] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.712] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.712] lstrlenA (lpString="no") returned 2 [0039.712] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.712] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0039.712] LocalFree (hMem=0x6774e0) returned 0x0 [0039.712] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned 125 [0039.712] lstrlenA (lpString="\\*.*") returned 4 [0039.712] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.712] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0039.712] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*.*" [0039.712] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.713] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.713] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.713] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.713] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.713] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.713] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.713] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.713] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.713] LocalFree (hMem=0x6776f0) returned 0x0 [0039.713] LocalFree (hMem=0x6775e8) returned 0x0 [0039.713] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.713] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0039.713] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0039.713] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.713] lstrlenA (lpString="\\") returned 1 [0039.713] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.713] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.713] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.713] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.713] lstrlenA (lpString="pl") returned 2 [0039.713] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.713] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.713] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0039.713] LocalFree (hMem=0x6774e0) returned 0x0 [0039.713] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned 125 [0039.713] lstrlenA (lpString="\\*.*") returned 4 [0039.713] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.713] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0039.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*.*" [0039.714] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.714] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.714] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.714] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.714] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.714] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.714] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.714] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.714] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.714] LocalFree (hMem=0x6776f0) returned 0x0 [0039.714] LocalFree (hMem=0x6775e8) returned 0x0 [0039.714] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.714] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0039.714] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0039.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.714] lstrlenA (lpString="\\") returned 1 [0039.714] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.714] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.714] lstrlenA (lpString="pt_BR") returned 5 [0039.714] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.714] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.714] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0039.714] LocalFree (hMem=0x6774e0) returned 0x0 [0039.714] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned 128 [0039.714] lstrlenA (lpString="\\*.*") returned 4 [0039.714] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.714] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0039.715] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*.*" [0039.715] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0039.715] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.715] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.715] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.715] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.715] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.715] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.715] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.716] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0039.716] LocalFree (hMem=0x6776f8) returned 0x0 [0039.716] LocalFree (hMem=0x6775e8) returned 0x0 [0039.716] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.716] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0039.716] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0039.716] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.716] lstrlenA (lpString="\\") returned 1 [0039.716] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.716] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.716] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.716] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.716] lstrlenA (lpString="pt_PT") returned 5 [0039.716] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.716] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.716] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0039.716] LocalFree (hMem=0x6774e0) returned 0x0 [0039.716] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned 128 [0039.716] lstrlenA (lpString="\\*.*") returned 4 [0039.716] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.716] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0039.716] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*.*" [0039.716] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0039.716] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.716] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.716] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.717] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.717] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.717] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.717] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.717] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0039.717] LocalFree (hMem=0x6776f8) returned 0x0 [0039.717] LocalFree (hMem=0x6775e8) returned 0x0 [0039.717] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.717] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0039.717] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0039.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.717] lstrlenA (lpString="\\") returned 1 [0039.717] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.717] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.717] lstrlenA (lpString="ro") returned 2 [0039.717] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.717] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0039.717] LocalFree (hMem=0x6774e0) returned 0x0 [0039.717] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned 125 [0039.717] lstrlenA (lpString="\\*.*") returned 4 [0039.717] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.717] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0039.717] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*.*" [0039.717] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.718] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.718] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.718] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.718] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.718] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.718] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.718] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.718] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.718] LocalFree (hMem=0x6776f0) returned 0x0 [0039.718] LocalFree (hMem=0x6775e8) returned 0x0 [0039.718] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.718] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0039.718] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0039.718] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.718] lstrlenA (lpString="\\") returned 1 [0039.718] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.718] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.718] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.718] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.718] lstrlenA (lpString="ru") returned 2 [0039.718] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.718] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.718] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0039.718] LocalFree (hMem=0x6774e0) returned 0x0 [0039.719] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned 125 [0039.719] lstrlenA (lpString="\\*.*") returned 4 [0039.719] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.719] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0039.719] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*.*" [0039.719] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.719] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.719] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.719] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.719] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.719] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.719] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.719] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.719] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.719] LocalFree (hMem=0x6776f0) returned 0x0 [0039.719] LocalFree (hMem=0x6775e8) returned 0x0 [0039.719] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.719] lstrcmpiA (lpString1=".", lpString2="si") returned -1 [0039.719] lstrcmpiA (lpString1="..", lpString2="si") returned -1 [0039.719] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.719] lstrlenA (lpString="\\") returned 1 [0039.719] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.719] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.719] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.719] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.719] lstrlenA (lpString="si") returned 2 [0039.719] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.719] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.719] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="si" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0039.719] LocalFree (hMem=0x6774e0) returned 0x0 [0039.720] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned 125 [0039.720] lstrlenA (lpString="\\*.*") returned 4 [0039.720] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.720] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0039.720] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*.*" [0039.720] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.720] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.720] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.720] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.720] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.720] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.720] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.720] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.720] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.721] LocalFree (hMem=0x6776f0) returned 0x0 [0039.721] LocalFree (hMem=0x6775e8) returned 0x0 [0039.721] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.721] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0039.721] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0039.721] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.721] lstrlenA (lpString="\\") returned 1 [0039.721] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.721] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.721] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.721] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.721] lstrlenA (lpString="sk") returned 2 [0039.721] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.721] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.721] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0039.721] LocalFree (hMem=0x6774e0) returned 0x0 [0039.721] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned 125 [0039.721] lstrlenA (lpString="\\*.*") returned 4 [0039.721] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.721] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0039.721] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*.*" [0039.721] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.755] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.755] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.755] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.755] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.755] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.755] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.755] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.755] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.755] LocalFree (hMem=0x6776f0) returned 0x0 [0039.755] LocalFree (hMem=0x6775e8) returned 0x0 [0039.755] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.755] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0039.755] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0039.755] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.755] lstrlenA (lpString="\\") returned 1 [0039.755] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.755] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.755] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.755] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.755] lstrlenA (lpString="sl") returned 2 [0039.755] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.755] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.755] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0039.755] LocalFree (hMem=0x6774e0) returned 0x0 [0039.755] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned 125 [0039.755] lstrlenA (lpString="\\*.*") returned 4 [0039.756] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.756] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0039.756] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*.*" [0039.756] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.756] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.756] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.756] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.756] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.756] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.756] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.756] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.756] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.759] LocalFree (hMem=0x6776f0) returned 0x0 [0039.759] LocalFree (hMem=0x6775e8) returned 0x0 [0039.759] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.759] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0039.759] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0039.759] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.759] lstrlenA (lpString="\\") returned 1 [0039.759] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.759] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.759] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.759] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.759] lstrlenA (lpString="sr") returned 2 [0039.759] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.759] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.759] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0039.759] LocalFree (hMem=0x6774e0) returned 0x0 [0039.759] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned 125 [0039.759] lstrlenA (lpString="\\*.*") returned 4 [0039.759] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.759] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0039.759] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*.*" [0039.759] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.759] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.759] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.760] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.760] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.760] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.760] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.760] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.760] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.760] LocalFree (hMem=0x6776f0) returned 0x0 [0039.760] LocalFree (hMem=0x6775e8) returned 0x0 [0039.760] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.760] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0039.760] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0039.760] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.760] lstrlenA (lpString="\\") returned 1 [0039.760] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.760] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.760] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.760] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.760] lstrlenA (lpString="sv") returned 2 [0039.760] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.760] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.760] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0039.760] LocalFree (hMem=0x6774e0) returned 0x0 [0039.760] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned 125 [0039.760] lstrlenA (lpString="\\*.*") returned 4 [0039.760] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.760] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0039.760] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*.*" [0039.760] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.761] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.761] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.761] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.761] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.761] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.761] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.761] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.761] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.761] LocalFree (hMem=0x6776f0) returned 0x0 [0039.761] LocalFree (hMem=0x6775e8) returned 0x0 [0039.761] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.761] lstrcmpiA (lpString1=".", lpString2="sw") returned -1 [0039.761] lstrcmpiA (lpString1="..", lpString2="sw") returned -1 [0039.761] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.761] lstrlenA (lpString="\\") returned 1 [0039.761] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.761] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.761] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.761] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.761] lstrlenA (lpString="sw") returned 2 [0039.761] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.761] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="sw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0039.762] LocalFree (hMem=0x6774e0) returned 0x0 [0039.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned 125 [0039.762] lstrlenA (lpString="\\*.*") returned 4 [0039.762] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.762] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0039.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*.*" [0039.762] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.762] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.762] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.762] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.762] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.762] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.762] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.762] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.762] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.762] LocalFree (hMem=0x6776f0) returned 0x0 [0039.762] LocalFree (hMem=0x6775e8) returned 0x0 [0039.762] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.762] lstrcmpiA (lpString1=".", lpString2="ta") returned -1 [0039.762] lstrcmpiA (lpString1="..", lpString2="ta") returned -1 [0039.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.762] lstrlenA (lpString="\\") returned 1 [0039.762] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.762] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.762] lstrlenA (lpString="ta") returned 2 [0039.762] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.762] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.762] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ta" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0039.762] LocalFree (hMem=0x6774e0) returned 0x0 [0039.762] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned 125 [0039.762] lstrlenA (lpString="\\*.*") returned 4 [0039.762] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.763] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0039.763] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*.*" [0039.763] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.763] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.763] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.763] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.763] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.763] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.763] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.763] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.763] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.763] LocalFree (hMem=0x6776f0) returned 0x0 [0039.763] LocalFree (hMem=0x6775e8) returned 0x0 [0039.763] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.763] lstrcmpiA (lpString1=".", lpString2="te") returned -1 [0039.763] lstrcmpiA (lpString1="..", lpString2="te") returned -1 [0039.763] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.763] lstrlenA (lpString="\\") returned 1 [0039.763] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.764] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.764] lstrlenA (lpString="te") returned 2 [0039.764] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.764] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="te" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0039.764] LocalFree (hMem=0x6774e0) returned 0x0 [0039.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned 125 [0039.764] lstrlenA (lpString="\\*.*") returned 4 [0039.764] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.764] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0039.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*.*" [0039.764] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0039.764] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.764] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.764] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.764] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.764] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.764] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.764] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.764] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.764] LocalFree (hMem=0x6776f0) returned 0x0 [0039.764] LocalFree (hMem=0x6775e8) returned 0x0 [0039.764] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.764] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0039.764] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0039.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.764] lstrlenA (lpString="\\") returned 1 [0039.764] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.764] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.764] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.764] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.765] lstrlenA (lpString="th") returned 2 [0039.765] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.765] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0039.765] LocalFree (hMem=0x6774e0) returned 0x0 [0039.765] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned 125 [0039.765] lstrlenA (lpString="\\*.*") returned 4 [0039.765] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.765] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0039.765] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*.*" [0039.765] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.765] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.765] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.765] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.765] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.765] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.765] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.765] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.765] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.766] LocalFree (hMem=0x6776f0) returned 0x0 [0039.766] LocalFree (hMem=0x6775e8) returned 0x0 [0039.766] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.766] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0039.766] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0039.766] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.766] lstrlenA (lpString="\\") returned 1 [0039.766] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.766] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.766] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.766] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.766] lstrlenA (lpString="tr") returned 2 [0039.766] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.766] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.766] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0039.766] LocalFree (hMem=0x6774e0) returned 0x0 [0039.766] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned 125 [0039.766] lstrlenA (lpString="\\*.*") returned 4 [0039.766] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.766] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0039.766] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*.*" [0039.766] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.766] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.766] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.766] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.766] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.766] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.766] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.766] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.766] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.767] LocalFree (hMem=0x6776f0) returned 0x0 [0039.767] LocalFree (hMem=0x6775e8) returned 0x0 [0039.767] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.767] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.767] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.767] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.767] lstrlenA (lpString="\\") returned 1 [0039.767] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.767] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.767] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.767] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.767] lstrlenA (lpString="uk") returned 2 [0039.767] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.767] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.767] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0039.767] LocalFree (hMem=0x6774e0) returned 0x0 [0039.767] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned 125 [0039.767] lstrlenA (lpString="\\*.*") returned 4 [0039.767] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.767] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0039.767] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*.*" [0039.767] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.768] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.768] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.768] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.768] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.768] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.768] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.768] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.768] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.768] LocalFree (hMem=0x6776f0) returned 0x0 [0039.768] LocalFree (hMem=0x6775e8) returned 0x0 [0039.768] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.768] lstrcmpiA (lpString1=".", lpString2="ur") returned -1 [0039.768] lstrcmpiA (lpString1="..", lpString2="ur") returned -1 [0039.768] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.768] lstrlenA (lpString="\\") returned 1 [0039.768] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.768] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.768] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.768] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.768] lstrlenA (lpString="ur") returned 2 [0039.768] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.768] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.768] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="ur" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0039.768] LocalFree (hMem=0x6774e0) returned 0x0 [0039.768] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned 125 [0039.768] lstrlenA (lpString="\\*.*") returned 4 [0039.768] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.768] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0039.768] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*.*" [0039.768] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.769] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.769] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.769] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.769] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.769] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.769] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.769] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.769] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.769] LocalFree (hMem=0x6776f0) returned 0x0 [0039.769] LocalFree (hMem=0x6775e8) returned 0x0 [0039.769] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.769] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.769] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.769] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.769] lstrlenA (lpString="\\") returned 1 [0039.769] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.769] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.769] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.769] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.769] lstrlenA (lpString="vi") returned 2 [0039.769] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.769] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.769] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0039.769] LocalFree (hMem=0x6774e0) returned 0x0 [0039.769] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned 125 [0039.769] lstrlenA (lpString="\\*.*") returned 4 [0039.769] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.769] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0039.769] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*.*" [0039.769] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0039.770] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.770] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.770] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.770] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.770] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.770] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.770] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.770] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0039.770] LocalFree (hMem=0x6776f0) returned 0x0 [0039.770] LocalFree (hMem=0x6775e8) returned 0x0 [0039.770] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.770] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.770] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.770] lstrlenA (lpString="\\") returned 1 [0039.770] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.770] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.770] lstrlenA (lpString="zh_CN") returned 5 [0039.770] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.770] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.770] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0039.770] LocalFree (hMem=0x6774e0) returned 0x0 [0039.770] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned 128 [0039.770] lstrlenA (lpString="\\*.*") returned 4 [0039.770] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.771] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0039.771] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*.*" [0039.771] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.777] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.777] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.777] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.777] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.777] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.777] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.777] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.777] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.777] LocalFree (hMem=0x6776f8) returned 0x0 [0039.777] LocalFree (hMem=0x6775e8) returned 0x0 [0039.777] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.777] lstrcmpiA (lpString1=".", lpString2="zh_HK") returned -1 [0039.777] lstrcmpiA (lpString1="..", lpString2="zh_HK") returned -1 [0039.777] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.777] lstrlenA (lpString="\\") returned 1 [0039.777] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.777] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.778] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.778] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.778] lstrlenA (lpString="zh_HK") returned 5 [0039.778] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.778] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.778] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="zh_HK" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0039.778] LocalFree (hMem=0x6774e0) returned 0x0 [0039.778] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned 128 [0039.778] lstrlenA (lpString="\\*.*") returned 4 [0039.778] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.778] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0039.778] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*.*" [0039.778] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.778] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.779] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.779] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.779] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.779] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.779] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.779] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.779] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0039.779] LocalFree (hMem=0x6776f8) returned 0x0 [0039.779] LocalFree (hMem=0x6775e8) returned 0x0 [0039.779] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.779] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.779] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.779] lstrlenA (lpString="\\") returned 1 [0039.779] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.779] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.779] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.779] lstrlenA (lpString="zh_TW") returned 5 [0039.779] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.779] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.779] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0039.779] LocalFree (hMem=0x6774e0) returned 0x0 [0039.779] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned 128 [0039.779] lstrlenA (lpString="\\*.*") returned 4 [0039.779] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.779] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0039.779] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*.*" [0039.779] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.779] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.780] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.780] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.780] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.780] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.780] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.780] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.780] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.780] LocalFree (hMem=0x6776f8) returned 0x0 [0039.780] LocalFree (hMem=0x6775e8) returned 0x0 [0039.780] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.780] lstrcmpiA (lpString1=".", lpString2="zu") returned -1 [0039.780] lstrcmpiA (lpString1="..", lpString2="zu") returned -1 [0039.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 122 [0039.780] lstrlenA (lpString="\\") returned 1 [0039.780] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.780] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0039.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned 123 [0039.780] lstrlenA (lpString="zu") returned 2 [0039.780] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.780] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0039.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpString2="zu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0039.780] LocalFree (hMem=0x6774e0) returned 0x0 [0039.780] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned 125 [0039.780] lstrlenA (lpString="\\*.*") returned 4 [0039.780] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.780] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0039.780] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*.*" [0039.780] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.781] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.781] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.781] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.781] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.781] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.781] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.781] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.781] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0039.781] LocalFree (hMem=0x6776f0) returned 0x0 [0039.781] LocalFree (hMem=0x6775e8) returned 0x0 [0039.781] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.781] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.781] LocalFree (hMem=0x6773d8) returned 0x0 [0039.781] LocalFree (hMem=0x6772d0) returned 0x0 [0039.781] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.781] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.781] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.781] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 113 [0039.781] lstrlenA (lpString="\\") returned 1 [0039.781] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6659c8 [0039.781] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0039.781] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0039.781] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned 114 [0039.782] lstrlenA (lpString="_metadata") returned 9 [0039.782] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0039.782] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0039.782] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0039.782] LocalFree (hMem=0x6659c8) returned 0x0 [0039.782] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned 123 [0039.782] lstrlenA (lpString="\\*.*") returned 4 [0039.782] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0039.782] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0039.782] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*.*" [0039.782] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x68ff68 [0039.782] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.782] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.782] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.782] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.782] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.782] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0039.783] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.783] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.783] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.783] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.783] LocalFree (hMem=0x6773d8) returned 0x0 [0039.783] LocalFree (hMem=0x6772d0) returned 0x0 [0039.783] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0039.783] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0039.783] LocalFree (hMem=0x6654c8) returned 0x0 [0039.783] LocalFree (hMem=0x6642c8) returned 0x0 [0039.783] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0039.783] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.783] LocalFree (hMem=0x6771d8) returned 0x0 [0039.783] LocalFree (hMem=0x69e108) returned 0x0 [0039.783] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0039.783] lstrcmpiA (lpString1=".", lpString2="nmmhkkegccagdldgiimedpiccmgmieda") returned -1 [0039.783] lstrcmpiA (lpString1="..", lpString2="nmmhkkegccagdldgiimedpiccmgmieda") returned -1 [0039.783] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0039.783] lstrlenA (lpString="\\") returned 1 [0039.783] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.783] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.783] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.783] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0039.783] lstrlenA (lpString="nmmhkkegccagdldgiimedpiccmgmieda") returned 32 [0039.783] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.783] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.783] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="nmmhkkegccagdldgiimedpiccmgmieda" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0039.783] LocalFree (hMem=0x69e030) returned 0x0 [0039.783] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned 107 [0039.783] lstrlenA (lpString="\\*.*") returned 4 [0039.783] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.783] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0039.783] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*.*" [0039.783] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6902a8 [0039.784] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.784] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.784] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.784] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.784] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0039.784] lstrcmpiA (lpString1=".", lpString2="1.0.0.3_0") returned -1 [0039.784] lstrcmpiA (lpString1="..", lpString2="1.0.0.3_0") returned -1 [0039.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned 107 [0039.784] lstrlenA (lpString="\\") returned 1 [0039.784] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.784] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0039.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0039.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned 108 [0039.784] lstrlenA (lpString="1.0.0.3_0") returned 9 [0039.784] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6653c8 [0039.784] lstrcpyA (in: lpString1=0x6653c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0039.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", lpString2="1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.784] LocalFree (hMem=0x6772d0) returned 0x0 [0039.784] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned 117 [0039.784] lstrlenA (lpString="\\*.*") returned 4 [0039.784] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x6772d0 [0039.784] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.784] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\*.*" [0039.784] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6906a8 [0039.785] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.786] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.786] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.786] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.786] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.786] StrStrIA (lpFirst="craw_background.js", lpSrch="Web Data") returned 0x0 [0039.786] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.786] StrStrIA (lpFirst="craw_window.js", lpSrch="Web Data") returned 0x0 [0039.786] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.786] lstrcmpiA (lpString1=".", lpString2="css") returned -1 [0039.786] lstrcmpiA (lpString1="..", lpString2="css") returned -1 [0039.786] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned 117 [0039.786] lstrlenA (lpString="\\") returned 1 [0039.786] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x6654c8 [0039.786] lstrcpyA (in: lpString1=0x6654c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.786] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned 118 [0039.786] lstrlenA (lpString="css") returned 3 [0039.786] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x6773d8 [0039.786] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\", lpString2="css" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css" [0039.786] LocalFree (hMem=0x6654c8) returned 0x0 [0039.786] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css") returned 121 [0039.786] lstrlenA (lpString="\\*.*") returned 4 [0039.786] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e0 [0039.786] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css" [0039.786] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css\\*.*" [0039.786] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\css\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x68fee8 [0039.787] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.787] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.787] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.787] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.787] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.787] StrStrIA (lpFirst="craw_window.css", lpSrch="Web Data") returned 0x0 [0039.787] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.787] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.787] LocalFree (hMem=0x6774e0) returned 0x0 [0039.787] LocalFree (hMem=0x6773d8) returned 0x0 [0039.787] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.787] lstrcmpiA (lpString1=".", lpString2="html") returned -1 [0039.787] lstrcmpiA (lpString1="..", lpString2="html") returned -1 [0039.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned 117 [0039.787] lstrlenA (lpString="\\") returned 1 [0039.787] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x665bc8 [0039.787] lstrcpyA (in: lpString1=0x665bc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.787] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned 118 [0039.787] lstrlenA (lpString="html") returned 4 [0039.787] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6773d8 [0039.787] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.787] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\", lpString2="html" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html" [0039.787] LocalFree (hMem=0x665bc8) returned 0x0 [0039.787] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html") returned 122 [0039.787] lstrlenA (lpString="\\*.*") returned 4 [0039.787] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6774e0 [0039.788] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html" [0039.788] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html\\*.*" [0039.788] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\html\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690128 [0039.788] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.788] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.788] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.788] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.788] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.788] StrStrIA (lpFirst="craw_window.html", lpSrch="Web Data") returned 0x0 [0039.788] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.788] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.788] LocalFree (hMem=0x6774e0) returned 0x0 [0039.788] LocalFree (hMem=0x6773d8) returned 0x0 [0039.788] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.788] lstrcmpiA (lpString1=".", lpString2="images") returned -1 [0039.788] lstrcmpiA (lpString1="..", lpString2="images") returned -1 [0039.788] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned 117 [0039.788] lstrlenA (lpString="\\") returned 1 [0039.788] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x6656c8 [0039.788] lstrcpyA (in: lpString1=0x6656c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.788] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.788] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned 118 [0039.788] lstrlenA (lpString="images") returned 6 [0039.788] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6773d8 [0039.788] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.788] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\", lpString2="images" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images" [0039.788] LocalFree (hMem=0x6656c8) returned 0x0 [0039.788] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images") returned 124 [0039.788] lstrlenA (lpString="\\*.*") returned 4 [0039.788] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6774e0 [0039.788] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images" [0039.788] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images\\*.*" [0039.788] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\images\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6904e8 [0039.791] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.791] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.792] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="flapper.gif", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="icon_128.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="icon_16.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="topbar_floating_button.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="topbar_floating_button_close.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="topbar_floating_button_hover.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="topbar_floating_button_maximize.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.792] StrStrIA (lpFirst="topbar_floating_button_pressed.png", lpSrch="Web Data") returned 0x0 [0039.792] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0039.792] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0039.792] LocalFree (hMem=0x6774e0) returned 0x0 [0039.792] LocalFree (hMem=0x6773d8) returned 0x0 [0039.793] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.793] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.793] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0039.793] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.793] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.793] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned 117 [0039.793] lstrlenA (lpString="\\") returned 1 [0039.793] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x663dc8 [0039.793] lstrcpyA (in: lpString1=0x663dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.793] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.793] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned 118 [0039.793] lstrlenA (lpString="_locales") returned 8 [0039.793] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0039.793] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.793] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.793] LocalFree (hMem=0x663dc8) returned 0x0 [0039.793] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.793] lstrlenA (lpString="\\*.*") returned 4 [0039.793] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6774e0 [0039.793] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.793] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\*.*" [0039.793] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690068 [0039.794] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.794] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.794] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.794] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.795] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.795] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.795] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.795] lstrlenA (lpString="\\") returned 1 [0039.795] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.795] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.795] lstrlenA (lpString="bg") returned 2 [0039.795] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.795] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg" [0039.795] LocalFree (hMem=0x6775f0) returned 0x0 [0039.795] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg") returned 129 [0039.795] lstrlenA (lpString="\\*.*") returned 4 [0039.795] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.795] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg" [0039.795] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg\\*.*" [0039.795] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.797] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.797] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.797] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.797] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.797] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.797] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.797] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.797] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.797] LocalFree (hMem=0x677808) returned 0x0 [0039.797] LocalFree (hMem=0x6776f8) returned 0x0 [0039.797] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.797] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.797] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.797] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.797] lstrlenA (lpString="\\") returned 1 [0039.797] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.797] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.797] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.797] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.797] lstrlenA (lpString="ca") returned 2 [0039.797] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.797] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.797] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca" [0039.798] LocalFree (hMem=0x6775f0) returned 0x0 [0039.798] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca") returned 129 [0039.798] lstrlenA (lpString="\\*.*") returned 4 [0039.798] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.798] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca" [0039.798] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca\\*.*" [0039.798] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.798] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.798] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.798] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.798] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.798] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.798] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.798] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.798] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.799] LocalFree (hMem=0x677808) returned 0x0 [0039.799] LocalFree (hMem=0x6776f8) returned 0x0 [0039.799] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.799] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.799] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.799] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.799] lstrlenA (lpString="\\") returned 1 [0039.799] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.799] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.799] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.799] lstrlenA (lpString="cs") returned 2 [0039.799] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.799] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs" [0039.799] LocalFree (hMem=0x6775f0) returned 0x0 [0039.799] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs") returned 129 [0039.799] lstrlenA (lpString="\\*.*") returned 4 [0039.799] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.799] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs" [0039.799] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs\\*.*" [0039.799] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.800] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.800] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.800] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.800] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.800] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.800] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.800] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.800] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.800] LocalFree (hMem=0x677808) returned 0x0 [0039.800] LocalFree (hMem=0x6776f8) returned 0x0 [0039.800] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.800] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.800] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.800] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.800] lstrlenA (lpString="\\") returned 1 [0039.800] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.800] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.800] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.800] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.800] lstrlenA (lpString="da") returned 2 [0039.800] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.800] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.800] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da" [0039.800] LocalFree (hMem=0x6775f0) returned 0x0 [0039.800] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da") returned 129 [0039.800] lstrlenA (lpString="\\*.*") returned 4 [0039.800] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.800] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da" [0039.800] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da\\*.*" [0039.800] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.801] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.801] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.801] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.801] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.801] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.801] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.801] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.801] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.802] LocalFree (hMem=0x677808) returned 0x0 [0039.802] LocalFree (hMem=0x6776f8) returned 0x0 [0039.802] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.802] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.802] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.802] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.803] lstrlenA (lpString="\\") returned 1 [0039.803] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.803] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.803] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.803] lstrlenA (lpString="de") returned 2 [0039.803] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.803] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.803] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de" [0039.803] LocalFree (hMem=0x6775f0) returned 0x0 [0039.803] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de") returned 129 [0039.803] lstrlenA (lpString="\\*.*") returned 4 [0039.803] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.803] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de" [0039.803] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de\\*.*" [0039.803] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.846] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.846] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.846] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.846] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.846] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.846] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.847] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.847] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.847] LocalFree (hMem=0x677808) returned 0x0 [0039.847] LocalFree (hMem=0x6776f8) returned 0x0 [0039.847] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.847] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.847] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.847] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.847] lstrlenA (lpString="\\") returned 1 [0039.847] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.847] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.847] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.847] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.847] lstrlenA (lpString="el") returned 2 [0039.847] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.847] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.847] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el" [0039.847] LocalFree (hMem=0x6775f0) returned 0x0 [0039.847] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el") returned 129 [0039.847] lstrlenA (lpString="\\*.*") returned 4 [0039.847] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.847] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el" [0039.847] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el\\*.*" [0039.847] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.848] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.848] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.848] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.848] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.848] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.848] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.848] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.848] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.848] LocalFree (hMem=0x677808) returned 0x0 [0039.848] LocalFree (hMem=0x6776f8) returned 0x0 [0039.848] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.848] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0039.848] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0039.848] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.848] lstrlenA (lpString="\\") returned 1 [0039.848] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.848] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.848] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.848] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.848] lstrlenA (lpString="en") returned 2 [0039.848] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.848] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.848] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en" [0039.848] LocalFree (hMem=0x6775f0) returned 0x0 [0039.848] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en") returned 129 [0039.848] lstrlenA (lpString="\\*.*") returned 4 [0039.848] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.848] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en" [0039.848] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en\\*.*" [0039.848] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.849] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.849] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.849] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.849] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.849] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.849] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.849] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.849] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.849] LocalFree (hMem=0x677808) returned 0x0 [0039.849] LocalFree (hMem=0x6776f8) returned 0x0 [0039.850] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.850] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0039.850] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0039.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.850] lstrlenA (lpString="\\") returned 1 [0039.850] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.850] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.850] lstrlenA (lpString="en_GB") returned 5 [0039.850] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.850] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB" [0039.850] LocalFree (hMem=0x6775f0) returned 0x0 [0039.850] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB") returned 132 [0039.850] lstrlenA (lpString="\\*.*") returned 4 [0039.850] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x675060 [0039.850] lstrcpyA (in: lpString1=0x675060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB" [0039.850] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB\\*.*" [0039.850] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.851] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.851] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.851] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.851] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.851] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.851] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.851] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.851] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0039.851] LocalFree (hMem=0x675060) returned 0x0 [0039.851] LocalFree (hMem=0x6776f8) returned 0x0 [0039.851] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.851] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.851] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.851] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.851] lstrlenA (lpString="\\") returned 1 [0039.851] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.851] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.851] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.851] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.851] lstrlenA (lpString="es") returned 2 [0039.851] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.851] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.851] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es" [0039.851] LocalFree (hMem=0x6775f0) returned 0x0 [0039.851] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es") returned 129 [0039.851] lstrlenA (lpString="\\*.*") returned 4 [0039.851] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.851] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es" [0039.851] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es\\*.*" [0039.851] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.852] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.852] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.852] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.852] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.852] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.852] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.852] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.852] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.852] LocalFree (hMem=0x677808) returned 0x0 [0039.852] LocalFree (hMem=0x6776f8) returned 0x0 [0039.852] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.852] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0039.852] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0039.852] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.852] lstrlenA (lpString="\\") returned 1 [0039.852] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.852] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.852] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.853] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.853] lstrlenA (lpString="es_419") returned 6 [0039.853] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0039.853] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.853] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419" [0039.853] LocalFree (hMem=0x6775f0) returned 0x0 [0039.853] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419") returned 133 [0039.853] lstrlenA (lpString="\\*.*") returned 4 [0039.853] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x675060 [0039.853] lstrcpyA (in: lpString1=0x675060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419" [0039.853] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419\\*.*" [0039.853] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.853] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.853] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.853] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.853] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.854] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.854] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.854] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.854] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.854] LocalFree (hMem=0x675060) returned 0x0 [0039.854] LocalFree (hMem=0x6776f8) returned 0x0 [0039.854] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.854] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0039.854] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0039.854] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.854] lstrlenA (lpString="\\") returned 1 [0039.854] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.854] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.854] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.854] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.854] lstrlenA (lpString="et") returned 2 [0039.854] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.854] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.854] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et" [0039.854] LocalFree (hMem=0x6775f0) returned 0x0 [0039.854] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et") returned 129 [0039.854] lstrlenA (lpString="\\*.*") returned 4 [0039.854] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.854] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et" [0039.854] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et\\*.*" [0039.854] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.855] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.855] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.855] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.855] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.855] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.855] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.855] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.855] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.855] LocalFree (hMem=0x677808) returned 0x0 [0039.855] LocalFree (hMem=0x6776f8) returned 0x0 [0039.855] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.855] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.855] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.855] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.855] lstrlenA (lpString="\\") returned 1 [0039.855] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.855] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.855] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.855] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.855] lstrlenA (lpString="fi") returned 2 [0039.855] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.855] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.855] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi" [0039.855] LocalFree (hMem=0x6775f0) returned 0x0 [0039.855] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi") returned 129 [0039.855] lstrlenA (lpString="\\*.*") returned 4 [0039.855] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.855] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi" [0039.855] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi\\*.*" [0039.855] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.856] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.856] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.856] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.856] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.856] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.856] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.856] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.856] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.856] LocalFree (hMem=0x677808) returned 0x0 [0039.856] LocalFree (hMem=0x6776f8) returned 0x0 [0039.856] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.856] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.856] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0039.856] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.856] lstrlenA (lpString="\\") returned 1 [0039.856] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.856] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.857] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.857] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.857] lstrlenA (lpString="fil") returned 3 [0039.857] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f8 [0039.857] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.857] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil" [0039.857] LocalFree (hMem=0x6775f0) returned 0x0 [0039.857] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil") returned 130 [0039.857] lstrlenA (lpString="\\*.*") returned 4 [0039.857] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677808 [0039.857] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil" [0039.857] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil\\*.*" [0039.857] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.857] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.857] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.857] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.857] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.857] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.857] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.857] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.857] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.857] LocalFree (hMem=0x677808) returned 0x0 [0039.857] LocalFree (hMem=0x6776f8) returned 0x0 [0039.857] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.857] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.857] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.857] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.857] lstrlenA (lpString="\\") returned 1 [0039.857] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.857] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.858] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.858] lstrlenA (lpString="fr") returned 2 [0039.858] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.858] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr" [0039.858] LocalFree (hMem=0x6775f0) returned 0x0 [0039.858] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr") returned 129 [0039.858] lstrlenA (lpString="\\*.*") returned 4 [0039.858] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.858] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr" [0039.858] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr\\*.*" [0039.858] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.858] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.858] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.858] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.858] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.858] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.858] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.859] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.859] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0039.859] LocalFree (hMem=0x677808) returned 0x0 [0039.859] LocalFree (hMem=0x6776f8) returned 0x0 [0039.859] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.859] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.859] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.859] lstrlenA (lpString="\\") returned 1 [0039.859] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.859] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.859] lstrlenA (lpString="hi") returned 2 [0039.859] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.859] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi" [0039.859] LocalFree (hMem=0x6775f0) returned 0x0 [0039.859] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi") returned 129 [0039.859] lstrlenA (lpString="\\*.*") returned 4 [0039.859] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.859] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi" [0039.859] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi\\*.*" [0039.859] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.859] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.859] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.859] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.859] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.859] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.859] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.860] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.860] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.860] LocalFree (hMem=0x677808) returned 0x0 [0039.860] LocalFree (hMem=0x6776f8) returned 0x0 [0039.860] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.860] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0039.860] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0039.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.860] lstrlenA (lpString="\\") returned 1 [0039.860] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.860] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.860] lstrlenA (lpString="hr") returned 2 [0039.860] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.860] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr" [0039.860] LocalFree (hMem=0x6775f0) returned 0x0 [0039.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr") returned 129 [0039.860] lstrlenA (lpString="\\*.*") returned 4 [0039.860] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.860] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr" [0039.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr\\*.*" [0039.860] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.861] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.861] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.861] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.861] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.861] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.861] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.861] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.861] LocalFree (hMem=0x677808) returned 0x0 [0039.861] LocalFree (hMem=0x6776f8) returned 0x0 [0039.861] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.861] lstrlenA (lpString="\\") returned 1 [0039.861] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.861] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.861] lstrlenA (lpString="hu") returned 2 [0039.861] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.861] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu" [0039.861] LocalFree (hMem=0x6775f0) returned 0x0 [0039.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu") returned 129 [0039.861] lstrlenA (lpString="\\*.*") returned 4 [0039.861] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.861] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu" [0039.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu\\*.*" [0039.862] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.862] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.862] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.862] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.862] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.862] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.862] LocalFree (hMem=0x677808) returned 0x0 [0039.862] LocalFree (hMem=0x6776f8) returned 0x0 [0039.862] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.862] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.862] lstrlenA (lpString="\\") returned 1 [0039.862] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.862] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.862] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.862] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.862] lstrlenA (lpString="id") returned 2 [0039.862] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.863] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.863] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id" [0039.863] LocalFree (hMem=0x6775f0) returned 0x0 [0039.863] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id") returned 129 [0039.863] lstrlenA (lpString="\\*.*") returned 4 [0039.863] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.863] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id" [0039.863] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id\\*.*" [0039.863] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.863] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.863] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.863] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.863] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.863] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.863] LocalFree (hMem=0x677808) returned 0x0 [0039.864] LocalFree (hMem=0x6776f8) returned 0x0 [0039.864] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.864] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned 126 [0039.864] lstrlenA (lpString="\\") returned 1 [0039.864] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.864] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.864] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned 127 [0039.864] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it" [0039.864] LocalFree (hMem=0x6775f0) returned 0x0 [0039.864] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it" [0039.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it\\*.*" [0039.864] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.865] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.865] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.865] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.865] FindNextFileA (in: hFindFile=0x6901e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.865] FindClose (in: hFindFile=0x6901e8 | out: hFindFile=0x6901e8) returned 1 [0039.865] LocalFree (hMem=0x677808) returned 0x0 [0039.865] LocalFree (hMem=0x6776f8) returned 0x0 [0039.865] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.865] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.865] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.865] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.865] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja" [0039.865] LocalFree (hMem=0x6775f0) returned 0x0 [0039.865] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja" [0039.865] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja\\*.*" [0039.865] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.866] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.866] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.866] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.866] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.866] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0039.866] LocalFree (hMem=0x677808) returned 0x0 [0039.866] LocalFree (hMem=0x6776f8) returned 0x0 [0039.866] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.866] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.866] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.866] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.866] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko" [0039.866] LocalFree (hMem=0x6775f0) returned 0x0 [0039.866] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko" [0039.866] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko\\*.*" [0039.866] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0039.867] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.867] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.867] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.867] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.867] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0039.867] LocalFree (hMem=0x677808) returned 0x0 [0039.867] LocalFree (hMem=0x6776f8) returned 0x0 [0039.867] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.867] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.867] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt" [0039.867] LocalFree (hMem=0x6775f0) returned 0x0 [0039.867] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt" [0039.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt\\*.*" [0039.867] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.868] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.868] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.868] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.868] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.868] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.868] LocalFree (hMem=0x677808) returned 0x0 [0039.868] LocalFree (hMem=0x6776f8) returned 0x0 [0039.868] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.868] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.868] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv" [0039.868] LocalFree (hMem=0x6775f0) returned 0x0 [0039.868] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv" [0039.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv\\*.*" [0039.868] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.869] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.869] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.869] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.869] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.869] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.869] LocalFree (hMem=0x677808) returned 0x0 [0039.869] LocalFree (hMem=0x6776f8) returned 0x0 [0039.869] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.869] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.869] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="nb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb" [0039.869] LocalFree (hMem=0x6775f0) returned 0x0 [0039.869] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb" [0039.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb\\*.*" [0039.869] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nb\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.870] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.870] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.870] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.870] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.870] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.870] LocalFree (hMem=0x677808) returned 0x0 [0039.870] LocalFree (hMem=0x6776f8) returned 0x0 [0039.870] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.870] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.870] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl" [0039.870] LocalFree (hMem=0x6775f0) returned 0x0 [0039.870] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl" [0039.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl\\*.*" [0039.870] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.871] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.871] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.871] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.871] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.871] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.871] LocalFree (hMem=0x677808) returned 0x0 [0039.871] LocalFree (hMem=0x6776f8) returned 0x0 [0039.871] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.871] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.871] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl" [0039.871] LocalFree (hMem=0x6775f0) returned 0x0 [0039.871] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl" [0039.872] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl\\*.*" [0039.872] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.872] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.872] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.872] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.872] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.872] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.872] LocalFree (hMem=0x677808) returned 0x0 [0039.872] LocalFree (hMem=0x6776f8) returned 0x0 [0039.872] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.872] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.872] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.872] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.872] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR" [0039.872] LocalFree (hMem=0x6775f0) returned 0x0 [0039.872] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR" [0039.872] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR\\*.*" [0039.872] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0039.873] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.873] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.873] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.873] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.873] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0039.873] LocalFree (hMem=0x675b50) returned 0x0 [0039.873] LocalFree (hMem=0x6776f8) returned 0x0 [0039.873] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.873] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.873] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.873] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.873] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT" [0039.873] LocalFree (hMem=0x6775f0) returned 0x0 [0039.873] lstrcpyA (in: lpString1=0x675808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT" [0039.873] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT\\*.*" [0039.873] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0039.874] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.874] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.874] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.874] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.874] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0039.874] LocalFree (hMem=0x675808) returned 0x0 [0039.874] LocalFree (hMem=0x6776f8) returned 0x0 [0039.874] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.874] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.874] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.874] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.874] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro" [0039.874] LocalFree (hMem=0x6775f0) returned 0x0 [0039.874] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro" [0039.874] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro\\*.*" [0039.874] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.875] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.875] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.875] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.875] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.875] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.875] LocalFree (hMem=0x677808) returned 0x0 [0039.875] LocalFree (hMem=0x6776f8) returned 0x0 [0039.875] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.875] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.875] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru" [0039.875] LocalFree (hMem=0x6775f0) returned 0x0 [0039.875] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru" [0039.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru\\*.*" [0039.875] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0039.876] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.876] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.876] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.876] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.876] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0039.876] LocalFree (hMem=0x677808) returned 0x0 [0039.876] LocalFree (hMem=0x6776f8) returned 0x0 [0039.876] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.876] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.876] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk" [0039.876] LocalFree (hMem=0x6775f0) returned 0x0 [0039.876] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk" [0039.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk\\*.*" [0039.876] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.877] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.877] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.877] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.877] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.877] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.877] LocalFree (hMem=0x677808) returned 0x0 [0039.877] LocalFree (hMem=0x6776f8) returned 0x0 [0039.877] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.877] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.877] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl" [0039.877] LocalFree (hMem=0x6775f0) returned 0x0 [0039.877] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl" [0039.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl\\*.*" [0039.877] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.878] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.878] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.878] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.878] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.878] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.878] LocalFree (hMem=0x677808) returned 0x0 [0039.878] LocalFree (hMem=0x6776f8) returned 0x0 [0039.878] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.878] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.878] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr" [0039.878] LocalFree (hMem=0x6775f0) returned 0x0 [0039.878] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr" [0039.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr\\*.*" [0039.878] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.879] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.879] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.879] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.879] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.879] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.879] LocalFree (hMem=0x677808) returned 0x0 [0039.879] LocalFree (hMem=0x6776f8) returned 0x0 [0039.879] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.879] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.879] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv" [0039.879] LocalFree (hMem=0x6775f0) returned 0x0 [0039.879] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.879] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv" [0039.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv\\*.*" [0039.879] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.880] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.880] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.880] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.880] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.880] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.880] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.880] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.880] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.880] LocalFree (hMem=0x677808) returned 0x0 [0039.880] LocalFree (hMem=0x6776f8) returned 0x0 [0039.880] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.880] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0039.880] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0039.880] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.880] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.880] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.880] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.880] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.880] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th" [0039.880] LocalFree (hMem=0x6775f0) returned 0x0 [0039.880] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.880] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th" [0039.880] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th\\*.*" [0039.880] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.881] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.881] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.881] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.881] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.881] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.885] LocalFree (hMem=0x677808) returned 0x0 [0039.885] LocalFree (hMem=0x6776f8) returned 0x0 [0039.885] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0039.885] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0039.885] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.885] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.885] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.886] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.886] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.886] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr" [0039.886] LocalFree (hMem=0x6775f0) returned 0x0 [0039.886] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.886] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr" [0039.886] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr\\*.*" [0039.886] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.886] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.886] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.886] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.886] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.936] LocalFree (hMem=0x677808) returned 0x0 [0039.936] LocalFree (hMem=0x6776f8) returned 0x0 [0039.936] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0039.936] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0039.936] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.936] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.936] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.936] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.936] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.936] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk" [0039.936] LocalFree (hMem=0x6775f0) returned 0x0 [0039.937] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.937] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk" [0039.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk\\*.*" [0039.937] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.937] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.937] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.937] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.937] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.937] LocalFree (hMem=0x677808) returned 0x0 [0039.937] LocalFree (hMem=0x6776f8) returned 0x0 [0039.938] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0039.938] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0039.938] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.938] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.938] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f8 [0039.938] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi" [0039.938] LocalFree (hMem=0x6775f0) returned 0x0 [0039.938] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x677808 [0039.938] lstrcpyA (in: lpString1=0x677808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi" [0039.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi\\*.*" [0039.938] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.938] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.938] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.938] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.938] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.938] LocalFree (hMem=0x677808) returned 0x0 [0039.938] LocalFree (hMem=0x6776f8) returned 0x0 [0039.938] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0039.938] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0039.938] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.938] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.939] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.939] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN" [0039.939] LocalFree (hMem=0x6775f0) returned 0x0 [0039.939] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x674d18 [0039.939] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN" [0039.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN\\*.*" [0039.939] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.939] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.939] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.939] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.939] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.939] LocalFree (hMem=0x674d18) returned 0x0 [0039.939] LocalFree (hMem=0x6776f8) returned 0x0 [0039.939] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0039.940] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0039.940] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0039.940] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales" [0039.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.940] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.940] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\" [0039.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW" [0039.940] LocalFree (hMem=0x6775f0) returned 0x0 [0039.940] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x6753a8 [0039.940] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW" [0039.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW\\*.*" [0039.940] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.940] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.941] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.941] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.941] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.941] LocalFree (hMem=0x6753a8) returned 0x0 [0039.941] LocalFree (hMem=0x6776f8) returned 0x0 [0039.941] LocalFree (hMem=0x6774e0) returned 0x0 [0039.941] LocalFree (hMem=0x6773d8) returned 0x0 [0039.941] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0039.941] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0039.941] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x6646c8 [0039.941] lstrcpyA (in: lpString1=0x6646c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0" [0039.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.941] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0039.941] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\" [0039.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata" [0039.941] LocalFree (hMem=0x6646c8) returned 0x0 [0039.941] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6774e0 [0039.941] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata" [0039.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata\\*.*" [0039.941] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.3_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690468 [0039.942] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.942] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.942] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.942] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0039.942] LocalFree (hMem=0x6774e0) returned 0x0 [0039.942] LocalFree (hMem=0x6773d8) returned 0x0 [0039.942] LocalFree (hMem=0x6772d0) returned 0x0 [0039.942] LocalFree (hMem=0x6653c8) returned 0x0 [0039.942] LocalFree (hMem=0x6771d8) returned 0x0 [0039.942] LocalFree (hMem=0x69e108) returned 0x0 [0039.942] lstrcmpiA (lpString1=".", lpString2="pjkljhegncpnkpknbcohdijeoejaedia") returned -1 [0039.942] lstrcmpiA (lpString1="..", lpString2="pjkljhegncpnkpknbcohdijeoejaedia") returned -1 [0039.942] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0039.942] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0039.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.942] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0039.942] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0039.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="pjkljhegncpnkpknbcohdijeoejaedia" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0039.942] LocalFree (hMem=0x69e030) returned 0x0 [0039.943] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0039.943] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0039.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*.*" [0039.943] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690068 [0039.943] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.943] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.943] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.943] lstrcmpiA (lpString1=".", lpString2="8.1_0") returned -1 [0039.943] lstrcmpiA (lpString1="..", lpString2="8.1_0") returned -1 [0039.943] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0039.943] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0039.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0039.943] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x664bc8 [0039.943] lstrcpyA (in: lpString1=0x664bc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0039.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpString2="8.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0039.943] LocalFree (hMem=0x6772d0) returned 0x0 [0039.943] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x664ac8 [0039.943] lstrcpyA (in: lpString1=0x664ac8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0039.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*.*" [0039.943] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690268 [0039.944] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.944] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.944] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.944] StrStrIA (lpFirst="128.png", lpSrch="Web Data") returned 0x0 [0039.945] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0039.945] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0039.945] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0039.945] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6651c8 [0039.945] lstrcpyA (in: lpString1=0x6651c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0039.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0039.945] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned 114 [0039.945] lstrlenA (lpString="_locales") returned 8 [0039.945] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0039.945] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0039.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.945] LocalFree (hMem=0x6651c8) returned 0x0 [0039.945] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.945] lstrlenA (lpString="\\*.*") returned 4 [0039.945] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0039.945] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*.*" [0039.945] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6902a8 [0039.947] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.947] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.947] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.947] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0039.947] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0039.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.947] lstrlenA (lpString="\\") returned 1 [0039.947] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.947] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.947] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.947] lstrlenA (lpString="ar") returned 2 [0039.947] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.947] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.947] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0039.947] LocalFree (hMem=0x6774e0) returned 0x0 [0039.947] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned 125 [0039.947] lstrlenA (lpString="\\*.*") returned 4 [0039.947] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.947] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0039.947] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*.*" [0039.947] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0039.948] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.948] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.948] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.948] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.948] LocalFree (hMem=0x6776f0) returned 0x0 [0039.948] LocalFree (hMem=0x6775e8) returned 0x0 [0039.948] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0039.948] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0039.948] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.948] lstrlenA (lpString="\\") returned 1 [0039.948] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.948] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.948] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.948] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.948] lstrlenA (lpString="bg") returned 2 [0039.948] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.948] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.948] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0039.948] LocalFree (hMem=0x6774e0) returned 0x0 [0039.948] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned 125 [0039.948] lstrlenA (lpString="\\*.*") returned 4 [0039.948] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.948] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0039.948] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*.*" [0039.948] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0039.948] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.949] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.949] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.949] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.949] LocalFree (hMem=0x6776f0) returned 0x0 [0039.949] LocalFree (hMem=0x6775e8) returned 0x0 [0039.949] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0039.949] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0039.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.949] lstrlenA (lpString="\\") returned 1 [0039.949] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.949] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.949] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.949] lstrlenA (lpString="ca") returned 2 [0039.949] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.949] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.949] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0039.949] LocalFree (hMem=0x6774e0) returned 0x0 [0039.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned 125 [0039.949] lstrlenA (lpString="\\*.*") returned 4 [0039.949] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.949] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0039.949] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*.*" [0039.950] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.950] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.950] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.950] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.950] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.950] LocalFree (hMem=0x6776f0) returned 0x0 [0039.950] LocalFree (hMem=0x6775e8) returned 0x0 [0039.950] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0039.950] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0039.950] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.950] lstrlenA (lpString="\\") returned 1 [0039.950] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.950] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.950] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.950] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.950] lstrlenA (lpString="cs") returned 2 [0039.951] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.951] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.951] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0039.951] LocalFree (hMem=0x6774e0) returned 0x0 [0039.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned 125 [0039.951] lstrlenA (lpString="\\*.*") returned 4 [0039.951] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.951] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0039.951] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*.*" [0039.951] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901e8 [0039.951] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.951] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.951] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.951] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.951] LocalFree (hMem=0x6776f0) returned 0x0 [0039.951] LocalFree (hMem=0x6775e8) returned 0x0 [0039.952] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0039.952] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0039.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.952] lstrlenA (lpString="\\") returned 1 [0039.952] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.952] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.952] lstrlenA (lpString="da") returned 2 [0039.952] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.952] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0039.952] LocalFree (hMem=0x6774e0) returned 0x0 [0039.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned 125 [0039.952] lstrlenA (lpString="\\*.*") returned 4 [0039.952] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.952] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0039.952] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*.*" [0039.952] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0039.952] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.953] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.953] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.953] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.953] LocalFree (hMem=0x6776f0) returned 0x0 [0039.953] LocalFree (hMem=0x6775e8) returned 0x0 [0039.953] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0039.953] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0039.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.953] lstrlenA (lpString="\\") returned 1 [0039.953] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.953] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.953] lstrlenA (lpString="de") returned 2 [0039.953] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.953] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0039.953] LocalFree (hMem=0x6774e0) returned 0x0 [0039.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned 125 [0039.953] lstrlenA (lpString="\\*.*") returned 4 [0039.953] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.953] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0039.953] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*.*" [0039.953] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.954] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.954] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.954] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.954] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.954] LocalFree (hMem=0x6776f0) returned 0x0 [0039.954] LocalFree (hMem=0x6775e8) returned 0x0 [0039.954] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0039.954] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0039.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.954] lstrlenA (lpString="\\") returned 1 [0039.954] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.954] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.954] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.954] lstrlenA (lpString="el") returned 2 [0039.954] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.954] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.954] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0039.954] LocalFree (hMem=0x6774e0) returned 0x0 [0039.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned 125 [0039.954] lstrlenA (lpString="\\*.*") returned 4 [0039.954] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.955] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0039.955] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*.*" [0039.955] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0039.955] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.955] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.955] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.955] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.955] LocalFree (hMem=0x6776f0) returned 0x0 [0039.955] LocalFree (hMem=0x6775e8) returned 0x0 [0039.955] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0039.955] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0039.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.955] lstrlenA (lpString="\\") returned 1 [0039.955] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.956] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.956] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.956] lstrlenA (lpString="en") returned 2 [0039.956] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.956] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.956] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0039.956] LocalFree (hMem=0x6774e0) returned 0x0 [0039.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned 125 [0039.956] lstrlenA (lpString="\\*.*") returned 4 [0039.956] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.956] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0039.956] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*.*" [0039.956] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0039.956] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.956] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.956] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.956] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.956] LocalFree (hMem=0x6776f0) returned 0x0 [0039.956] LocalFree (hMem=0x6775e8) returned 0x0 [0039.956] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0039.956] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0039.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.956] lstrlenA (lpString="\\") returned 1 [0039.956] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.956] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.956] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.956] lstrlenA (lpString="es") returned 2 [0039.956] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.956] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.956] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0039.957] LocalFree (hMem=0x6774e0) returned 0x0 [0039.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned 125 [0039.957] lstrlenA (lpString="\\*.*") returned 4 [0039.957] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.957] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0039.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*.*" [0039.957] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.957] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.957] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.957] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.957] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.957] LocalFree (hMem=0x6776f0) returned 0x0 [0039.957] LocalFree (hMem=0x6775e8) returned 0x0 [0039.957] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0039.957] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0039.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.957] lstrlenA (lpString="\\") returned 1 [0039.957] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.957] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.957] lstrlenA (lpString="fi") returned 2 [0039.957] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.957] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.957] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0039.957] LocalFree (hMem=0x6774e0) returned 0x0 [0039.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned 125 [0039.958] lstrlenA (lpString="\\*.*") returned 4 [0039.958] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.958] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0039.958] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*.*" [0039.958] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.958] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.958] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.958] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.958] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.958] LocalFree (hMem=0x6776f0) returned 0x0 [0039.958] LocalFree (hMem=0x6775e8) returned 0x0 [0039.958] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0039.958] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0039.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.958] lstrlenA (lpString="\\") returned 1 [0039.958] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.958] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.958] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.958] lstrlenA (lpString="fil") returned 3 [0039.959] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0039.959] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.959] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0039.959] LocalFree (hMem=0x6774e0) returned 0x0 [0039.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned 126 [0039.959] lstrlenA (lpString="\\*.*") returned 4 [0039.959] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0039.959] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0039.959] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*.*" [0039.959] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0039.959] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.959] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.959] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.959] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.959] LocalFree (hMem=0x6776f0) returned 0x0 [0039.960] LocalFree (hMem=0x6775e8) returned 0x0 [0039.960] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0039.960] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0039.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.960] lstrlenA (lpString="\\") returned 1 [0039.960] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.960] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.960] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.960] lstrlenA (lpString="fr") returned 2 [0039.960] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.960] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.960] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0039.960] LocalFree (hMem=0x6774e0) returned 0x0 [0039.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned 125 [0039.960] lstrlenA (lpString="\\*.*") returned 4 [0039.960] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.960] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0039.960] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*.*" [0039.960] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0039.960] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.960] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.960] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.960] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.960] LocalFree (hMem=0x6776f0) returned 0x0 [0039.960] LocalFree (hMem=0x6775e8) returned 0x0 [0039.960] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0039.960] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0039.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.960] lstrlenA (lpString="\\") returned 1 [0039.960] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.961] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.961] lstrlenA (lpString="hi") returned 2 [0039.961] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.961] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0039.961] LocalFree (hMem=0x6774e0) returned 0x0 [0039.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned 125 [0039.961] lstrlenA (lpString="\\*.*") returned 4 [0039.961] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.961] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0039.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*.*" [0039.961] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0039.961] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.961] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.961] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.961] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.961] LocalFree (hMem=0x6776f0) returned 0x0 [0039.961] LocalFree (hMem=0x6775e8) returned 0x0 [0039.961] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0039.961] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0039.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.961] lstrlenA (lpString="\\") returned 1 [0039.961] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.961] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.961] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.961] lstrlenA (lpString="hr") returned 2 [0039.961] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.961] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0039.962] LocalFree (hMem=0x6774e0) returned 0x0 [0039.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned 125 [0039.962] lstrlenA (lpString="\\*.*") returned 4 [0039.962] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.962] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0039.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*.*" [0039.962] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.962] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.962] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.962] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.962] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.962] LocalFree (hMem=0x6776f0) returned 0x0 [0039.962] LocalFree (hMem=0x6775e8) returned 0x0 [0039.962] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0039.962] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0039.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.962] lstrlenA (lpString="\\") returned 1 [0039.962] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.962] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.962] lstrlenA (lpString="hu") returned 2 [0039.962] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.962] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0039.962] LocalFree (hMem=0x6774e0) returned 0x0 [0039.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned 125 [0039.962] lstrlenA (lpString="\\*.*") returned 4 [0039.962] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.962] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0039.962] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*.*" [0039.963] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0039.963] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.963] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.963] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.963] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.963] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.963] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.963] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.963] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0039.963] LocalFree (hMem=0x6776f0) returned 0x0 [0039.963] LocalFree (hMem=0x6775e8) returned 0x0 [0039.963] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.963] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0039.963] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0039.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.963] lstrlenA (lpString="\\") returned 1 [0039.963] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.963] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.963] lstrlenA (lpString="id") returned 2 [0039.963] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.963] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0039.963] LocalFree (hMem=0x6774e0) returned 0x0 [0039.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned 125 [0039.963] lstrlenA (lpString="\\*.*") returned 4 [0039.963] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.963] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0039.963] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*.*" [0039.964] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.964] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.964] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.964] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.964] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.964] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.964] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.964] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.964] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.964] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0039.964] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0039.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.964] lstrlenA (lpString="\\") returned 1 [0039.964] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.964] lstrlenA (lpString="it") returned 2 [0039.964] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned 125 [0039.964] lstrlenA (lpString="\\*.*") returned 4 [0039.964] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.964] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0039.973] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.973] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.973] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.973] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.973] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.973] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.973] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.973] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0039.974] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.974] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0039.974] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0039.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.974] lstrlenA (lpString="\\") returned 1 [0039.974] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.974] lstrlenA (lpString="ja") returned 2 [0039.974] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned 125 [0039.974] lstrlenA (lpString="\\*.*") returned 4 [0039.974] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.974] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.974] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.974] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.974] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.974] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.974] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.974] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.974] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.974] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.974] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.974] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0039.974] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0039.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.974] lstrlenA (lpString="\\") returned 1 [0039.974] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.974] lstrlenA (lpString="ko") returned 2 [0039.974] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned 125 [0039.975] lstrlenA (lpString="\\*.*") returned 4 [0039.975] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.975] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0039.975] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.975] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.975] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.975] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.975] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.975] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.975] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.975] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0039.975] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.975] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0039.975] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0039.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.975] lstrlenA (lpString="\\") returned 1 [0039.975] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.975] lstrlenA (lpString="lt") returned 2 [0039.975] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned 125 [0039.975] lstrlenA (lpString="\\*.*") returned 4 [0039.975] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.975] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0039.976] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.976] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.976] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.976] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.976] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.976] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.976] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.976] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0039.976] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.976] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0039.976] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0039.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.976] lstrlenA (lpString="\\") returned 1 [0039.976] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.976] lstrlenA (lpString="lv") returned 2 [0039.976] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned 125 [0039.976] lstrlenA (lpString="\\*.*") returned 4 [0039.976] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.976] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.976] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.976] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.976] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.976] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.976] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.976] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.976] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.976] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.977] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.977] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0039.977] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0039.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.977] lstrlenA (lpString="\\") returned 1 [0039.977] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.977] lstrlenA (lpString="nl") returned 2 [0039.977] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned 125 [0039.977] lstrlenA (lpString="\\*.*") returned 4 [0039.977] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.977] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0039.977] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.977] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.977] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.977] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.977] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.977] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.977] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.977] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0039.977] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.977] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0039.977] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0039.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.977] lstrlenA (lpString="\\") returned 1 [0039.977] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.977] lstrlenA (lpString="no") returned 2 [0039.978] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned 125 [0039.978] lstrlenA (lpString="\\*.*") returned 4 [0039.978] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.978] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.978] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.978] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.978] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.978] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.978] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.978] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.978] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.978] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.978] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.978] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0039.978] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0039.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.978] lstrlenA (lpString="\\") returned 1 [0039.978] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.978] lstrlenA (lpString="pl") returned 2 [0039.978] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned 125 [0039.978] lstrlenA (lpString="\\*.*") returned 4 [0039.978] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.978] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0039.978] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.979] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.979] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.979] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.979] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.979] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.979] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.979] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0039.979] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.979] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0039.979] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0039.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.979] lstrlenA (lpString="\\") returned 1 [0039.979] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.979] lstrlenA (lpString="pt_BR") returned 5 [0039.979] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.979] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned 128 [0039.979] lstrlenA (lpString="\\*.*") returned 4 [0039.979] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.979] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0039.980] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.980] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.980] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.980] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.980] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.980] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.980] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0039.980] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.980] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0039.980] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0039.980] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.980] lstrlenA (lpString="\\") returned 1 [0039.980] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.980] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.980] lstrlenA (lpString="pt_PT") returned 5 [0039.980] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0039.980] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned 128 [0039.980] lstrlenA (lpString="\\*.*") returned 4 [0039.980] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0039.980] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0039.980] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.980] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.980] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.980] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.981] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.981] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.981] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0039.985] LocalFree (hMem=0x6776f8) returned 0x0 [0039.985] LocalFree (hMem=0x6775e8) returned 0x0 [0039.985] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.985] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0039.985] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0039.985] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.985] lstrlenA (lpString="\\") returned 1 [0039.985] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.985] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.985] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.985] lstrlenA (lpString="ro") returned 2 [0039.985] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.985] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0039.985] LocalFree (hMem=0x6774e0) returned 0x0 [0039.985] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned 125 [0039.985] lstrlenA (lpString="\\*.*") returned 4 [0039.985] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.985] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0039.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*.*" [0039.993] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0039.994] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0039.994] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.995] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0039.996] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0039.996] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0039.996] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0039.996] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0039.996] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0039.997] LocalFree (hMem=0x6776f0) returned 0x0 [0039.997] LocalFree (hMem=0x6775e8) returned 0x0 [0039.997] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0039.997] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0039.997] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0039.997] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0039.997] lstrlenA (lpString="\\") returned 1 [0039.997] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0039.997] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0039.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.998] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0039.998] lstrlenA (lpString="ru") returned 2 [0039.998] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0039.998] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0039.998] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0039.998] LocalFree (hMem=0x6774e0) returned 0x0 [0039.999] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned 125 [0039.999] lstrlenA (lpString="\\*.*") returned 4 [0039.999] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0039.999] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0039.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*.*" [0040.000] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.000] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.001] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.002] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.002] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.002] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.002] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.002] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.003] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.003] LocalFree (hMem=0x6776f0) returned 0x0 [0040.003] LocalFree (hMem=0x6775e8) returned 0x0 [0040.003] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.003] lstrcmpiA (lpString1=".", lpString2="se") returned -1 [0040.004] lstrcmpiA (lpString1="..", lpString2="se") returned -1 [0040.004] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.004] lstrlenA (lpString="\\") returned 1 [0040.004] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.005] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.005] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.005] lstrlenA (lpString="se") returned 2 [0040.005] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.006] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="se" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0040.006] LocalFree (hMem=0x6774e0) returned 0x0 [0040.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned 125 [0040.007] lstrlenA (lpString="\\*.*") returned 4 [0040.008] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.008] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0040.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*.*" [0040.008] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.009] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.009] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.009] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.009] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.009] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.009] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.010] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.010] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.011] LocalFree (hMem=0x6776f0) returned 0x0 [0040.011] LocalFree (hMem=0x6775e8) returned 0x0 [0040.011] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.011] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0040.011] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0040.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.011] lstrlenA (lpString="\\") returned 1 [0040.011] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.011] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.012] lstrlenA (lpString="sk") returned 2 [0040.012] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.012] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0040.012] LocalFree (hMem=0x6774e0) returned 0x0 [0040.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned 125 [0040.012] lstrlenA (lpString="\\*.*") returned 4 [0040.012] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.013] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0040.013] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*.*" [0040.013] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0040.015] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.015] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.015] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.015] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.015] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.015] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.015] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.015] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0040.016] LocalFree (hMem=0x6776f0) returned 0x0 [0040.016] LocalFree (hMem=0x6775e8) returned 0x0 [0040.016] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.016] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0040.016] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0040.016] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.016] lstrlenA (lpString="\\") returned 1 [0040.016] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.017] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.017] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.017] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.017] lstrlenA (lpString="sl") returned 2 [0040.017] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.017] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.017] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0040.017] LocalFree (hMem=0x6774e0) returned 0x0 [0040.018] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned 125 [0040.018] lstrlenA (lpString="\\*.*") returned 4 [0040.018] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.018] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0040.018] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*.*" [0040.018] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0040.019] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.019] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.019] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.019] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.019] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.020] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.020] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.020] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0040.020] LocalFree (hMem=0x6776f0) returned 0x0 [0040.021] LocalFree (hMem=0x6775e8) returned 0x0 [0040.021] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.021] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0040.021] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0040.021] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.021] lstrlenA (lpString="\\") returned 1 [0040.021] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.021] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.022] lstrlenA (lpString="sr") returned 2 [0040.022] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0040.022] LocalFree (hMem=0x6774e0) returned 0x0 [0040.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned 125 [0040.023] lstrlenA (lpString="\\*.*") returned 4 [0040.023] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0040.023] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*.*" [0040.024] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0040.024] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.025] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.025] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.025] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.025] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.025] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.025] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.026] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0040.027] LocalFree (hMem=0x6776f0) returned 0x0 [0040.027] LocalFree (hMem=0x6775e8) returned 0x0 [0040.027] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.027] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0040.027] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0040.028] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.028] lstrlenA (lpString="\\") returned 1 [0040.028] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.028] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.029] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.029] lstrlenA (lpString="th") returned 2 [0040.029] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.029] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0040.029] LocalFree (hMem=0x6774e0) returned 0x0 [0040.029] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned 125 [0040.029] lstrlenA (lpString="\\*.*") returned 4 [0040.029] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0040.029] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*.*" [0040.030] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0040.031] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.031] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.032] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.032] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.032] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.032] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.032] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.032] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.033] LocalFree (hMem=0x6776f0) returned 0x0 [0040.033] LocalFree (hMem=0x6775e8) returned 0x0 [0040.033] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.033] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0040.033] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0040.033] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.034] lstrlenA (lpString="\\") returned 1 [0040.034] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.034] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.034] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.035] lstrlenA (lpString="tr") returned 2 [0040.035] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.035] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0040.035] LocalFree (hMem=0x6774e0) returned 0x0 [0040.035] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned 125 [0040.035] lstrlenA (lpString="\\*.*") returned 4 [0040.036] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0040.036] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*.*" [0040.036] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0040.038] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.038] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.038] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.038] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.038] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.038] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.038] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.038] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0040.039] LocalFree (hMem=0x6776f0) returned 0x0 [0040.039] LocalFree (hMem=0x6775e8) returned 0x0 [0040.039] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.039] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0040.040] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0040.040] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.040] lstrlenA (lpString="\\") returned 1 [0040.040] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.040] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.041] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.041] lstrlenA (lpString="uk") returned 2 [0040.041] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.041] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.041] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0040.041] LocalFree (hMem=0x6774e0) returned 0x0 [0040.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned 125 [0040.051] lstrlenA (lpString="\\*.*") returned 4 [0040.051] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.051] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0040.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*.*" [0040.052] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.064] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.065] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.065] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.065] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.066] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.066] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.066] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.067] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.068] LocalFree (hMem=0x6776f0) returned 0x0 [0040.068] LocalFree (hMem=0x6775e8) returned 0x0 [0040.068] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.069] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0040.069] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0040.070] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.070] lstrlenA (lpString="\\") returned 1 [0040.070] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.070] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.071] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.071] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.071] lstrlenA (lpString="vi") returned 2 [0040.071] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.071] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.072] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0040.072] LocalFree (hMem=0x6774e0) returned 0x0 [0040.072] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned 125 [0040.072] lstrlenA (lpString="\\*.*") returned 4 [0040.072] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.074] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0040.074] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*.*" [0040.074] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0040.076] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.077] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.077] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.078] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.078] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.078] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.078] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.079] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0040.081] LocalFree (hMem=0x6776f0) returned 0x0 [0040.081] LocalFree (hMem=0x6775e8) returned 0x0 [0040.081] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.081] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0040.082] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0040.082] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.083] lstrlenA (lpString="\\") returned 1 [0040.083] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.083] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.083] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.083] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.083] lstrlenA (lpString="zh_CN") returned 5 [0040.084] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.084] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.084] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0040.084] LocalFree (hMem=0x6774e0) returned 0x0 [0040.086] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned 128 [0040.086] lstrlenA (lpString="\\*.*") returned 4 [0040.086] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.086] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0040.087] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*.*" [0040.087] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0040.089] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.089] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.089] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.090] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.091] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.091] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.092] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.092] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0040.092] LocalFree (hMem=0x6776f8) returned 0x0 [0040.093] LocalFree (hMem=0x6775e8) returned 0x0 [0040.093] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.093] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0040.093] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0040.093] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 122 [0040.094] lstrlenA (lpString="\\") returned 1 [0040.094] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.094] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0040.094] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.094] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned 123 [0040.094] lstrlenA (lpString="zh_TW") returned 5 [0040.094] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.095] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0040.095] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0040.095] LocalFree (hMem=0x6774e0) returned 0x0 [0040.095] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned 128 [0040.095] lstrlenA (lpString="\\*.*") returned 4 [0040.095] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.095] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0040.095] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*.*" [0040.095] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.095] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.095] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.095] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.095] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.095] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.095] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.095] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.095] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.095] LocalFree (hMem=0x6776f8) returned 0x0 [0040.095] LocalFree (hMem=0x6775e8) returned 0x0 [0040.095] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.095] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0040.095] LocalFree (hMem=0x6773d8) returned 0x0 [0040.095] LocalFree (hMem=0x6772d0) returned 0x0 [0040.096] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.096] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0040.096] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0040.096] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned 113 [0040.096] lstrlenA (lpString="\\") returned 1 [0040.096] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6646c8 [0040.096] lstrcpyA (in: lpString1=0x6646c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0040.096] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0040.096] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned 114 [0040.096] lstrlenA (lpString="_metadata") returned 9 [0040.096] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0040.096] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0040.096] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0040.096] LocalFree (hMem=0x6646c8) returned 0x0 [0040.096] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned 123 [0040.096] lstrlenA (lpString="\\*.*") returned 4 [0040.096] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0040.096] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0040.096] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*.*" [0040.096] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6904e8 [0040.097] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.097] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.097] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.097] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.097] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.097] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0040.097] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.097] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0040.097] LocalFree (hMem=0x6773d8) returned 0x0 [0040.098] LocalFree (hMem=0x6772d0) returned 0x0 [0040.098] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0040.098] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0040.098] LocalFree (hMem=0x664ac8) returned 0x0 [0040.098] LocalFree (hMem=0x664bc8) returned 0x0 [0040.098] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.098] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.098] LocalFree (hMem=0x6771d8) returned 0x0 [0040.098] LocalFree (hMem=0x69e108) returned 0x0 [0040.098] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.098] lstrcmpiA (lpString1=".", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned -1 [0040.098] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0040.098] lstrlenA (lpString="\\") returned 1 [0040.098] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0040.098] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.098] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.098] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0040.098] lstrlenA (lpString="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 32 [0040.098] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0040.098] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.098] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" [0040.098] LocalFree (hMem=0x69e030) returned 0x0 [0040.098] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 107 [0040.098] lstrlenA (lpString="\\*.*") returned 4 [0040.098] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0040.098] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" [0040.098] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*" [0040.098] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6900a8 [0040.099] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.099] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.099] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 107 [0040.099] lstrlenA (lpString="\\") returned 1 [0040.099] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0040.099] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" [0040.099] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\" [0040.099] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\") returned 108 [0040.099] lstrlenA (lpString="6017.605.1.4_0") returned 14 [0040.099] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6773c8 [0040.099] lstrcpyA (in: lpString1=0x6773c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\" [0040.099] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpString2="6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.099] LocalFree (hMem=0x6772d0) returned 0x0 [0040.099] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned 122 [0040.099] lstrcpyA (in: lpString1=0x6774d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.099] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\*.*" [0040.099] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x68ff68 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="angular.js", lpSrch="Web Data") returned 0x0 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="background_script.js", lpSrch="Web Data") returned 0x0 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="cast_game_sender.js", lpSrch="Web Data") returned 0x0 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="cast_route_details.html", lpSrch="Web Data") returned 0x0 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="cast_route_details.js", lpSrch="Web Data") returned 0x0 [0040.101] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.101] StrStrIA (lpFirst="cast_sender.js", lpSrch="Web Data") returned 0x0 [0040.102] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.102] lstrcpyA (in: lpString1=0x6775d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.102] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.102] lstrcpyA (in: lpString1=0x6776e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.102] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\", lpString2="cast_setup" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup" [0040.102] LocalFree (hMem=0x6775d8) returned 0x0 [0040.102] lstrcpyA (in: lpString1=0x675920, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup" [0040.102] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup\\*.*" [0040.102] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cast_setup\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690128 [0040.103] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.103] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.103] StrStrIA (lpFirst="cast_app.js", lpSrch="Web Data") returned 0x0 [0040.103] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.103] StrStrIA (lpFirst="cast_app_min.css", lpSrch="Web Data") returned 0x0 [0040.103] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.103] StrStrIA (lpFirst="cast_app_redirect.js", lpSrch="Web Data") returned 0x0 [0040.103] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.104] StrStrIA (lpFirst="chromecast_logo_grey.png", lpSrch="Web Data") returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.104] StrStrIA (lpFirst="devices.html", lpSrch="Web Data") returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.104] StrStrIA (lpFirst="index.html", lpSrch="Web Data") returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.104] StrStrIA (lpFirst="offers.html", lpSrch="Web Data") returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.104] StrStrIA (lpFirst="setup.html", lpSrch="Web Data") returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.104] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.104] LocalFree (hMem=0x675920) returned 0x0 [0040.104] LocalFree (hMem=0x6776e0) returned 0x0 [0040.104] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.104] lstrcpyA (in: lpString1=0x6775d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.104] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.104] lstrcpyA (in: lpString1=0x674e30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.104] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\", lpString2="cloud_route_details" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details" [0040.104] LocalFree (hMem=0x6775d8) returned 0x0 [0040.104] lstrcpyA (in: lpString1=0x6775d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details" [0040.104] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details\\*.*" [0040.105] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\cloud_route_details\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6901a8 [0040.117] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.117] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.118] StrStrIA (lpFirst="view.html", lpSrch="Web Data") returned 0x0 [0040.118] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.118] StrStrIA (lpFirst="view.js", lpSrch="Web Data") returned 0x0 [0040.118] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.119] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.119] LocalFree (hMem=0x6775d8) returned 0x0 [0040.119] LocalFree (hMem=0x674e30) returned 0x0 [0040.119] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.120] StrStrIA (lpFirst="common.js", lpSrch="Web Data") returned 0x0 [0040.120] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.120] StrStrIA (lpFirst="feedback.css", lpSrch="Web Data") returned 0x0 [0040.120] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.121] StrStrIA (lpFirst="feedback.html", lpSrch="Web Data") returned 0x0 [0040.121] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.121] StrStrIA (lpFirst="feedback_script.js", lpSrch="Web Data") returned 0x0 [0040.122] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.122] StrStrIA (lpFirst="manifest.json", lpSrch="Web Data") returned 0x0 [0040.122] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.122] StrStrIA (lpFirst="material_css_min.css", lpSrch="Web Data") returned 0x0 [0040.122] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.123] StrStrIA (lpFirst="mirroring_cast_streaming.js", lpSrch="Web Data") returned 0x0 [0040.124] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.124] StrStrIA (lpFirst="mirroring_common.js", lpSrch="Web Data") returned 0x0 [0040.124] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.124] StrStrIA (lpFirst="mirroring_hangouts.js", lpSrch="Web Data") returned 0x0 [0040.124] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.125] StrStrIA (lpFirst="mirroring_webrtc.js", lpSrch="Web Data") returned 0x0 [0040.125] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.125] lstrcpyA (in: lpString1=0x6775d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.125] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.125] lstrcpyA (in: lpString1=0x6776e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.126] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.126] LocalFree (hMem=0x6775d8) returned 0x0 [0040.127] lstrcpyA (in: lpString1=0x6777f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.127] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\*.*" [0040.127] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6906a8 [0040.136] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.139] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.140] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.140] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.141] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.142] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="am" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am" [0040.142] LocalFree (hMem=0x677900) returned 0x0 [0040.142] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am" [0040.143] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am\\*.*" [0040.143] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\am\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.146] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.147] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.147] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.147] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.148] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.149] LocalFree (hMem=0x674d18) returned 0x0 [0040.149] LocalFree (hMem=0x677a10) returned 0x0 [0040.149] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.149] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.149] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.150] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.150] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar" [0040.150] LocalFree (hMem=0x677900) returned 0x0 [0040.150] lstrcpyA (in: lpString1=0x675060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar" [0040.150] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar\\*.*" [0040.151] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.155] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.155] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.156] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.156] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.156] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.156] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.157] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.157] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.158] LocalFree (hMem=0x675060) returned 0x0 [0040.158] LocalFree (hMem=0x677a10) returned 0x0 [0040.158] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.158] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0040.158] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0040.159] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.159] lstrlenA (lpString="\\") returned 1 [0040.159] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.159] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.159] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.160] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.161] lstrlenA (lpString="bg") returned 2 [0040.161] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.161] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg" [0040.161] LocalFree (hMem=0x677900) returned 0x0 [0040.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg") returned 134 [0040.162] lstrlenA (lpString="\\*.*") returned 4 [0040.162] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674f48 [0040.162] lstrcpyA (in: lpString1=0x674f48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg" [0040.162] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg\\*.*" [0040.163] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.165] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.165] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.166] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.166] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.166] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.167] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.167] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.168] LocalFree (hMem=0x674f48) returned 0x0 [0040.168] LocalFree (hMem=0x677a10) returned 0x0 [0040.168] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.168] lstrcmpiA (lpString1=".", lpString2="bn") returned -1 [0040.168] lstrcmpiA (lpString1="..", lpString2="bn") returned -1 [0040.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.169] lstrlenA (lpString="\\") returned 1 [0040.169] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.169] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.170] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.170] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.170] lstrlenA (lpString="bn") returned 2 [0040.170] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.226] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.226] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="bn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn" [0040.226] LocalFree (hMem=0x677900) returned 0x0 [0040.226] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn") returned 134 [0040.227] lstrlenA (lpString="\\*.*") returned 4 [0040.227] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6754c0 [0040.227] lstrcpyA (in: lpString1=0x6754c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn" [0040.227] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn\\*.*" [0040.227] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\bn\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.230] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.230] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.230] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.231] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.231] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.231] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.231] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.231] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.232] LocalFree (hMem=0x6754c0) returned 0x0 [0040.233] LocalFree (hMem=0x677a10) returned 0x0 [0040.233] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.233] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0040.233] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0040.233] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.233] lstrlenA (lpString="\\") returned 1 [0040.233] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.233] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.234] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.234] lstrlenA (lpString="ca") returned 2 [0040.234] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.234] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.235] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca" [0040.235] LocalFree (hMem=0x677900) returned 0x0 [0040.235] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca") returned 134 [0040.236] lstrlenA (lpString="\\*.*") returned 4 [0040.236] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675290 [0040.236] lstrcpyA (in: lpString1=0x675290, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca" [0040.236] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca\\*.*" [0040.237] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.238] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.238] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.238] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.238] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.238] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.239] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.240] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.240] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.244] LocalFree (hMem=0x675290) returned 0x0 [0040.244] LocalFree (hMem=0x677a10) returned 0x0 [0040.244] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.244] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0040.244] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0040.244] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.244] lstrlenA (lpString="\\") returned 1 [0040.244] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.245] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.245] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.245] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.245] lstrlenA (lpString="cs") returned 2 [0040.245] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.245] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.245] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs" [0040.245] LocalFree (hMem=0x677900) returned 0x0 [0040.246] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs") returned 134 [0040.246] lstrlenA (lpString="\\*.*") returned 4 [0040.246] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675178 [0040.246] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs" [0040.246] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs\\*.*" [0040.246] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.247] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.247] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.247] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.247] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.247] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.247] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.247] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.247] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.248] LocalFree (hMem=0x675178) returned 0x0 [0040.248] LocalFree (hMem=0x677a10) returned 0x0 [0040.248] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.248] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0040.248] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0040.248] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.248] lstrlenA (lpString="\\") returned 1 [0040.248] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.248] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.248] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.248] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.248] lstrlenA (lpString="da") returned 2 [0040.248] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.248] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.248] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da" [0040.248] LocalFree (hMem=0x677900) returned 0x0 [0040.248] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da") returned 134 [0040.248] lstrlenA (lpString="\\*.*") returned 4 [0040.248] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675060 [0040.248] lstrcpyA (in: lpString1=0x675060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da" [0040.248] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da\\*.*" [0040.248] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.248] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.248] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.248] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.248] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.249] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.249] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.249] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.249] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.249] LocalFree (hMem=0x675060) returned 0x0 [0040.249] LocalFree (hMem=0x677a10) returned 0x0 [0040.249] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.249] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0040.249] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0040.249] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.249] lstrlenA (lpString="\\") returned 1 [0040.249] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.249] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.249] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.249] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.249] lstrlenA (lpString="de") returned 2 [0040.249] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.249] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.249] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de" [0040.249] LocalFree (hMem=0x677900) returned 0x0 [0040.249] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de") returned 134 [0040.249] lstrlenA (lpString="\\*.*") returned 4 [0040.249] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.249] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de" [0040.249] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de\\*.*" [0040.250] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0040.251] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.251] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.251] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.251] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.251] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.251] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.251] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.251] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.251] LocalFree (hMem=0x6753a8) returned 0x0 [0040.251] LocalFree (hMem=0x677a10) returned 0x0 [0040.252] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.252] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0040.252] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0040.252] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.252] lstrlenA (lpString="\\") returned 1 [0040.252] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.252] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.252] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.252] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.252] lstrlenA (lpString="el") returned 2 [0040.252] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.252] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.252] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el" [0040.252] LocalFree (hMem=0x677900) returned 0x0 [0040.252] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el") returned 134 [0040.252] lstrlenA (lpString="\\*.*") returned 4 [0040.252] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675178 [0040.252] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el" [0040.252] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el\\*.*" [0040.252] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.252] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.252] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.252] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.252] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.252] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.252] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.252] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.252] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.252] LocalFree (hMem=0x675178) returned 0x0 [0040.252] LocalFree (hMem=0x677a10) returned 0x0 [0040.252] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.252] lstrcmpiA (lpString1=".", lpString2="en") returned -1 [0040.252] lstrcmpiA (lpString1="..", lpString2="en") returned -1 [0040.253] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.253] lstrlenA (lpString="\\") returned 1 [0040.253] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.253] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.253] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.253] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.253] lstrlenA (lpString="en") returned 2 [0040.253] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.253] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.253] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en" [0040.253] LocalFree (hMem=0x677900) returned 0x0 [0040.253] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en") returned 134 [0040.253] lstrlenA (lpString="\\*.*") returned 4 [0040.253] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674f48 [0040.253] lstrcpyA (in: lpString1=0x674f48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en" [0040.253] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en\\*.*" [0040.253] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\en\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902a8 [0040.254] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.254] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.254] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.254] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.254] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.254] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.254] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.254] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0040.254] LocalFree (hMem=0x674f48) returned 0x0 [0040.254] LocalFree (hMem=0x677a10) returned 0x0 [0040.254] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.254] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0040.254] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0040.254] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.254] lstrlenA (lpString="\\") returned 1 [0040.254] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.254] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.254] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.254] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.254] lstrlenA (lpString="es") returned 2 [0040.254] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.254] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.254] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es" [0040.254] LocalFree (hMem=0x677900) returned 0x0 [0040.254] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es") returned 134 [0040.254] lstrlenA (lpString="\\*.*") returned 4 [0040.254] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675b50 [0040.254] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es" [0040.254] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es\\*.*" [0040.254] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.255] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.255] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.255] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.255] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.255] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.255] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.255] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.255] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.255] LocalFree (hMem=0x675b50) returned 0x0 [0040.255] LocalFree (hMem=0x677a10) returned 0x0 [0040.255] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.255] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0040.255] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0040.255] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.255] lstrlenA (lpString="\\") returned 1 [0040.255] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.255] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.255] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.255] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.255] lstrlenA (lpString="et") returned 2 [0040.255] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.255] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.255] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et" [0040.255] LocalFree (hMem=0x677900) returned 0x0 [0040.255] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et") returned 134 [0040.255] lstrlenA (lpString="\\*.*") returned 4 [0040.255] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675a38 [0040.255] lstrcpyA (in: lpString1=0x675a38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et" [0040.255] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et\\*.*" [0040.255] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.256] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.256] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.256] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.256] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.257] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.257] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.257] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.257] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.259] LocalFree (hMem=0x675a38) returned 0x0 [0040.259] LocalFree (hMem=0x677a10) returned 0x0 [0040.259] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.259] lstrcmpiA (lpString1=".", lpString2="fa") returned -1 [0040.259] lstrcmpiA (lpString1="..", lpString2="fa") returned -1 [0040.259] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.259] lstrlenA (lpString="\\") returned 1 [0040.259] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.259] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.259] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.259] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.259] lstrlenA (lpString="fa") returned 2 [0040.259] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.259] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.259] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="fa" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa" [0040.259] LocalFree (hMem=0x677900) returned 0x0 [0040.259] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa") returned 134 [0040.259] lstrlenA (lpString="\\*.*") returned 4 [0040.259] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.259] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa" [0040.259] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa\\*.*" [0040.259] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fa\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.260] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.260] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.260] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.260] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.260] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.260] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.260] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.260] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.260] LocalFree (hMem=0x6756f0) returned 0x0 [0040.260] LocalFree (hMem=0x677a10) returned 0x0 [0040.260] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.260] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0040.260] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0040.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.260] lstrlenA (lpString="\\") returned 1 [0040.260] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.260] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.260] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.260] lstrlenA (lpString="fi") returned 2 [0040.260] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.260] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.260] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi" [0040.260] LocalFree (hMem=0x677900) returned 0x0 [0040.260] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi") returned 134 [0040.260] lstrlenA (lpString="\\*.*") returned 4 [0040.260] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674d18 [0040.260] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi" [0040.260] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi\\*.*" [0040.260] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0040.261] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.261] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.261] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.261] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.261] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.261] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.261] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.261] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0040.261] LocalFree (hMem=0x674d18) returned 0x0 [0040.262] LocalFree (hMem=0x677a10) returned 0x0 [0040.262] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.262] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0040.262] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0040.262] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.262] lstrlenA (lpString="\\") returned 1 [0040.262] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.262] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.262] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.262] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.262] lstrlenA (lpString="fil") returned 3 [0040.262] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x677a10 [0040.262] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.262] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil" [0040.262] LocalFree (hMem=0x677900) returned 0x0 [0040.262] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil") returned 135 [0040.262] lstrlenA (lpString="\\*.*") returned 4 [0040.262] LocalAlloc (uFlags=0x40, uBytes=0x10c) returned 0x675b50 [0040.262] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil" [0040.262] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil\\*.*" [0040.262] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.262] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.262] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.262] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.262] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.262] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.262] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.262] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.262] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.262] LocalFree (hMem=0x675b50) returned 0x0 [0040.262] LocalFree (hMem=0x677a10) returned 0x0 [0040.262] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.262] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0040.263] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0040.263] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.263] lstrlenA (lpString="\\") returned 1 [0040.263] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.263] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.263] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.263] lstrlenA (lpString="fr") returned 2 [0040.263] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.263] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr" [0040.263] LocalFree (hMem=0x677900) returned 0x0 [0040.263] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr") returned 134 [0040.263] lstrlenA (lpString="\\*.*") returned 4 [0040.263] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.263] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr" [0040.263] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr\\*.*" [0040.263] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.264] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.264] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.264] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.264] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.264] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.264] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.264] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.264] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.264] LocalFree (hMem=0x6756f0) returned 0x0 [0040.264] LocalFree (hMem=0x677a10) returned 0x0 [0040.264] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.264] lstrcmpiA (lpString1=".", lpString2="gu") returned -1 [0040.264] lstrcmpiA (lpString1="..", lpString2="gu") returned -1 [0040.264] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.264] lstrlenA (lpString="\\") returned 1 [0040.264] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.264] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.264] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.264] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.264] lstrlenA (lpString="gu") returned 2 [0040.264] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.264] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.264] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="gu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu" [0040.264] LocalFree (hMem=0x677900) returned 0x0 [0040.264] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu") returned 134 [0040.264] lstrlenA (lpString="\\*.*") returned 4 [0040.264] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.264] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu" [0040.264] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu\\*.*" [0040.264] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\gu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.265] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.265] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.265] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.265] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.265] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.265] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.265] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.265] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.265] LocalFree (hMem=0x6756f0) returned 0x0 [0040.265] LocalFree (hMem=0x677a10) returned 0x0 [0040.265] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.265] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0040.265] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0040.265] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.265] lstrlenA (lpString="\\") returned 1 [0040.265] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.265] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.265] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.265] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.265] lstrlenA (lpString="hi") returned 2 [0040.265] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.265] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.265] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi" [0040.265] LocalFree (hMem=0x677900) returned 0x0 [0040.265] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi") returned 134 [0040.265] lstrlenA (lpString="\\*.*") returned 4 [0040.265] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6755d8 [0040.265] lstrcpyA (in: lpString1=0x6755d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi" [0040.265] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi\\*.*" [0040.265] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.266] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.266] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.266] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.266] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.266] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.266] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.266] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.266] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.267] LocalFree (hMem=0x6755d8) returned 0x0 [0040.267] LocalFree (hMem=0x677a10) returned 0x0 [0040.267] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.267] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0040.267] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0040.267] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.267] lstrlenA (lpString="\\") returned 1 [0040.267] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.267] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.267] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.267] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.267] lstrlenA (lpString="hr") returned 2 [0040.267] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.267] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.267] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr" [0040.267] LocalFree (hMem=0x677900) returned 0x0 [0040.267] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr") returned 134 [0040.267] lstrlenA (lpString="\\*.*") returned 4 [0040.267] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674e30 [0040.267] lstrcpyA (in: lpString1=0x674e30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr" [0040.267] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr\\*.*" [0040.267] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.267] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.267] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.267] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.267] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.267] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.267] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.267] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.267] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.267] LocalFree (hMem=0x674e30) returned 0x0 [0040.267] LocalFree (hMem=0x677a10) returned 0x0 [0040.267] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.267] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0040.268] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0040.268] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.268] lstrlenA (lpString="\\") returned 1 [0040.268] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.268] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.268] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.268] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.268] lstrlenA (lpString="hu") returned 2 [0040.268] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.268] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.268] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu" [0040.268] LocalFree (hMem=0x677900) returned 0x0 [0040.268] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu") returned 134 [0040.268] lstrlenA (lpString="\\*.*") returned 4 [0040.268] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6755d8 [0040.268] lstrcpyA (in: lpString1=0x6755d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu" [0040.268] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu\\*.*" [0040.268] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.276] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.276] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.276] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.276] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.277] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.277] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.277] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.279] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.280] LocalFree (hMem=0x6755d8) returned 0x0 [0040.280] LocalFree (hMem=0x677a10) returned 0x0 [0040.280] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.280] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0040.280] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0040.281] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.281] lstrlenA (lpString="\\") returned 1 [0040.281] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.281] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.282] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.282] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.282] lstrlenA (lpString="id") returned 2 [0040.283] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.283] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.283] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id" [0040.283] LocalFree (hMem=0x677900) returned 0x0 [0040.283] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id") returned 134 [0040.284] lstrlenA (lpString="\\*.*") returned 4 [0040.284] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675178 [0040.284] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id" [0040.284] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id\\*.*" [0040.286] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.287] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.287] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.288] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.288] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.288] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.288] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.288] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.288] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.288] LocalFree (hMem=0x675178) returned 0x0 [0040.288] LocalFree (hMem=0x677a10) returned 0x0 [0040.288] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.288] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0040.288] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0040.288] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.288] lstrlenA (lpString="\\") returned 1 [0040.288] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.288] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.288] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.288] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.288] lstrlenA (lpString="it") returned 2 [0040.288] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.288] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.288] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it" [0040.288] LocalFree (hMem=0x677900) returned 0x0 [0040.288] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it") returned 134 [0040.288] lstrlenA (lpString="\\*.*") returned 4 [0040.288] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675a38 [0040.289] lstrcpyA (in: lpString1=0x675a38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it" [0040.289] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it\\*.*" [0040.289] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.289] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.289] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.289] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.289] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.289] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.289] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.289] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.289] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.289] LocalFree (hMem=0x675a38) returned 0x0 [0040.289] LocalFree (hMem=0x677a10) returned 0x0 [0040.289] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.289] lstrcmpiA (lpString1=".", lpString2="iw") returned -1 [0040.289] lstrcmpiA (lpString1="..", lpString2="iw") returned -1 [0040.289] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.290] lstrlenA (lpString="\\") returned 1 [0040.290] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.290] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.290] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.290] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.290] lstrlenA (lpString="iw") returned 2 [0040.290] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.290] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.290] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="iw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw" [0040.290] LocalFree (hMem=0x677900) returned 0x0 [0040.290] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw") returned 134 [0040.290] lstrlenA (lpString="\\*.*") returned 4 [0040.290] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.290] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw" [0040.290] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw\\*.*" [0040.290] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\iw\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.290] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.290] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.290] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.290] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.290] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.290] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.290] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.290] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.290] LocalFree (hMem=0x6753a8) returned 0x0 [0040.290] LocalFree (hMem=0x677a10) returned 0x0 [0040.290] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.290] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0040.290] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0040.290] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.290] lstrlenA (lpString="\\") returned 1 [0040.290] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.290] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.291] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.291] lstrlenA (lpString="ja") returned 2 [0040.291] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.291] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja" [0040.291] LocalFree (hMem=0x677900) returned 0x0 [0040.291] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja") returned 134 [0040.291] lstrlenA (lpString="\\*.*") returned 4 [0040.291] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674d18 [0040.291] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja" [0040.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja\\*.*" [0040.291] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.291] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.291] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.291] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.291] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.291] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.291] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.291] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.292] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.292] LocalFree (hMem=0x674d18) returned 0x0 [0040.292] LocalFree (hMem=0x677a10) returned 0x0 [0040.292] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.292] lstrcmpiA (lpString1=".", lpString2="kn") returned -1 [0040.292] lstrcmpiA (lpString1="..", lpString2="kn") returned -1 [0040.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.292] lstrlenA (lpString="\\") returned 1 [0040.292] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.292] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.292] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.292] lstrlenA (lpString="kn") returned 2 [0040.292] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.292] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.292] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="kn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn" [0040.292] LocalFree (hMem=0x677900) returned 0x0 [0040.292] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn") returned 134 [0040.292] lstrlenA (lpString="\\*.*") returned 4 [0040.292] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675b50 [0040.292] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn" [0040.292] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn\\*.*" [0040.292] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\kn\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.292] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.292] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.292] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.292] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.292] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.292] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.292] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.292] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.293] LocalFree (hMem=0x675b50) returned 0x0 [0040.293] LocalFree (hMem=0x677a10) returned 0x0 [0040.293] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.293] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0040.293] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0040.293] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.293] lstrlenA (lpString="\\") returned 1 [0040.293] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.293] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.293] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.293] lstrlenA (lpString="ko") returned 2 [0040.293] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.293] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko" [0040.293] LocalFree (hMem=0x677900) returned 0x0 [0040.293] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko") returned 134 [0040.293] lstrlenA (lpString="\\*.*") returned 4 [0040.293] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675060 [0040.293] lstrcpyA (in: lpString1=0x675060, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko" [0040.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko\\*.*" [0040.293] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.294] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.294] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.294] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.294] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.294] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.294] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.294] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.294] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.294] LocalFree (hMem=0x675060) returned 0x0 [0040.294] LocalFree (hMem=0x677a10) returned 0x0 [0040.294] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.294] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0040.294] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0040.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.294] lstrlenA (lpString="\\") returned 1 [0040.294] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.294] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.294] lstrlenA (lpString="lt") returned 2 [0040.294] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.294] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt" [0040.294] LocalFree (hMem=0x677900) returned 0x0 [0040.294] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt") returned 134 [0040.294] lstrlenA (lpString="\\*.*") returned 4 [0040.294] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675178 [0040.294] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt" [0040.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt\\*.*" [0040.294] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.294] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.295] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.295] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.295] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.295] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.295] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.295] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.295] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.295] LocalFree (hMem=0x675178) returned 0x0 [0040.295] LocalFree (hMem=0x677a10) returned 0x0 [0040.295] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.295] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0040.295] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0040.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.295] lstrlenA (lpString="\\") returned 1 [0040.295] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.295] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.295] lstrlenA (lpString="lv") returned 2 [0040.295] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.295] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv" [0040.295] LocalFree (hMem=0x677900) returned 0x0 [0040.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv") returned 134 [0040.295] lstrlenA (lpString="\\*.*") returned 4 [0040.295] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.295] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv" [0040.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv\\*.*" [0040.295] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0040.296] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.297] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.297] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.297] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.297] LocalFree (hMem=0x6756f0) returned 0x0 [0040.297] LocalFree (hMem=0x677a10) returned 0x0 [0040.297] lstrcmpiA (lpString1=".", lpString2="ml") returned -1 [0040.297] lstrcmpiA (lpString1="..", lpString2="ml") returned -1 [0040.297] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.297] lstrlenA (lpString="\\") returned 1 [0040.297] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.298] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.298] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.298] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.298] lstrlenA (lpString="ml") returned 2 [0040.298] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.298] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.298] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml" [0040.298] LocalFree (hMem=0x677900) returned 0x0 [0040.298] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml") returned 134 [0040.298] lstrlenA (lpString="\\*.*") returned 4 [0040.298] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675808 [0040.298] lstrcpyA (in: lpString1=0x675808, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml" [0040.298] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml\\*.*" [0040.298] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ml\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0040.298] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.298] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.298] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.298] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.298] LocalFree (hMem=0x675808) returned 0x0 [0040.298] LocalFree (hMem=0x677a10) returned 0x0 [0040.298] lstrcmpiA (lpString1=".", lpString2="mr") returned -1 [0040.298] lstrcmpiA (lpString1="..", lpString2="mr") returned -1 [0040.298] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.298] lstrlenA (lpString="\\") returned 1 [0040.298] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.298] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.298] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.298] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.298] lstrlenA (lpString="mr") returned 2 [0040.298] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.298] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="mr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr" [0040.299] LocalFree (hMem=0x677900) returned 0x0 [0040.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr") returned 134 [0040.299] lstrlenA (lpString="\\*.*") returned 4 [0040.299] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675b50 [0040.299] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr" [0040.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr\\*.*" [0040.299] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\mr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.300] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.300] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.300] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.300] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.300] LocalFree (hMem=0x675b50) returned 0x0 [0040.300] LocalFree (hMem=0x677a10) returned 0x0 [0040.300] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0040.300] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0040.300] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.300] lstrlenA (lpString="\\") returned 1 [0040.300] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.300] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.300] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.300] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.300] lstrlenA (lpString="ms") returned 2 [0040.300] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.300] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms" [0040.301] LocalFree (hMem=0x677900) returned 0x0 [0040.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms") returned 134 [0040.301] lstrlenA (lpString="\\*.*") returned 4 [0040.301] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.301] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms" [0040.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms\\*.*" [0040.301] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0040.301] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.301] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.301] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.301] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.301] LocalFree (hMem=0x6753a8) returned 0x0 [0040.301] LocalFree (hMem=0x677a10) returned 0x0 [0040.301] lstrcmpiA (lpString1=".", lpString2="nb") returned -1 [0040.301] lstrcmpiA (lpString1="..", lpString2="nb") returned -1 [0040.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.301] lstrlenA (lpString="\\") returned 1 [0040.301] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.301] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.301] lstrlenA (lpString="nb") returned 2 [0040.301] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.301] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="nb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb" [0040.301] LocalFree (hMem=0x677900) returned 0x0 [0040.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb") returned 134 [0040.302] lstrlenA (lpString="\\*.*") returned 4 [0040.302] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.302] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb" [0040.302] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb\\*.*" [0040.302] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nb\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.302] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.302] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.302] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.302] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.302] LocalFree (hMem=0x6756f0) returned 0x0 [0040.302] LocalFree (hMem=0x677a10) returned 0x0 [0040.302] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0040.302] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0040.302] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.302] lstrlenA (lpString="\\") returned 1 [0040.302] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.302] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.302] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.302] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.303] lstrlenA (lpString="nl") returned 2 [0040.303] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.303] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl" [0040.303] LocalFree (hMem=0x677900) returned 0x0 [0040.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl") returned 134 [0040.303] lstrlenA (lpString="\\*.*") returned 4 [0040.303] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.303] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl" [0040.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl\\*.*" [0040.303] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.303] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.303] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.303] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.303] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.303] LocalFree (hMem=0x6753a8) returned 0x0 [0040.303] LocalFree (hMem=0x677a10) returned 0x0 [0040.303] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0040.303] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0040.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.303] lstrlenA (lpString="\\") returned 1 [0040.303] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.303] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.303] lstrlenA (lpString="pl") returned 2 [0040.303] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.303] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl" [0040.304] LocalFree (hMem=0x677900) returned 0x0 [0040.304] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl") returned 134 [0040.304] lstrlenA (lpString="\\*.*") returned 4 [0040.304] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674d18 [0040.304] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl" [0040.304] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl\\*.*" [0040.304] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0040.304] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.304] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.304] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.304] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.304] LocalFree (hMem=0x674d18) returned 0x0 [0040.304] LocalFree (hMem=0x677a10) returned 0x0 [0040.304] lstrcmpiA (lpString1=".", lpString2="pt") returned -1 [0040.304] lstrcmpiA (lpString1="..", lpString2="pt") returned -1 [0040.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.305] lstrlenA (lpString="\\") returned 1 [0040.305] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.305] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.305] lstrlenA (lpString="pt") returned 2 [0040.305] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.305] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="pt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt" [0040.305] LocalFree (hMem=0x677900) returned 0x0 [0040.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt") returned 134 [0040.305] lstrlenA (lpString="\\*.*") returned 4 [0040.305] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675178 [0040.305] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt" [0040.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt\\*.*" [0040.305] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\pt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.305] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.305] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.305] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.305] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.305] LocalFree (hMem=0x675178) returned 0x0 [0040.305] LocalFree (hMem=0x677a10) returned 0x0 [0040.305] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0040.305] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0040.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.305] lstrlenA (lpString="\\") returned 1 [0040.305] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.305] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.306] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.306] lstrlenA (lpString="ro") returned 2 [0040.306] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.306] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.306] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro" [0040.306] LocalFree (hMem=0x677900) returned 0x0 [0040.306] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro") returned 134 [0040.306] lstrlenA (lpString="\\*.*") returned 4 [0040.306] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.306] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro" [0040.306] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro\\*.*" [0040.306] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0040.306] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.306] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.306] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.306] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.306] LocalFree (hMem=0x6753a8) returned 0x0 [0040.306] LocalFree (hMem=0x677a10) returned 0x0 [0040.307] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0040.307] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0040.307] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.307] lstrlenA (lpString="\\") returned 1 [0040.307] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.307] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.307] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.307] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.307] lstrlenA (lpString="ru") returned 2 [0040.307] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.307] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.307] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru" [0040.307] LocalFree (hMem=0x677900) returned 0x0 [0040.307] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru") returned 134 [0040.307] lstrlenA (lpString="\\*.*") returned 4 [0040.307] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675290 [0040.307] lstrcpyA (in: lpString1=0x675290, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru" [0040.307] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru\\*.*" [0040.307] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.307] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.307] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.307] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.307] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.307] LocalFree (hMem=0x675290) returned 0x0 [0040.307] LocalFree (hMem=0x677a10) returned 0x0 [0040.307] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0040.307] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0040.307] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.308] lstrlenA (lpString="\\") returned 1 [0040.308] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.308] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.308] lstrlenA (lpString="sk") returned 2 [0040.308] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.308] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk" [0040.308] LocalFree (hMem=0x677900) returned 0x0 [0040.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk") returned 134 [0040.308] lstrlenA (lpString="\\*.*") returned 4 [0040.308] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6756f0 [0040.308] lstrcpyA (in: lpString1=0x6756f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk" [0040.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk\\*.*" [0040.308] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0040.308] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.308] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.308] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.309] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.309] LocalFree (hMem=0x6756f0) returned 0x0 [0040.309] LocalFree (hMem=0x677a10) returned 0x0 [0040.309] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0040.309] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0040.309] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.309] lstrlenA (lpString="\\") returned 1 [0040.309] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.309] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.309] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.309] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.309] lstrlenA (lpString="sl") returned 2 [0040.309] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.309] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.309] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl" [0040.309] LocalFree (hMem=0x677900) returned 0x0 [0040.309] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl") returned 134 [0040.309] lstrlenA (lpString="\\*.*") returned 4 [0040.310] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674e30 [0040.310] lstrcpyA (in: lpString1=0x674e30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl" [0040.310] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl\\*.*" [0040.310] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0040.310] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.310] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.310] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.310] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.310] LocalFree (hMem=0x674e30) returned 0x0 [0040.310] LocalFree (hMem=0x677a10) returned 0x0 [0040.310] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0040.310] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0040.310] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.311] lstrlenA (lpString="\\") returned 1 [0040.311] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.311] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.311] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.311] lstrlenA (lpString="sr") returned 2 [0040.311] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.311] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.311] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr" [0040.311] LocalFree (hMem=0x677900) returned 0x0 [0040.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr") returned 134 [0040.311] lstrlenA (lpString="\\*.*") returned 4 [0040.311] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.311] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr" [0040.311] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr\\*.*" [0040.311] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.311] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.311] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.312] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.312] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.312] LocalFree (hMem=0x6753a8) returned 0x0 [0040.312] LocalFree (hMem=0x677a10) returned 0x0 [0040.312] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0040.312] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0040.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.312] lstrlenA (lpString="\\") returned 1 [0040.312] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.312] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.312] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.312] lstrlenA (lpString="sv") returned 2 [0040.312] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.312] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.312] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv" [0040.312] LocalFree (hMem=0x677900) returned 0x0 [0040.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv") returned 134 [0040.312] lstrlenA (lpString="\\*.*") returned 4 [0040.312] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675b50 [0040.312] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv" [0040.312] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv\\*.*" [0040.312] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0040.312] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.312] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.312] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.312] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.313] LocalFree (hMem=0x675b50) returned 0x0 [0040.313] LocalFree (hMem=0x677a10) returned 0x0 [0040.313] lstrcmpiA (lpString1=".", lpString2="sw") returned -1 [0040.313] lstrcmpiA (lpString1="..", lpString2="sw") returned -1 [0040.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.313] lstrlenA (lpString="\\") returned 1 [0040.313] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.313] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.313] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.313] lstrlenA (lpString="sw") returned 2 [0040.313] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.313] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.313] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="sw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw" [0040.313] LocalFree (hMem=0x677900) returned 0x0 [0040.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw") returned 134 [0040.313] lstrlenA (lpString="\\*.*") returned 4 [0040.313] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675a38 [0040.313] lstrcpyA (in: lpString1=0x675a38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw" [0040.313] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw\\*.*" [0040.313] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\sw\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.314] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.314] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.314] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.314] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.314] LocalFree (hMem=0x675a38) returned 0x0 [0040.314] LocalFree (hMem=0x677a10) returned 0x0 [0040.314] lstrcmpiA (lpString1=".", lpString2="ta") returned -1 [0040.314] lstrcmpiA (lpString1="..", lpString2="ta") returned -1 [0040.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.314] lstrlenA (lpString="\\") returned 1 [0040.314] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.314] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.314] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.314] lstrlenA (lpString="ta") returned 2 [0040.314] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.314] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.314] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="ta" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta" [0040.314] LocalFree (hMem=0x677900) returned 0x0 [0040.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta") returned 134 [0040.314] lstrlenA (lpString="\\*.*") returned 4 [0040.314] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x674e30 [0040.314] lstrcpyA (in: lpString1=0x674e30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta" [0040.314] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta\\*.*" [0040.314] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\ta\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.314] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.314] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.314] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.315] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.315] LocalFree (hMem=0x674e30) returned 0x0 [0040.315] LocalFree (hMem=0x677a10) returned 0x0 [0040.315] lstrcmpiA (lpString1=".", lpString2="te") returned -1 [0040.315] lstrcmpiA (lpString1="..", lpString2="te") returned -1 [0040.315] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned 131 [0040.315] lstrlenA (lpString="\\") returned 1 [0040.315] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.315] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.315] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.315] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned 132 [0040.315] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.315] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.315] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="te" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te" [0040.315] LocalFree (hMem=0x677900) returned 0x0 [0040.315] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.315] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te" [0040.315] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te\\*.*" [0040.315] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\te\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.316] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.316] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.316] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.316] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.316] LocalFree (hMem=0x6753a8) returned 0x0 [0040.316] LocalFree (hMem=0x677a10) returned 0x0 [0040.316] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0040.316] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0040.316] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.316] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.316] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.316] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.316] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.316] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th" [0040.316] LocalFree (hMem=0x677900) returned 0x0 [0040.316] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6754c0 [0040.316] lstrcpyA (in: lpString1=0x6754c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th" [0040.316] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th\\*.*" [0040.316] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.316] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.316] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.316] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.316] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.316] LocalFree (hMem=0x6754c0) returned 0x0 [0040.316] LocalFree (hMem=0x677a10) returned 0x0 [0040.316] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0040.316] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0040.317] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.317] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.317] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.317] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.317] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.317] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr" [0040.317] LocalFree (hMem=0x677900) returned 0x0 [0040.317] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675a38 [0040.317] lstrcpyA (in: lpString1=0x675a38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr" [0040.317] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr\\*.*" [0040.317] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.317] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.317] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.318] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.318] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.318] LocalFree (hMem=0x675a38) returned 0x0 [0040.318] LocalFree (hMem=0x677a10) returned 0x0 [0040.318] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0040.318] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0040.318] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.318] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.318] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.318] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.318] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.318] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk" [0040.318] LocalFree (hMem=0x677900) returned 0x0 [0040.318] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675290 [0040.318] lstrcpyA (in: lpString1=0x675290, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk" [0040.318] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk\\*.*" [0040.318] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.318] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.318] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.318] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.318] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.318] LocalFree (hMem=0x675290) returned 0x0 [0040.318] LocalFree (hMem=0x677a10) returned 0x0 [0040.318] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0040.318] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0040.318] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.318] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.319] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.319] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.319] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.319] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi" [0040.319] LocalFree (hMem=0x677900) returned 0x0 [0040.319] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x6753a8 [0040.319] lstrcpyA (in: lpString1=0x6753a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi" [0040.319] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi\\*.*" [0040.319] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.319] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.319] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.320] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.320] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.320] LocalFree (hMem=0x6753a8) returned 0x0 [0040.320] LocalFree (hMem=0x677a10) returned 0x0 [0040.320] lstrcmpiA (lpString1=".", lpString2="zh") returned -1 [0040.320] lstrcmpiA (lpString1="..", lpString2="zh") returned -1 [0040.320] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.320] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.320] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.320] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677a10 [0040.320] lstrcpyA (in: lpString1=0x677a10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.320] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="zh" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh" [0040.320] LocalFree (hMem=0x677900) returned 0x0 [0040.320] LocalAlloc (uFlags=0x40, uBytes=0x10b) returned 0x675a38 [0040.320] lstrcpyA (in: lpString1=0x675a38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh" [0040.320] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh\\*.*" [0040.320] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.321] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.321] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.321] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.321] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.321] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.321] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.321] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.321] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.321] LocalFree (hMem=0x675a38) returned 0x0 [0040.321] LocalFree (hMem=0x677a10) returned 0x0 [0040.322] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.322] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0040.322] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0040.322] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677900 [0040.322] lstrcpyA (in: lpString1=0x677900, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales" [0040.322] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.322] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x674d18 [0040.322] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\" [0040.322] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW" [0040.322] LocalFree (hMem=0x677900) returned 0x0 [0040.322] LocalAlloc (uFlags=0x40, uBytes=0x10e) returned 0x674e30 [0040.322] lstrcpyA (in: lpString1=0x674e30, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW" [0040.322] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW\\*.*" [0040.322] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690068 [0040.322] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.322] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.322] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.323] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.323] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.323] StrStrIA (lpFirst="messages.json", lpSrch="Web Data") returned 0x0 [0040.323] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.323] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.323] LocalFree (hMem=0x674e30) returned 0x0 [0040.323] LocalFree (hMem=0x674d18) returned 0x0 [0040.323] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.323] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0040.323] LocalFree (hMem=0x6777f0) returned 0x0 [0040.323] LocalFree (hMem=0x6776e0) returned 0x0 [0040.323] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.323] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0040.323] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0040.323] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6775d8 [0040.323] lstrcpyA (in: lpString1=0x6775d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0" [0040.323] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.324] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776e0 [0040.324] lstrcpyA (in: lpString1=0x6776e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\" [0040.324] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata" [0040.324] LocalFree (hMem=0x6775d8) returned 0x0 [0040.324] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x675b50 [0040.324] lstrcpyA (in: lpString1=0x675b50, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata" [0040.324] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata\\*.*" [0040.324] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\6017.605.1.4_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690068 [0040.324] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.324] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.324] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.324] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.325] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.325] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Web Data") returned 0x0 [0040.325] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.325] StrStrIA (lpFirst="verified_contents.json", lpSrch="Web Data") returned 0x0 [0040.325] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.336] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.336] LocalFree (hMem=0x675b50) returned 0x0 [0040.337] LocalFree (hMem=0x6776e0) returned 0x0 [0040.337] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0040.339] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.339] LocalFree (hMem=0x6774d0) returned 0x0 [0040.340] LocalFree (hMem=0x6773c8) returned 0x0 [0040.340] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.340] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0040.341] LocalFree (hMem=0x6771d8) returned 0x0 [0040.341] LocalFree (hMem=0x69e108) returned 0x0 [0040.341] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.342] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.342] LocalFree (hMem=0x69df58) returned 0x0 [0040.342] LocalFree (hMem=0x651aa0) returned 0x0 [0040.343] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.343] StrStrIA (lpFirst="Favicons", lpSrch="Web Data") returned 0x0 [0040.343] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.343] StrStrIA (lpFirst="Favicons-journal", lpSrch="Web Data") returned 0x0 [0040.344] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.344] StrStrIA (lpFirst="Google Profile.ico", lpSrch="Web Data") returned 0x0 [0040.344] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.344] StrStrIA (lpFirst="History", lpSrch="Web Data") returned 0x0 [0040.344] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.346] StrStrIA (lpFirst="History Provider Cache", lpSrch="Web Data") returned 0x0 [0040.346] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.346] StrStrIA (lpFirst="History-journal", lpSrch="Web Data") returned 0x0 [0040.346] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.347] lstrcmpiA (lpString1=".", lpString2="IndexedDB") returned -1 [0040.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.348] lstrlenA (lpString="\\") returned 1 [0040.348] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0040.349] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.349] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.350] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.350] lstrlenA (lpString="IndexedDB") returned 9 [0040.350] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.350] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.350] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="IndexedDB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB" [0040.350] LocalFree (hMem=0x69fd28) returned 0x0 [0040.352] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB") returned 73 [0040.352] lstrlenA (lpString="\\*.*") returned 4 [0040.352] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69df58 [0040.352] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB" [0040.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\*.*" [0040.353] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690468 [0040.355] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.356] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.356] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB") returned 73 [0040.356] lstrlenA (lpString="\\") returned 1 [0040.357] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x69e030 [0040.357] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB" [0040.358] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\" [0040.358] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\") returned 74 [0040.358] lstrlenA (lpString="https_www.google.com_0.indexeddb.leveldb") returned 40 [0040.359] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6656c8 [0040.359] lstrcpyA (in: lpString1=0x6656c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\" [0040.359] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\", lpString2="https_www.google.com_0.indexeddb.leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb" [0040.359] LocalFree (hMem=0x69e030) returned 0x0 [0040.359] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb") returned 114 [0040.361] lstrlenA (lpString="\\*.*") returned 4 [0040.361] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x6657c8 [0040.361] lstrcpyA (in: lpString1=0x6657c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb" [0040.361] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\*.*" [0040.362] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x68ff68 [0040.373] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.373] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.374] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.374] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.374] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.376] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.376] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.376] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.376] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.377] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.377] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.377] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.377] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.379] LocalFree (hMem=0x6657c8) returned 0x0 [0040.379] LocalFree (hMem=0x6656c8) returned 0x0 [0040.379] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.380] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0040.382] LocalFree (hMem=0x69df58) returned 0x0 [0040.382] LocalFree (hMem=0x651aa0) returned 0x0 [0040.382] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.382] lstrcmpiA (lpString1=".", lpString2="Local Extension Settings") returned -1 [0040.382] lstrcmpiA (lpString1="..", lpString2="Local Extension Settings") returned -1 [0040.382] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.382] lstrlenA (lpString="\\") returned 1 [0040.383] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0040.383] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.384] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.384] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.384] lstrlenA (lpString="Local Extension Settings") returned 24 [0040.384] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x651aa0 [0040.384] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.385] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Local Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0040.386] LocalFree (hMem=0x6a0138) returned 0x0 [0040.386] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned 88 [0040.386] lstrlenA (lpString="\\*.*") returned 4 [0040.387] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x69df58 [0040.387] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0040.387] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*.*" [0040.387] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690068 [0040.388] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.388] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.388] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.388] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.388] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.388] lstrcmpiA (lpString1=".", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0040.388] lstrcmpiA (lpString1="..", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned -1 [0040.388] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned 88 [0040.388] lstrlenA (lpString="\\") returned 1 [0040.388] LocalAlloc (uFlags=0x40, uBytes=0xda) returned 0x69e040 [0040.389] lstrcpyA (in: lpString1=0x69e040, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0040.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0040.389] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned 89 [0040.389] lstrlenA (lpString="ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 32 [0040.389] LocalAlloc (uFlags=0x40, uBytes=0xfa) returned 0x6771d8 [0040.389] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0040.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpString2="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0040.389] LocalFree (hMem=0x69e040) returned 0x0 [0040.389] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 121 [0040.389] lstrlenA (lpString="\\*.*") returned 4 [0040.389] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x69e040 [0040.389] lstrcpyA (in: lpString1=0x69e040, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0040.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*" [0040.389] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6904a8 [0040.390] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.391] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.391] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.391] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.391] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.391] LocalFree (hMem=0x69e040) returned 0x0 [0040.392] LocalFree (hMem=0x6771d8) returned 0x0 [0040.392] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.392] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.392] LocalFree (hMem=0x69df58) returned 0x0 [0040.392] LocalFree (hMem=0x651aa0) returned 0x0 [0040.392] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.392] lstrcmpiA (lpString1=".", lpString2="Local Storage") returned -1 [0040.392] lstrcmpiA (lpString1="..", lpString2="Local Storage") returned -1 [0040.392] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.392] lstrlenA (lpString="\\") returned 1 [0040.392] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0040.392] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.392] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.392] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.392] lstrlenA (lpString="Local Storage") returned 13 [0040.392] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x651aa0 [0040.392] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.392] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Local Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" [0040.392] LocalFree (hMem=0x69fd28) returned 0x0 [0040.392] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned 77 [0040.392] lstrlenA (lpString="\\*.*") returned 4 [0040.392] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x69df58 [0040.392] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" [0040.392] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*.*" [0040.392] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6900a8 [0040.393] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.394] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.394] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.394] StrStrIA (lpFirst="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.394] StrStrIA (lpFirst="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.394] StrStrIA (lpFirst="https_www.youtube.com_0.localstorage", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.394] StrStrIA (lpFirst="https_www.youtube.com_0.localstorage-journal", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.394] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0040.394] LocalFree (hMem=0x69df58) returned 0x0 [0040.394] LocalFree (hMem=0x651aa0) returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.394] StrStrIA (lpFirst="Login Data", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.394] StrStrIA (lpFirst="Login Data-journal", lpSrch="Web Data") returned 0x0 [0040.394] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.394] StrStrIA (lpFirst="Network Action Predictor", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="Network Action Predictor-journal", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="Origin Bound Certs", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="Origin Bound Certs-journal", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="Preferences", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="previews_opt_out.db", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="previews_opt_out.db-journal", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="QuotaManager", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.395] StrStrIA (lpFirst="QuotaManager-journal", lpSrch="Web Data") returned 0x0 [0040.395] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.396] StrStrIA (lpFirst="Secure Preferences", lpSrch="Web Data") returned 0x0 [0040.396] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.396] lstrcmpiA (lpString1=".", lpString2="Service Worker") returned -1 [0040.396] lstrcmpiA (lpString1="..", lpString2="Service Worker") returned -1 [0040.396] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.396] lstrlenA (lpString="\\") returned 1 [0040.396] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0040.396] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.396] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.396] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.396] lstrlenA (lpString="Service Worker") returned 14 [0040.396] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x651aa0 [0040.396] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.396] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0040.396] LocalFree (hMem=0x69fd28) returned 0x0 [0040.396] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0040.396] lstrlenA (lpString="\\*.*") returned 4 [0040.396] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x69df58 [0040.396] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0040.396] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*" [0040.396] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6905a8 [0040.396] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.396] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.396] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.396] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.396] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.396] lstrcmpiA (lpString1=".", lpString2="CacheStorage") returned -1 [0040.396] lstrcmpiA (lpString1="..", lpString2="CacheStorage") returned -1 [0040.396] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0040.396] lstrlenA (lpString="\\") returned 1 [0040.396] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x69e038 [0040.396] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0040.396] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.396] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0040.396] lstrlenA (lpString="CacheStorage") returned 12 [0040.397] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x69e110 [0040.397] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.397] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0040.397] LocalFree (hMem=0x69e038) returned 0x0 [0040.397] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned 91 [0040.397] lstrlenA (lpString="\\*.*") returned 4 [0040.397] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x6771d8 [0040.397] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0040.397] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*" [0040.397] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6905e8 [0040.398] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.398] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.398] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.398] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.398] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.398] lstrcmpiA (lpString1=".", lpString2="28da9c56fde4021055a681112c092453f74d8dd8") returned -1 [0040.398] lstrcmpiA (lpString1="..", lpString2="28da9c56fde4021055a681112c092453f74d8dd8") returned -1 [0040.398] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned 91 [0040.398] lstrlenA (lpString="\\") returned 1 [0040.398] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x6772c0 [0040.398] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0040.398] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" [0040.398] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned 92 [0040.398] lstrlenA (lpString="28da9c56fde4021055a681112c092453f74d8dd8") returned 40 [0040.398] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6773a8 [0040.398] lstrcpyA (in: lpString1=0x6773a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" [0040.398] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", lpString2="28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0040.398] LocalFree (hMem=0x6772c0) returned 0x0 [0040.398] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned 132 [0040.398] lstrlenA (lpString="\\*.*") returned 4 [0040.398] LocalAlloc (uFlags=0x40, uBytes=0x109) returned 0x674d18 [0040.398] lstrcpyA (in: lpString1=0x674d18, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0040.398] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*" [0040.398] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690068 [0040.400] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.400] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.400] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.400] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.400] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.400] lstrcmpiA (lpString1=".", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned -1 [0040.400] lstrcmpiA (lpString1="..", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned -1 [0040.400] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned 132 [0040.400] lstrlenA (lpString="\\") returned 1 [0040.400] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6774b8 [0040.401] lstrcpyA (in: lpString1=0x6774b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0040.401] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" [0040.401] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned 133 [0040.401] lstrlenA (lpString="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 36 [0040.401] LocalAlloc (uFlags=0x40, uBytes=0x12a) returned 0x6775c8 [0040.401] lstrcpyA (in: lpString1=0x6775c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" [0040.401] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0040.401] LocalFree (hMem=0x6774b8) returned 0x0 [0040.401] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 169 [0040.401] lstrlenA (lpString="\\*.*") returned 4 [0040.401] LocalAlloc (uFlags=0x40, uBytes=0x12e) returned 0x677700 [0040.401] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0040.401] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*" [0040.401] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690668 [0040.402] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.402] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] StrStrIA (lpFirst="1dd0446e4b2b157b_0", lpSrch="Web Data") returned 0x0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] StrStrIA (lpFirst="60bf3aba3df02770_0", lpSrch="Web Data") returned 0x0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] StrStrIA (lpFirst="d4a1768080ecf56d_0", lpSrch="Web Data") returned 0x0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] StrStrIA (lpFirst="fdf2cfeb8ad0eeac_0", lpSrch="Web Data") returned 0x0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] StrStrIA (lpFirst="index", lpSrch="Web Data") returned 0x0 [0040.402] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.402] lstrcmpiA (lpString1=".", lpString2="index-dir") returned -1 [0040.402] lstrcmpiA (lpString1="..", lpString2="index-dir") returned -1 [0040.402] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 169 [0040.402] lstrlenA (lpString="\\") returned 1 [0040.403] LocalAlloc (uFlags=0x40, uBytes=0x12b) returned 0x677838 [0040.403] lstrcpyA (in: lpString1=0x677838, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0040.403] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" [0040.403] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned 170 [0040.403] lstrlenA (lpString="index-dir") returned 9 [0040.403] LocalAlloc (uFlags=0x40, uBytes=0x134) returned 0x677970 [0040.403] lstrcpyA (in: lpString1=0x677970, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" [0040.403] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\", lpString2="index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" [0040.403] LocalFree (hMem=0x677838) returned 0x0 [0040.403] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned 179 [0040.403] lstrlenA (lpString="\\*.*") returned 4 [0040.403] LocalAlloc (uFlags=0x40, uBytes=0x138) returned 0x6a0230 [0040.403] lstrcpyA (in: lpString1=0x6a0230, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" [0040.403] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*" [0040.403] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900a8 [0040.404] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.404] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.404] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.404] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.404] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.404] StrStrIA (lpFirst="the-real-index", lpSrch="Web Data") returned 0x0 [0040.404] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.404] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0040.405] LocalFree (hMem=0x6a0230) returned 0x0 [0040.405] LocalFree (hMem=0x677970) returned 0x0 [0040.405] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.405] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.405] LocalFree (hMem=0x677700) returned 0x0 [0040.405] LocalFree (hMem=0x6775c8) returned 0x0 [0040.405] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.405] StrStrIA (lpFirst="index.txt", lpSrch="Web Data") returned 0x0 [0040.405] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0040.405] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.405] LocalFree (hMem=0x674d18) returned 0x0 [0040.405] LocalFree (hMem=0x6773a8) returned 0x0 [0040.405] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.405] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.405] LocalFree (hMem=0x6771d8) returned 0x0 [0040.405] LocalFree (hMem=0x69e110) returned 0x0 [0040.405] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.405] lstrcmpiA (lpString1=".", lpString2="Database") returned -1 [0040.405] lstrcmpiA (lpString1="..", lpString2="Database") returned -1 [0040.405] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0040.405] lstrlenA (lpString="\\") returned 1 [0040.405] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x69e038 [0040.405] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0040.405] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.405] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0040.405] lstrlenA (lpString="Database") returned 8 [0040.405] LocalAlloc (uFlags=0x40, uBytes=0xd8) returned 0x69e110 [0040.406] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.406] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="Database" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" [0040.406] LocalFree (hMem=0x69e038) returned 0x0 [0040.406] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned 87 [0040.406] lstrlenA (lpString="\\*.*") returned 4 [0040.406] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x6771d8 [0040.406] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" [0040.406] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*" [0040.406] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690128 [0040.406] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.406] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.407] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.407] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.407] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.407] LocalFree (hMem=0x6771d8) returned 0x0 [0040.407] LocalFree (hMem=0x69e110) returned 0x0 [0040.407] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.407] lstrcmpiA (lpString1=".", lpString2="ScriptCache") returned -1 [0040.407] lstrcmpiA (lpString1="..", lpString2="ScriptCache") returned -1 [0040.407] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0040.407] lstrlenA (lpString="\\") returned 1 [0040.407] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x69e038 [0040.407] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0040.407] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.407] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0040.407] lstrlenA (lpString="ScriptCache") returned 11 [0040.407] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x69e110 [0040.407] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0040.407] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0040.407] LocalFree (hMem=0x69e038) returned 0x0 [0040.407] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned 90 [0040.407] lstrlenA (lpString="\\*.*") returned 4 [0040.407] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x6771d8 [0040.407] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0040.407] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*" [0040.408] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6904e8 [0040.409] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.409] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.409] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.409] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.409] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.409] StrStrIA (lpFirst="2cc80dabc69f58b6_0", lpSrch="Web Data") returned 0x0 [0040.409] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.410] StrStrIA (lpFirst="2cc80dabc69f58b6_1", lpSrch="Web Data") returned 0x0 [0040.410] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.410] StrStrIA (lpFirst="index", lpSrch="Web Data") returned 0x0 [0040.410] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.410] lstrcmpiA (lpString1=".", lpString2="index-dir") returned -1 [0040.410] lstrcmpiA (lpString1="..", lpString2="index-dir") returned -1 [0040.410] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned 90 [0040.410] lstrlenA (lpString="\\") returned 1 [0040.410] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x6772c0 [0040.410] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0040.410] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" [0040.410] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned 91 [0040.410] lstrlenA (lpString="index-dir") returned 9 [0040.410] LocalAlloc (uFlags=0x40, uBytes=0xe5) returned 0x6741c0 [0040.410] lstrcpyA (in: lpString1=0x6741c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" [0040.410] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", lpString2="index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" [0040.410] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned 100 [0040.410] lstrlenA (lpString="\\*.*") returned 4 [0040.410] LocalAlloc (uFlags=0x40, uBytes=0xe9) returned 0x6772c0 [0040.410] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" [0040.410] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*" [0040.410] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6905e8 [0040.411] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.411] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.411] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.411] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.411] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.411] StrStrIA (lpFirst="the-real-index", lpSrch="Web Data") returned 0x0 [0040.411] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0040.411] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.412] FindNextFileA (in: hFindFile=0x6904e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.412] FindClose (in: hFindFile=0x6904e8 | out: hFindFile=0x6904e8) returned 1 [0040.412] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.412] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0040.412] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.412] lstrcmpiA (lpString1=".", lpString2="Session Storage") returned -1 [0040.412] lstrcmpiA (lpString1="..", lpString2="Session Storage") returned -1 [0040.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.412] lstrlenA (lpString="\\") returned 1 [0040.412] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69ff98 [0040.412] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.412] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.412] lstrlenA (lpString="Session Storage") returned 15 [0040.412] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0040.412] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.412] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Session Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" [0040.412] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned 79 [0040.413] lstrlenA (lpString="\\*.*") returned 4 [0040.413] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0040.413] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" [0040.413] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*" [0040.413] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690068 [0040.414] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.414] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.414] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.414] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.414] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.414] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.414] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.414] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.415] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.415] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.415] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.415] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.415] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.415] StrStrIA (lpFirst="Shortcuts", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.415] StrStrIA (lpFirst="Shortcuts-journal", lpSrch="Web Data") returned 0x0 [0040.415] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.415] lstrcmpiA (lpString1=".", lpString2="Sync Data") returned -1 [0040.415] lstrcmpiA (lpString1="..", lpString2="Sync Data") returned -1 [0040.415] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.415] lstrlenA (lpString="\\") returned 1 [0040.415] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0040.415] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.415] lstrlenA (lpString="Sync Data") returned 9 [0040.415] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.415] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned 73 [0040.416] lstrlenA (lpString="\\*.*") returned 4 [0040.416] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69df58 [0040.416] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6905a8 [0040.422] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.422] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.423] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.423] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.423] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.423] lstrcmpiA (lpString1=".", lpString2="LevelDB") returned -1 [0040.424] lstrcmpiA (lpString1="..", lpString2="LevelDB") returned -1 [0040.424] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned 73 [0040.424] lstrlenA (lpString="\\") returned 1 [0040.424] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x69e030 [0040.424] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\") returned 74 [0040.425] lstrlenA (lpString="LevelDB") returned 7 [0040.425] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x69e108 [0040.425] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB") returned 81 [0040.425] lstrlenA (lpString="\\*.*") returned 4 [0040.426] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x6771d8 [0040.426] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690368 [0040.427] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.427] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.427] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.427] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.427] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.428] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.428] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.428] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.428] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.429] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.429] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.429] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.430] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.430] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.430] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.430] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0040.432] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.432] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0040.432] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.432] lstrcmpiA (lpString1=".", lpString2="Sync Extension Settings") returned -1 [0040.432] lstrcmpiA (lpString1="..", lpString2="Sync Extension Settings") returned -1 [0040.432] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.432] lstrlenA (lpString="\\") returned 1 [0040.432] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0040.432] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.432] lstrlenA (lpString="Sync Extension Settings") returned 23 [0040.432] LocalAlloc (uFlags=0x40, uBytes=0xd8) returned 0x651aa0 [0040.432] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 87 [0040.432] lstrlenA (lpString="\\*.*") returned 4 [0040.432] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x69df58 [0040.432] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690268 [0040.432] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.432] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.432] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.432] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.432] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.432] lstrcmpiA (lpString1=".", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned -1 [0040.432] lstrcmpiA (lpString1="..", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned -1 [0040.433] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 87 [0040.433] lstrlenA (lpString="\\") returned 1 [0040.433] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x69e040 [0040.433] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\") returned 88 [0040.433] lstrlenA (lpString="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 32 [0040.434] LocalAlloc (uFlags=0x40, uBytes=0xf9) returned 0x6771d8 [0040.434] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 120 [0040.434] lstrlenA (lpString="\\*.*") returned 4 [0040.434] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x69e040 [0040.434] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690528 [0040.441] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.441] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.441] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.442] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.442] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.442] StrStrIA (lpFirst="000003.log", lpSrch="Web Data") returned 0x0 [0040.442] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.442] StrStrIA (lpFirst="CURRENT", lpSrch="Web Data") returned 0x0 [0040.442] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.442] StrStrIA (lpFirst="LOCK", lpSrch="Web Data") returned 0x0 [0040.443] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.443] StrStrIA (lpFirst="LOG", lpSrch="Web Data") returned 0x0 [0040.444] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.444] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Web Data") returned 0x0 [0040.444] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.444] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.446] LocalFree (hMem=0x69e040) returned 0x0 [0040.447] LocalFree (hMem=0x6771d8) returned 0x0 [0040.447] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.447] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0040.448] LocalFree (hMem=0x69df58) returned 0x0 [0040.448] LocalFree (hMem=0x651aa0) returned 0x0 [0040.448] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.448] StrStrIA (lpFirst="Top Sites", lpSrch="Web Data") returned 0x0 [0040.448] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.448] StrStrIA (lpFirst="Top Sites-journal", lpSrch="Web Data") returned 0x0 [0040.448] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.448] StrStrIA (lpFirst="TransportSecurity", lpSrch="Web Data") returned 0x0 [0040.449] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.449] StrStrIA (lpFirst="Visited Links", lpSrch="Web Data") returned 0x0 [0040.449] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.449] lstrcmpiA (lpString1=".", lpString2="Web Applications") returned -1 [0040.450] lstrcmpiA (lpString1="..", lpString2="Web Applications") returned -1 [0040.450] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.450] lstrlenA (lpString="\\") returned 1 [0040.450] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0040.450] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.451] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.451] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.451] lstrlenA (lpString="Web Applications") returned 16 [0040.451] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x651aa0 [0040.451] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.452] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0040.452] LocalFree (hMem=0x69fd28) returned 0x0 [0040.452] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 80 [0040.452] lstrlenA (lpString="\\*.*") returned 4 [0040.452] LocalAlloc (uFlags=0x40, uBytes=0xd5) returned 0x69df58 [0040.453] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0040.453] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*" [0040.453] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6903a8 [0040.458] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.458] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.458] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.458] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.458] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.458] lstrcmpiA (lpString1=".", lpString2="_crx_aohghmighlieiainnegkcijnfilokake") returned -1 [0040.458] lstrcmpiA (lpString1="..", lpString2="_crx_aohghmighlieiainnegkcijnfilokake") returned -1 [0040.458] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 80 [0040.458] lstrlenA (lpString="\\") returned 1 [0040.458] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x69e038 [0040.458] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0040.458] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0040.458] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned 81 [0040.458] lstrlenA (lpString="_crx_aohghmighlieiainnegkcijnfilokake") returned 37 [0040.458] LocalAlloc (uFlags=0x40, uBytes=0xf7) returned 0x6659c8 [0040.458] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0040.458] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpString2="_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0040.459] LocalFree (hMem=0x69e038) returned 0x0 [0040.459] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned 118 [0040.459] lstrlenA (lpString="\\*.*") returned 4 [0040.459] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x69e038 [0040.459] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0040.459] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*" [0040.459] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690468 [0040.459] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.459] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.459] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.460] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.460] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.460] StrStrIA (lpFirst="Google Docs.ico", lpSrch="Web Data") returned 0x0 [0040.460] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.460] StrStrIA (lpFirst="Google Docs.ico.md5", lpSrch="Web Data") returned 0x0 [0040.460] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.460] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0040.460] LocalFree (hMem=0x69e038) returned 0x0 [0040.460] LocalFree (hMem=0x6659c8) returned 0x0 [0040.460] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.460] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0040.460] LocalFree (hMem=0x69df58) returned 0x0 [0040.460] LocalFree (hMem=0x651aa0) returned 0x0 [0040.460] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.460] StrStrIA (lpFirst="Web Data", lpSrch="Web Data") returned="Web Data" [0040.461] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.461] lstrlenA (lpString="\\") returned 1 [0040.461] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69ff98 [0040.461] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.461] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.461] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.461] lstrlenA (lpString="Web Data") returned 8 [0040.461] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x651aa0 [0040.461] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.461] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0040.461] LocalFree (hMem=0x69ff98) returned 0x0 [0040.461] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19fa58 | out: ppstm=0x19fa58*=0x6602e0) returned 0x0 [0040.461] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0040.462] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0x53, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.464] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.464] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.465] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.465] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.465] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.465] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0040.466] ISequentialStream:RemoteWrite (in: This=0x6602e0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0040.466] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x0, lpOverlapped=0x0) returned 1 [0040.467] CloseHandle (hObject=0x328) returned 1 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.467] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa38, cb=0x10, pcbRead=0x19fa1c | out: pv=0x19fa38*=0x53, pcbRead=0x19fa1c*=0x10) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x10, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.467] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa22, cb=0x2, pcbRead=0x19f9f0 | out: pv=0x19fa22*=0x8, pcbRead=0x19f9f0*=0x2) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.467] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.468] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x12, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.468] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x1, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.468] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x13, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.469] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x1, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.469] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x0, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.469] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x15, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.469] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x40, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.470] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x20, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x17, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.470] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x20, pcbRead=0x19f9f0*=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x20, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.470] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x38, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.471] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19fa20, cb=0x4, pcbRead=0x19f9f0 | out: pv=0x19fa20*=0x0, pcbRead=0x19f9f0*=0x4) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x3c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x28, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x64, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.471] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x64, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.472] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9cb, cb=0x1, pcbRead=0x19f998 | out: pv=0x19f9cb*=0x5, pcbRead=0x19f998*=0x1) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x65, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.472] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x0, pcbRead=0x19f998*=0x2) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x67, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.472] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x0, pcbRead=0x19f998*=0x2) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.472] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x69, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.473] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.473] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9cb, cb=0x1, pcbRead=0x19f998 | out: pv=0x19f9cb*=0x0, pcbRead=0x19f998*=0x1) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.473] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.473] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9c8, cb=0x4, pcbRead=0x19f998 | out: pv=0x19f9c8*=0x0, pcbRead=0x19f998*=0x4) returned 0x0 [0040.473] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6b0240 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x70, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.474] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x72, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.474] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7fb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7fb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.474] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9c8, cb=0x4, pcbRead=0x19f998 | out: pv=0x19f9c8*=0x0, pcbRead=0x19f998*=0x4) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.474] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7ff, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.475] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x9, pcbRead=0x19f978*=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6000, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6000, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.475] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f973, cb=0x1, pcbRead=0x19f940 | out: pv=0x19f973*=0xd, pcbRead=0x19f940*=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6001, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.475] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x7, pcbRead=0x19f940*=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6003, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.475] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x0, pcbRead=0x19f940*=0x2) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.475] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.476] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6005, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.476] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x1, pcbRead=0x19f940*=0x2) returned 0x0 [0040.476] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.476] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.476] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6007, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.476] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f973, cb=0x1, pcbRead=0x19f940 | out: pv=0x19f973*=0x0, pcbRead=0x19f940*=0x1) returned 0x0 [0040.476] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6c02c8 [0040.476] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6008, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.477] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x7, pcbRead=0x19f940*=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x600a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.477] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x7, pcbRead=0x19f940*=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x600c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.477] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x4, pcbRead=0x19f940*=0x2) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.477] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.479] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x600e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.479] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x3, pcbRead=0x19f940*=0x2) returned 0x0 [0040.479] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.479] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.479] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6010, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.479] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x4, pcbRead=0x19f940*=0x2) returned 0x0 [0040.479] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6012, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.480] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x2, pcbRead=0x19f940*=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6014, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.480] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x2, pcbRead=0x19f940*=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6016, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.480] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x2, pcbRead=0x19f940*=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6018, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.480] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x1, pcbRead=0x19f940*=0x2) returned 0x0 [0040.480] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6767, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6767, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.481] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x66, pcbRead=0x19f920*=0x1) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6768, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.481] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x1, pcbRead=0x19f920*=0x1) returned 0x0 [0040.481] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.481] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.481] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6769, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.481] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x66, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x66) returned 0x0 [0040.481] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0x66, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x66) returned 0x0 [0040.481] LocalFree (hMem=0x6771d8) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.482] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.482] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66ea50 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.482] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.482] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.483] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x15, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.483] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x15, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.483] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.483] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x81, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.483] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.484] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x2f, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e4b0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66fc18 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.484] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66fc18, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66fc18*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.484] LocalFree (hMem=0x66fc18) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66f0d8 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.484] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f0d8, cb=0x4, pcbRead=0x19f8f0 | out: pv=0x66f0d8*=0x6d, pcbRead=0x19f8f0*=0x4) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.484] LocalFree (hMem=0x66f0d8) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66ed78 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x10, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.484] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ed78, cb=0x4, pcbRead=0x19f8f0 | out: pv=0x66ed78*=0x6d, pcbRead=0x19f8f0*=0x4) returned 0x0 [0040.484] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0040.484] LocalFree (hMem=0x66ed78) returned 0x0 [0040.484] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.485] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x2, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.485] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e120 [0040.485] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x6771d8 [0040.485] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x15, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.485] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x6771d8, cb=0x51, pcbRead=0x19f8f0 | out: pv=0x6771d8*=0x43, pcbRead=0x19f8f0*=0x51) returned 0x0 [0040.485] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x6772b8 [0040.485] LocalFree (hMem=0x6771d8) returned 0x0 [0040.485] LocalFree (hMem=0x66ea50) returned 0x0 [0040.485] IUnknown:Release (This=0x660240) returned 0x0 [0040.485] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0040.485] LocalFree (hMem=0x69df58) returned 0x0 [0040.485] LocalFree (hMem=0x69dff0) returned 0x0 [0040.485] LocalFree (hMem=0x69e088) returned 0x0 [0040.485] LocalFree (hMem=0x69e120) returned 0x0 [0040.485] LocalFree (hMem=0x6772b8) returned 0x0 [0040.485] LocalFree (hMem=0x66e4b0) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x67cf, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.485] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x67cf, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.486] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x27, pcbRead=0x19f920*=0x1) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x67d0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.486] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x2, pcbRead=0x19f920*=0x1) returned 0x0 [0040.486] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.486] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x67d1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.486] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x27, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x27) returned 0x0 [0040.486] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x27, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x27) returned 0x0 [0040.486] LocalFree (hMem=0x6771d8) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.486] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.487] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.487] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e730 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.487] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.487] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x3b, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.487] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x15, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.487] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.512] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.512] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.513] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.513] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.514] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.515] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.515] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x0, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.516] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66db50 [0040.516] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ece8 [0040.517] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.517] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.518] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.519] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ece8, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66ece8*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.519] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.519] LocalFree (hMem=0x66ece8) returned 0x0 [0040.519] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66df10 [0040.520] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.520] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.521] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.521] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66df10, cb=0x17, pcbRead=0x19f8f0 | out: pv=0x66df10*=0x73, pcbRead=0x19f8f0*=0x17) returned 0x0 [0040.521] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66ff98 [0040.521] LocalFree (hMem=0x66df10) returned 0x0 [0040.522] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66ece8 [0040.522] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.522] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.523] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x22, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.525] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ece8, cb=0x4, pcbRead=0x19f8f0 | out: pv=0x66ece8*=0x6d, pcbRead=0x19f8f0*=0x4) returned 0x0 [0040.525] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.525] LocalFree (hMem=0x66ece8) returned 0x0 [0040.526] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.526] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.528] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x26, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.529] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x3, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.530] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0040.530] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66fa68 [0040.530] LocalFree (hMem=0x66e730) returned 0x0 [0040.530] IUnknown:Release (This=0x660240) returned 0x0 [0040.531] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0040.531] LocalFree (hMem=0x69df58) returned 0x0 [0040.531] LocalFree (hMem=0x66ff98) returned 0x0 [0040.533] LocalFree (hMem=0x69dff0) returned 0x0 [0040.533] LocalFree (hMem=0x69e088) returned 0x0 [0040.533] LocalFree (hMem=0x66fa68) returned 0x0 [0040.533] LocalFree (hMem=0x66db50) returned 0x0 [0040.534] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x648a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.534] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.535] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.536] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x648a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.536] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x85, pcbRead=0x19f920*=0x1) returned 0x0 [0040.537] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.538] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.538] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x648b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.538] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x5a, pcbRead=0x19f920*=0x1) returned 0x0 [0040.539] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.539] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.540] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x648c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.540] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x3, pcbRead=0x19f920*=0x1) returned 0x0 [0040.540] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.541] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.541] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.542] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.543] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x648d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.543] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x2da, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x2da) returned 0x0 [0040.543] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0x2da, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x2da) returned 0x0 [0040.543] LocalFree (hMem=0x6771d8) returned 0x0 [0040.543] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.544] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.544] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e5f0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.544] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.544] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.545] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.546] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.547] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.547] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.547] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.548] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.548] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.548] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.549] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.549] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.551] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.551] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.551] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.552] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.552] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.552] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x8b, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.553] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.553] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.555] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.555] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.555] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dc90 [0040.555] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ef28 [0040.556] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.556] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.557] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.557] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ef28, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66ef28*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.557] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.557] LocalFree (hMem=0x66ef28) returned 0x0 [0040.558] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f168 [0040.558] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.558] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.558] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.558] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f168, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f168*=0x6b, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.558] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69dff0 [0040.558] LocalFree (hMem=0x66f168) returned 0x0 [0040.558] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f1f8 [0040.559] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.559] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.559] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.559] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f1f8, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f1f8*=0x6b, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.559] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69e088 [0040.559] LocalFree (hMem=0x66f1f8) returned 0x0 [0040.559] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.560] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.560] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.560] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x4, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.560] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e120 [0040.560] LocalAlloc (uFlags=0x40, uBytes=0x33d) returned 0x6771d8 [0040.560] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.561] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.561] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.561] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x6771d8, cb=0x2bd, pcbRead=0x19f8f0 | out: pv=0x6771d8*=0x43, pcbRead=0x19f8f0*=0x2bd) returned 0x0 [0040.561] LocalAlloc (uFlags=0x40, uBytes=0x345) returned 0x677520 [0040.562] LocalFree (hMem=0x6771d8) returned 0x0 [0040.563] LocalFree (hMem=0x66e5f0) returned 0x0 [0040.563] IUnknown:Release (This=0x660240) returned 0x0 [0040.563] lstrcmpiA (lpString1="keywords", lpString2="logins") returned -1 [0040.563] LocalFree (hMem=0x69df58) returned 0x0 [0040.563] LocalFree (hMem=0x69dff0) returned 0x0 [0040.564] LocalFree (hMem=0x69e088) returned 0x0 [0040.564] LocalFree (hMem=0x69e120) returned 0x0 [0040.564] LocalFree (hMem=0x677520) returned 0x0 [0040.564] LocalFree (hMem=0x66dc90) returned 0x0 [0040.564] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x63d0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.564] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.564] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.564] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x63d0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.565] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x7d, pcbRead=0x19f920*=0x1) returned 0x0 [0040.565] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.565] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.566] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x63d1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.566] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x4, pcbRead=0x19f920*=0x1) returned 0x0 [0040.566] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.566] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.566] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.567] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.567] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x63d2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.568] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x7d, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x7d) returned 0x0 [0040.568] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0x7d, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x7d) returned 0x0 [0040.568] LocalFree (hMem=0x6771d8) returned 0x0 [0040.568] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.570] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.570] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.571] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.572] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.572] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.572] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e910 [0040.572] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.572] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.573] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.574] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.574] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.575] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.576] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.576] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x27, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.576] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.577] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.578] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.578] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x27, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.578] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.579] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.580] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.580] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.580] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.581] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.582] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.583] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x81, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.583] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.585] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.586] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.586] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x39, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.586] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dbf0 [0040.587] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66efb8 [0040.587] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.588] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.589] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.589] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66efb8, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66efb8*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.589] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.589] LocalFree (hMem=0x66efb8) returned 0x0 [0040.589] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0040.590] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.591] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.593] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.593] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69dff0, cb=0xd, pcbRead=0x19f8f0 | out: pv=0x69dff0*=0x74, pcbRead=0x19f8f0*=0xd) returned 0x0 [0040.593] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e550 [0040.593] LocalFree (hMem=0x69dff0) returned 0x0 [0040.593] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0040.594] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.595] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.596] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x19, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.596] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69dff0, cb=0xd, pcbRead=0x19f8f0 | out: pv=0x69dff0*=0x74, pcbRead=0x19f8f0*=0xd) returned 0x0 [0040.596] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66de70 [0040.597] LocalFree (hMem=0x69dff0) returned 0x0 [0040.597] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x26, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.598] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x5, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.598] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.598] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x69e088 [0040.598] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x27, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.598] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69e088, cb=0x56, pcbRead=0x19f8f0 | out: pv=0x69e088*=0x43, pcbRead=0x19f8f0*=0x56) returned 0x0 [0040.598] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x6771d8 [0040.598] LocalFree (hMem=0x69e088) returned 0x0 [0040.598] LocalFree (hMem=0x66e910) returned 0x0 [0040.598] IUnknown:Release (This=0x660240) returned 0x0 [0040.598] lstrcmpiA (lpString1="token_service", lpString2="logins") returned 1 [0040.598] LocalFree (hMem=0x69df58) returned 0x0 [0040.598] LocalFree (hMem=0x66e550) returned 0x0 [0040.598] LocalFree (hMem=0x66de70) returned 0x0 [0040.598] LocalFree (hMem=0x69dff0) returned 0x0 [0040.598] LocalFree (hMem=0x6771d8) returned 0x0 [0040.598] LocalFree (hMem=0x66dbf0) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x644f, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.598] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x644f, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.598] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x39, pcbRead=0x19f920*=0x1) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6450, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.599] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x5, pcbRead=0x19f920*=0x1) returned 0x0 [0040.599] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.599] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6451, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.599] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x39, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x39) returned 0x0 [0040.599] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x39, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x39) returned 0x0 [0040.599] LocalFree (hMem=0x6771d8) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.599] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.600] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.600] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66ddd0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.600] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.600] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x4d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.600] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x27, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.600] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.601] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.601] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.601] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.601] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.602] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x0, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e690 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ee08 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.602] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ee08, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66ee08*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.602] LocalFree (hMem=0x66ee08) returned 0x0 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x670778 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.602] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x670778, cb=0x20, pcbRead=0x19f8f0 | out: pv=0x670778*=0x73, pcbRead=0x19f8f0*=0x20) returned 0x0 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x6790a8 [0040.602] LocalFree (hMem=0x670778) returned 0x0 [0040.602] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.602] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.602] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69dff0, cb=0xd, pcbRead=0x19f8f0 | out: pv=0x69dff0*=0x74, pcbRead=0x19f8f0*=0xd) returned 0x0 [0040.603] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e7d0 [0040.603] LocalFree (hMem=0x69dff0) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x38, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.603] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x6, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.603] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.603] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f318 [0040.603] LocalFree (hMem=0x66ddd0) returned 0x0 [0040.603] IUnknown:Release (This=0x660240) returned 0x0 [0040.603] lstrcmpiA (lpString1="token_service", lpString2="logins") returned 1 [0040.603] LocalFree (hMem=0x69df58) returned 0x0 [0040.603] LocalFree (hMem=0x6790a8) returned 0x0 [0040.603] LocalFree (hMem=0x66e7d0) returned 0x0 [0040.603] LocalFree (hMem=0x69dff0) returned 0x0 [0040.603] LocalFree (hMem=0x66f318) returned 0x0 [0040.603] LocalFree (hMem=0x66e690) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62f2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62f2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.603] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x81, pcbRead=0x19f920*=0x1) returned 0x0 [0040.603] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62f3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.604] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x5b, pcbRead=0x19f920*=0x1) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62f4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.604] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x6, pcbRead=0x19f920*=0x1) returned 0x0 [0040.604] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.604] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62f5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.604] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0xdb, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0xdb) returned 0x0 [0040.604] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0xdb, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0xdb) returned 0x0 [0040.604] LocalFree (hMem=0x6771d8) returned 0x0 [0040.604] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.605] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.605] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e050 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.605] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.605] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.605] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.606] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.606] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.606] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x83, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.606] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x9, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.606] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66df10 [0040.606] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f168 [0040.606] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.607] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f168, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f168*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.607] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.607] LocalFree (hMem=0x66f168) returned 0x0 [0040.607] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f0d8 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.607] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f0d8, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f0d8*=0x61, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.607] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69dff0 [0040.607] LocalFree (hMem=0x66f0d8) returned 0x0 [0040.607] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f1f8 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.607] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f1f8, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f1f8*=0x61, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.607] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69e088 [0040.607] LocalFree (hMem=0x66f1f8) returned 0x0 [0040.607] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.608] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x7, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.608] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e120 [0040.608] LocalAlloc (uFlags=0x40, uBytes=0x13e) returned 0x6771d8 [0040.608] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.608] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x6771d8, cb=0xbe, pcbRead=0x19f8f0 | out: pv=0x6771d8*=0x43, pcbRead=0x19f8f0*=0xbe) returned 0x0 [0040.608] LocalAlloc (uFlags=0x40, uBytes=0x146) returned 0x69bfd0 [0040.608] LocalFree (hMem=0x6771d8) returned 0x0 [0040.608] LocalFree (hMem=0x66e050) returned 0x0 [0040.608] IUnknown:Release (This=0x660240) returned 0x0 [0040.608] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0040.608] LocalFree (hMem=0x69df58) returned 0x0 [0040.608] LocalFree (hMem=0x69dff0) returned 0x0 [0040.608] LocalFree (hMem=0x69e088) returned 0x0 [0040.608] LocalFree (hMem=0x69e120) returned 0x0 [0040.608] LocalFree (hMem=0x69bfd0) returned 0x0 [0040.608] LocalFree (hMem=0x66df10) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62c1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.608] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62c1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.609] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x2f, pcbRead=0x19f920*=0x1) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62c2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.609] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x7, pcbRead=0x19f920*=0x1) returned 0x0 [0040.609] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.609] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x62c3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.609] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x2f, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x2f) returned 0x0 [0040.609] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x2f, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x2f) returned 0x0 [0040.609] LocalFree (hMem=0x6771d8) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.609] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.615] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.616] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.617] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.617] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e7d0 [0040.617] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.617] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.618] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.618] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.619] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.619] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.621] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.622] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x43, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.622] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.622] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.623] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.623] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.623] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.623] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x0, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.623] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e050 [0040.624] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ed78 [0040.624] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.624] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.625] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.625] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66ed78, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66ed78*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.625] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.626] LocalFree (hMem=0x66ed78) returned 0x0 [0040.626] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6708c8 [0040.626] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.627] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.627] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.627] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x6708c8, cb=0x1b, pcbRead=0x19f8f0 | out: pv=0x6708c8*=0x73, pcbRead=0x19f8f0*=0x1b) returned 0x0 [0040.628] LocalAlloc (uFlags=0x40, uBytes=0xa3) returned 0x678ff8 [0040.628] LocalFree (hMem=0x6708c8) returned 0x0 [0040.628] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f438 [0040.628] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.629] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.630] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x26, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.630] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f438, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f438*=0x61, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.630] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69dff0 [0040.631] LocalFree (hMem=0x66f438) returned 0x0 [0040.632] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.633] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.633] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.634] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x8, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.635] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0040.636] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f558 [0040.637] LocalFree (hMem=0x66e7d0) returned 0x0 [0040.637] IUnknown:Release (This=0x660240) returned 0x0 [0040.637] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0040.638] LocalFree (hMem=0x69df58) returned 0x0 [0040.638] LocalFree (hMem=0x678ff8) returned 0x0 [0040.638] LocalFree (hMem=0x69dff0) returned 0x0 [0040.638] LocalFree (hMem=0x69e088) returned 0x0 [0040.638] LocalFree (hMem=0x66f558) returned 0x0 [0040.638] LocalFree (hMem=0x66e050) returned 0x0 [0040.639] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6271, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.639] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.640] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.640] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6271, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.640] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x4e, pcbRead=0x19f920*=0x1) returned 0x0 [0040.642] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.643] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.645] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6272, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.646] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x8, pcbRead=0x19f920*=0x1) returned 0x0 [0040.646] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.646] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x6273, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.646] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x4e, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x4e) returned 0x0 [0040.646] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x4e, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x4e) returned 0x0 [0040.646] LocalFree (hMem=0x6771d8) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.646] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.646] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e050 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.646] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.647] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.647] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.647] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.647] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.648] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.648] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x27, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.648] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.649] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.649] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.649] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.649] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.650] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.651] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.651] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.651] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.652] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.653] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.653] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x67, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.653] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e910 [0040.654] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f288 [0040.654] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.655] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.656] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.656] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f288, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f288*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.657] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.658] LocalFree (hMem=0x66f288) returned 0x0 [0040.658] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0040.658] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.659] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.659] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.661] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69dff0, cb=0xd, pcbRead=0x19f8f0 | out: pv=0x69dff0*=0x61, pcbRead=0x19f8f0*=0xd) returned 0x0 [0040.661] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e230 [0040.661] LocalFree (hMem=0x69dff0) returned 0x0 [0040.661] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f798 [0040.663] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.664] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.665] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.665] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f798, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f798*=0x61, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.666] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69dff0 [0040.666] LocalFree (hMem=0x66f798) returned 0x0 [0040.666] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.666] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.667] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x20, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.667] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0x9, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.667] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0040.667] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x69e120 [0040.668] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.668] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.668] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x21, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.669] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69e120, cb=0x2d, pcbRead=0x19f8f0 | out: pv=0x69e120*=0x43, pcbRead=0x19f8f0*=0x2d) returned 0x0 [0040.669] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x6771d8 [0040.670] LocalFree (hMem=0x69e120) returned 0x0 [0040.670] LocalFree (hMem=0x66e050) returned 0x0 [0040.670] IUnknown:Release (This=0x660240) returned 0x0 [0040.670] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0040.670] LocalFree (hMem=0x69df58) returned 0x0 [0040.670] LocalFree (hMem=0x66e230) returned 0x0 [0040.670] LocalFree (hMem=0x69dff0) returned 0x0 [0040.670] LocalFree (hMem=0x69e088) returned 0x0 [0040.670] LocalFree (hMem=0x6771d8) returned 0x0 [0040.670] LocalFree (hMem=0x66e910) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x61fb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x61fb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.670] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x74, pcbRead=0x19f920*=0x1) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x61fc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.670] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x9, pcbRead=0x19f920*=0x1) returned 0x0 [0040.670] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.670] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.670] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x61fd, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.671] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x74, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x74) returned 0x0 [0040.671] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0x74, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x74) returned 0x0 [0040.671] LocalFree (hMem=0x6771d8) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.671] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.672] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.672] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.672] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66db50 [0040.673] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.674] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.674] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.674] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.674] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.675] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.677] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.677] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x3f, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.677] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.680] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.684] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.684] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1d, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.684] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.685] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.686] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.686] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.686] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.687] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.688] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.689] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x81, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.690] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.690] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.691] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.691] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x19, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.691] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e730 [0040.691] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66fa68 [0040.691] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.692] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.693] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.693] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66fa68, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66fa68*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.693] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.693] LocalFree (hMem=0x66fa68) returned 0x0 [0040.694] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fda0 [0040.694] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.694] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.696] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.697] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66fda0, cb=0x19, pcbRead=0x19f8f0 | out: pv=0x66fda0*=0x61, pcbRead=0x19f8f0*=0x19) returned 0x0 [0040.697] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x678ff8 [0040.697] LocalFree (hMem=0x66fda0) returned 0x0 [0040.697] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f288 [0040.698] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.699] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.701] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x25, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.701] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f288, cb=0x8, pcbRead=0x19f8f0 | out: pv=0x66f288*=0x61, pcbRead=0x19f8f0*=0x8) returned 0x0 [0040.701] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69dff0 [0040.701] LocalFree (hMem=0x66f288) returned 0x0 [0040.701] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.703] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.703] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.703] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0xa, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.704] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0040.711] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x6a0138 [0040.711] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.712] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.746] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.746] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x6a0138, cb=0x46, pcbRead=0x19f8f0 | out: pv=0x6a0138*=0x43, pcbRead=0x19f8f0*=0x46) returned 0x0 [0040.746] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69e120 [0040.746] LocalFree (hMem=0x6a0138) returned 0x0 [0040.746] LocalFree (hMem=0x66db50) returned 0x0 [0040.746] IUnknown:Release (This=0x660240) returned 0x0 [0040.746] lstrcmpiA (lpString1="autofill", lpString2="logins") returned -1 [0040.746] LocalFree (hMem=0x69df58) returned 0x0 [0040.746] LocalFree (hMem=0x678ff8) returned 0x0 [0040.746] LocalFree (hMem=0x69dff0) returned 0x0 [0040.746] LocalFree (hMem=0x69e088) returned 0x0 [0040.746] LocalFree (hMem=0x69e120) returned 0x0 [0040.746] LocalFree (hMem=0x66e730) returned 0x0 [0040.746] LocalFree (hMem=0x6c02c8) returned 0x0 [0040.746] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7f6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.746] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7f6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.747] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9c8, cb=0x4, pcbRead=0x19f998 | out: pv=0x19f9c8*=0x0, pcbRead=0x19f998*=0x4) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7fa, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.747] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x11, pcbRead=0x19f978*=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7800, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7800, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.747] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f973, cb=0x1, pcbRead=0x19f940 | out: pv=0x19f973*=0xd, pcbRead=0x19f940*=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.747] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7801, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.747] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x4, pcbRead=0x19f940*=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7803, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.748] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x0, pcbRead=0x19f940*=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7805, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.748] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x0, pcbRead=0x19f940*=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.748] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7807, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.748] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f973, cb=0x1, pcbRead=0x19f940 | out: pv=0x19f973*=0x0, pcbRead=0x19f940*=0x1) returned 0x0 [0040.748] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6c02c8 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7808, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.749] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x6, pcbRead=0x19f940*=0x2) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x780a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.749] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x4, pcbRead=0x19f940*=0x2) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.749] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x780c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.749] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x2, pcbRead=0x19f940*=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x780e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.750] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x4, pcbRead=0x19f940*=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7810, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.750] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x1, pcbRead=0x19f940*=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7812, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.750] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x1, pcbRead=0x19f940*=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7814, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.750] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x0, pcbRead=0x19f940*=0x2) returned 0x0 [0040.750] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7816, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.751] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f972, cb=0x2, pcbRead=0x19f940 | out: pv=0x19f972*=0x0, pcbRead=0x19f940*=0x2) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7e92, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7e92, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.751] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x82, pcbRead=0x19f920*=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7e93, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.751] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x6b, pcbRead=0x19f920*=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.751] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7e94, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.752] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0xa, pcbRead=0x19f920*=0x1) returned 0x0 [0040.752] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.752] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x6602b8) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7e95, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.752] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x16b, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x16b) returned 0x0 [0040.752] ISequentialStream:RemoteWrite (in: This=0x6602b8, pv=0x6771d8*=0x7, cb=0x16b, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x16b) returned 0x0 [0040.752] LocalFree (hMem=0x6771d8) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.752] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.752] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e5f0 [0040.752] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.753] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.753] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x25, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.753] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x25, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.753] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.753] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.754] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x85, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.754] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x19, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.754] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e0f0 [0040.754] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f4c8 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.754] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x66f4c8, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f4c8*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.754] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69e0d8 [0040.754] LocalFree (hMem=0x66f4c8) returned 0x0 [0040.754] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e170 [0040.754] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.755] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.755] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.755] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x69e170, cb=0xc, pcbRead=0x19f8f0 | out: pv=0x69e170*=0x63, pcbRead=0x19f8f0*=0xc) returned 0x0 [0040.755] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e410 [0040.755] LocalFree (hMem=0x69e170) returned 0x0 [0040.755] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e170 [0040.755] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.755] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.755] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.803] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x69e170, cb=0xc, pcbRead=0x19f8f0 | out: pv=0x69e170*=0x63, pcbRead=0x19f8f0*=0xc) returned 0x0 [0040.803] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e050 [0040.803] LocalFree (hMem=0x69e170) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x24, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.804] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0xb, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.804] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e170 [0040.804] LocalAlloc (uFlags=0x40, uBytes=0x1c6) returned 0x6771d8 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x25, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.804] ISequentialStream:RemoteRead (in: This=0x6602b8, pv=0x6771d8, cb=0x146, pcbRead=0x19f8f0 | out: pv=0x6771d8*=0x43, pcbRead=0x19f8f0*=0x146) returned 0x0 [0040.804] LocalAlloc (uFlags=0x40, uBytes=0x1ce) returned 0x6773a8 [0040.804] LocalFree (hMem=0x6771d8) returned 0x0 [0040.804] LocalFree (hMem=0x66e5f0) returned 0x0 [0040.804] IUnknown:Release (This=0x6602b8) returned 0x0 [0040.804] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0040.804] LocalFree (hMem=0x69e0d8) returned 0x0 [0040.804] LocalFree (hMem=0x66e410) returned 0x0 [0040.804] LocalFree (hMem=0x66e050) returned 0x0 [0040.804] LocalFree (hMem=0x69e170) returned 0x0 [0040.804] LocalFree (hMem=0x6773a8) returned 0x0 [0040.804] LocalFree (hMem=0x66e0f0) returned 0x0 [0040.804] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c84, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c84, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.805] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x37, pcbRead=0x19f920*=0x1) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c85, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.805] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0xb, pcbRead=0x19f920*=0x1) returned 0x0 [0040.805] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.805] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c86, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.805] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x37, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x37) returned 0x0 [0040.805] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x37, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x37) returned 0x0 [0040.805] LocalFree (hMem=0x6771d8) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.805] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.806] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.806] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e910 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.806] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.806] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x4b, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.806] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x25, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.806] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.807] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.807] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x0, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dc90 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f5e8 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.807] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f5e8, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f5e8*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.807] LocalFree (hMem=0x66f5e8) returned 0x0 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66fe48 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.807] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66fe48, cb=0x1f, pcbRead=0x19f8f0 | out: pv=0x66fe48*=0x73, pcbRead=0x19f8f0*=0x1f) returned 0x0 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679418 [0040.807] LocalFree (hMem=0x66fe48) returned 0x0 [0040.807] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.807] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.808] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x69dff0, cb=0xc, pcbRead=0x19f8f0 | out: pv=0x69dff0*=0x63, pcbRead=0x19f8f0*=0xc) returned 0x0 [0040.808] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e050 [0040.808] LocalFree (hMem=0x69dff0) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x36, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.808] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0xc, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.808] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.808] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66faf8 [0040.808] LocalFree (hMem=0x66e910) returned 0x0 [0040.808] IUnknown:Release (This=0x660240) returned 0x0 [0040.808] lstrcmpiA (lpString1="credit_cards", lpString2="logins") returned -1 [0040.808] LocalFree (hMem=0x69df58) returned 0x0 [0040.808] LocalFree (hMem=0x679418) returned 0x0 [0040.808] LocalFree (hMem=0x66e050) returned 0x0 [0040.808] LocalFree (hMem=0x69dff0) returned 0x0 [0040.808] LocalFree (hMem=0x66faf8) returned 0x0 [0040.808] LocalFree (hMem=0x66dc90) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7a82, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.808] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7a82, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.809] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x83, pcbRead=0x19f920*=0x1) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7a83, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.809] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x34, pcbRead=0x19f920*=0x1) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7a84, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.809] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0xc, pcbRead=0x19f920*=0x1) returned 0x0 [0040.809] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.809] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.809] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7a85, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.809] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x1b4, pcbRead=0x19f930 | out: pv=0x6771d8*=0x7, pcbRead=0x19f930*=0x1b4) returned 0x0 [0040.809] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x7, cb=0x1b4, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x1b4) returned 0x0 [0040.810] LocalFree (hMem=0x6771d8) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.810] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x7, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.810] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e2d0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.810] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.810] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.811] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x2f, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.811] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x2f, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.811] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.811] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x86, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.811] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.812] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dbf0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f438 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.812] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f438, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f438*=0x74, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69e120 [0040.812] LocalFree (hMem=0x66f438) returned 0x0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e9b0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.812] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66e9b0, cb=0x11, pcbRead=0x19f8f0 | out: pv=0x66e9b0*=0x61, pcbRead=0x19f8f0*=0x11) returned 0x0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fe48 [0040.812] LocalFree (hMem=0x66e9b0) returned 0x0 [0040.812] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66db50 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.812] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.813] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66db50, cb=0x11, pcbRead=0x19f8f0 | out: pv=0x66db50*=0x61, pcbRead=0x19f8f0*=0x11) returned 0x0 [0040.813] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670f58 [0040.813] LocalFree (hMem=0x66db50) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.813] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f90f, cb=0x1, pcbRead=0x19f8dc | out: pv=0x19f90f*=0xe, pcbRead=0x19f8dc*=0x1) returned 0x0 [0040.813] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x6771d8 [0040.813] LocalAlloc (uFlags=0x40, uBytes=0x205) returned 0x677270 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2f, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.813] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x677270, cb=0x185, pcbRead=0x19f8f0 | out: pv=0x677270*=0x43, pcbRead=0x19f8f0*=0x185) returned 0x0 [0040.813] LocalAlloc (uFlags=0x40, uBytes=0x20d) returned 0x677480 [0040.813] LocalFree (hMem=0x677270) returned 0x0 [0040.813] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.813] IUnknown:Release (This=0x660240) returned 0x0 [0040.813] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0040.813] LocalFree (hMem=0x69e120) returned 0x0 [0040.813] LocalFree (hMem=0x66fe48) returned 0x0 [0040.813] LocalFree (hMem=0x670f58) returned 0x0 [0040.813] LocalFree (hMem=0x6771d8) returned 0x0 [0040.813] LocalFree (hMem=0x677480) returned 0x0 [0040.813] LocalFree (hMem=0x66dbf0) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c39, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.813] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c39, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.814] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0x41, pcbRead=0x19f920*=0x1) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c3a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.814] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x19f953, cb=0x1, pcbRead=0x19f920 | out: pv=0x19f953*=0xd, pcbRead=0x19f920*=0x1) returned 0x0 [0040.814] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.814] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7c3b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.814] ISequentialStream:RemoteRead (in: This=0x6602e0, pv=0x6771d8, cb=0x41, pcbRead=0x19f930 | out: pv=0x6771d8*=0x6, pcbRead=0x19f930*=0x41) returned 0x0 [0040.814] ISequentialStream:RemoteWrite (in: This=0x660240, pv=0x6771d8*=0x6, cb=0x41, pcbWritten=0x19f948 | out: pcbWritten=0x19f948*=0x41) returned 0x0 [0040.814] LocalFree (hMem=0x6771d8) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.814] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.815] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x6, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.815] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66db50 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.815] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x17, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.815] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x55, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.815] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x2f, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.815] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.816] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x1, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.816] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x19f913, cb=0x1, pcbRead=0x19f8e0 | out: pv=0x19f913*=0x0, pcbRead=0x19f8e0*=0x1) returned 0x0 [0040.816] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dd30 [0040.816] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f048 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.816] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x66f048, cb=0x5, pcbRead=0x19f8f0 | out: pv=0x66f048*=0x69, pcbRead=0x19f8f0*=0x5) returned 0x0 [0040.816] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.816] LocalFree (hMem=0x66f048) returned 0x0 [0040.816] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x678f48 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.816] IStream:RemoteSeek (in: This=0x660240, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.816] ISequentialStream:RemoteRead (in: This=0x660240, pv=0x678f48, cb=0x24, pcbRead=0x19f8f0 | out: pv=0x678f48*=0x73, pcbRead=0x19f8f0*=0x24) returned 0x0 [0040.816] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x69dff0 [0040.817] LocalFree (hMem=0x678f48) returned 0x0 [0040.817] LocalAlloc (uFlags=0x40, uBytes=0x91) returned 0x66e2d0 [0040.817] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.817] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670388 [0040.817] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.817] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.817] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e0a8 [0040.817] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66ece8 [0040.817] LocalFree (hMem=0x66db50) returned 0x0 [0040.817] IUnknown:Release (This=0x660240) returned 0x0 [0040.817] lstrcmpiA (lpString1="autofill_profiles", lpString2="logins") returned -1 [0040.817] LocalFree (hMem=0x69df58) returned 0x0 [0040.817] LocalFree (hMem=0x69dff0) returned 0x0 [0040.817] LocalFree (hMem=0x670388) returned 0x0 [0040.817] LocalFree (hMem=0x69e0a8) returned 0x0 [0040.817] LocalFree (hMem=0x66ece8) returned 0x0 [0040.817] LocalFree (hMem=0x66dd30) returned 0x0 [0040.817] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x79c4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.817] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.817] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.817] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.817] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalFree (hMem=0x6771d8) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e550 [0040.818] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66ea50 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f8b8 [0040.818] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.818] LocalFree (hMem=0x66f8b8) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66e5f0 [0040.818] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x6704d8 [0040.818] LocalFree (hMem=0x66e5f0) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66db50 [0040.818] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x6702e0 [0040.818] LocalFree (hMem=0x66db50) returned 0x0 [0040.818] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.818] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x69e088 [0040.819] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x10a) returned 0x675a38 [0040.819] LocalFree (hMem=0x69e088) returned 0x0 [0040.819] LocalFree (hMem=0x66e550) returned 0x0 [0040.819] IUnknown:Release (This=0x660240) returned 0x0 [0040.819] lstrcmpiA (lpString1="autofill_profile_names", lpString2="logins") returned -1 [0040.819] LocalFree (hMem=0x69df58) returned 0x0 [0040.819] LocalFree (hMem=0x6704d8) returned 0x0 [0040.819] LocalFree (hMem=0x6702e0) returned 0x0 [0040.819] LocalFree (hMem=0x69dff0) returned 0x0 [0040.819] LocalFree (hMem=0x675a38) returned 0x0 [0040.819] LocalFree (hMem=0x66ea50) returned 0x0 [0040.819] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7944, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.819] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.819] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.819] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.819] LocalFree (hMem=0x6771d8) returned 0x0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e410 [0040.819] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e550 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ef28 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.819] LocalFree (hMem=0x66ef28) returned 0x0 [0040.819] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e7d0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670628 [0040.820] LocalFree (hMem=0x66e7d0) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dbf0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x66fda0 [0040.820] LocalFree (hMem=0x66dbf0) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x69fd28 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x69e088 [0040.820] LocalFree (hMem=0x69fd28) returned 0x0 [0040.820] LocalFree (hMem=0x66e410) returned 0x0 [0040.820] IUnknown:Release (This=0x660240) returned 0x0 [0040.820] lstrcmpiA (lpString1="autofill_profile_emails", lpString2="logins") returned -1 [0040.820] LocalFree (hMem=0x69df58) returned 0x0 [0040.820] LocalFree (hMem=0x670628) returned 0x0 [0040.820] LocalFree (hMem=0x66fda0) returned 0x0 [0040.820] LocalFree (hMem=0x69dff0) returned 0x0 [0040.820] LocalFree (hMem=0x69e088) returned 0x0 [0040.820] LocalFree (hMem=0x66e550) returned 0x0 [0040.820] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x78c3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.820] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.820] LocalFree (hMem=0x6771d8) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e050 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dbf0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f5e8 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.820] LocalFree (hMem=0x66f5e8) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670628 [0040.820] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e910 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6704d8 [0040.820] LocalFree (hMem=0x66e910) returned 0x0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fec8 [0040.820] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e088 [0040.820] LocalFree (hMem=0x69fec8) returned 0x0 [0040.820] LocalFree (hMem=0x66e050) returned 0x0 [0040.820] IUnknown:Release (This=0x660240) returned 0x0 [0040.821] lstrcmpiA (lpString1="autofill_profile_phones", lpString2="logins") returned -1 [0040.821] LocalFree (hMem=0x69df58) returned 0x0 [0040.821] LocalFree (hMem=0x670628) returned 0x0 [0040.821] LocalFree (hMem=0x6704d8) returned 0x0 [0040.821] LocalFree (hMem=0x69dff0) returned 0x0 [0040.821] LocalFree (hMem=0x69e088) returned 0x0 [0040.821] LocalFree (hMem=0x66dbf0) returned 0x0 [0040.821] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0x7853, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.821] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.821] LocalFree (hMem=0x6771d8) returned 0x0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e230 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dd30 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ee98 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.821] LocalFree (hMem=0x66ee98) returned 0x0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6706d0 [0040.821] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e2d0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x670040 [0040.821] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x69e088 [0040.821] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663278 [0040.821] LocalFree (hMem=0x69e088) returned 0x0 [0040.821] LocalFree (hMem=0x66e230) returned 0x0 [0040.821] IUnknown:Release (This=0x660240) returned 0x0 [0040.821] lstrcmpiA (lpString1="autofill_profiles_trash", lpString2="logins") returned -1 [0040.821] LocalFree (hMem=0x69df58) returned 0x0 [0040.821] LocalFree (hMem=0x6706d0) returned 0x0 [0040.821] LocalFree (hMem=0x670040) returned 0x0 [0040.821] LocalFree (hMem=0x69dff0) returned 0x0 [0040.821] LocalFree (hMem=0x663278) returned 0x0 [0040.821] LocalFree (hMem=0x66dd30) returned 0x0 [0040.821] LocalFree (hMem=0x6c02c8) returned 0x0 [0040.822] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0xc000, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.822] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6c02c8 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.823] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.823] LocalFree (hMem=0x6771d8) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e230 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e910 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ef28 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.823] LocalFree (hMem=0x66ef28) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e2d0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66fe48 [0040.823] LocalFree (hMem=0x66e2d0) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x93) returned 0x66e050 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x6708c8 [0040.823] LocalFree (hMem=0x66e050) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x12a) returned 0x69e088 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x132) returned 0x6771d8 [0040.823] LocalFree (hMem=0x69e088) returned 0x0 [0040.823] LocalFree (hMem=0x66e230) returned 0x0 [0040.823] IUnknown:Release (This=0x660240) returned 0x0 [0040.823] lstrcmpiA (lpString1="masked_credit_cards", lpString2="logins") returned 1 [0040.823] LocalFree (hMem=0x69df58) returned 0x0 [0040.823] LocalFree (hMem=0x66fe48) returned 0x0 [0040.823] LocalFree (hMem=0x6708c8) returned 0x0 [0040.823] LocalFree (hMem=0x69dff0) returned 0x0 [0040.823] LocalFree (hMem=0x6771d8) returned 0x0 [0040.823] LocalFree (hMem=0x66e910) returned 0x0 [0040.823] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0xc626, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.823] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.823] LocalFree (hMem=0x6771d8) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e7d0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e370 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66fb88 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69e060 [0040.823] LocalFree (hMem=0x66fb88) returned 0x0 [0040.823] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66e0f0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670f58 [0040.824] LocalFree (hMem=0x66e0f0) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66de70 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670628 [0040.824] LocalFree (hMem=0x66de70) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e0f8 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x140) returned 0x6771d8 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x148) returned 0x69c7e0 [0040.824] LocalFree (hMem=0x6771d8) returned 0x0 [0040.824] LocalFree (hMem=0x66e7d0) returned 0x0 [0040.824] IUnknown:Release (This=0x660240) returned 0x0 [0040.824] lstrcmpiA (lpString1="unmasked_credit_cards", lpString2="logins") returned 1 [0040.824] LocalFree (hMem=0x69e060) returned 0x0 [0040.824] LocalFree (hMem=0x670f58) returned 0x0 [0040.824] LocalFree (hMem=0x670628) returned 0x0 [0040.824] LocalFree (hMem=0x69e0f8) returned 0x0 [0040.824] LocalFree (hMem=0x69c7e0) returned 0x0 [0040.824] LocalFree (hMem=0x66e370) returned 0x0 [0040.824] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0xc551, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.824] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x660240) returned 0x0 [0040.824] LocalFree (hMem=0x6771d8) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e230 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e370 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f5e8 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0040.824] LocalFree (hMem=0x66f5e8) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e9b0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x6702e0 [0040.824] LocalFree (hMem=0x66e9b0) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66df10 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x66fe48 [0040.824] LocalFree (hMem=0x66df10) returned 0x0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x11d) returned 0x69e088 [0040.824] LocalAlloc (uFlags=0x40, uBytes=0x125) returned 0x68af70 [0040.824] LocalFree (hMem=0x69e088) returned 0x0 [0040.824] LocalFree (hMem=0x66e230) returned 0x0 [0040.824] IUnknown:Release (This=0x660240) returned 0x0 [0040.824] lstrcmpiA (lpString1="server_card_metadata", lpString2="logins") returned 1 [0040.824] LocalFree (hMem=0x69df58) returned 0x0 [0040.824] LocalFree (hMem=0x6702e0) returned 0x0 [0040.825] LocalFree (hMem=0x66fe48) returned 0x0 [0040.825] LocalFree (hMem=0x69dff0) returned 0x0 [0040.825] LocalFree (hMem=0x68af70) returned 0x0 [0040.825] LocalFree (hMem=0x66e370) returned 0x0 [0040.825] IStream:RemoteSeek (in: This=0x6602e0, dlibMove=0xc401, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0040.825] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f968 | out: ppstm=0x19f968*=0x6602b8) returned 0x0 [0040.825] LocalFree (hMem=0x6771d8) returned 0x0 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e550 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66ea50 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ee08 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69e0b8 [0040.825] LocalFree (hMem=0x66ee08) returned 0x0 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69e150 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e910 [0040.825] LocalFree (hMem=0x69e150) returned 0x0 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x90) returned 0x69e150 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66db50 [0040.825] LocalFree (hMem=0x69e150) returned 0x0 [0040.825] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e150 [0040.827] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.827] StrStrIA (lpFirst="Web Data-journal", lpSrch="Web Data") returned="Web Data-journal" [0040.827] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.827] lstrlenA (lpString="\\") returned 1 [0040.827] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.827] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.827] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.827] lstrlenA (lpString="Web Data-journal") returned 16 [0040.827] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.827] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Data-journal" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0040.827] LocalFree (hMem=0x6a0138) returned 0x0 [0040.827] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19fa58 | out: ppstm=0x19fa58*=0x6602b8) returned 0x0 [0040.827] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0040.828] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x0, lpOverlapped=0x0) returned 1 [0040.828] CloseHandle (hObject=0x328) returned 1 [0040.828] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.828] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0040.828] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0040.828] IStream:RemoteSeek (in: This=0x6602b8, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0040.828] IUnknown:Release (This=0x6602b8) returned 0x0 [0040.828] LocalFree (hMem=0x651aa0) returned 0x0 [0040.828] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.828] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0040.828] LocalFree (hMem=0x6a0068) returned 0x0 [0040.828] LocalFree (hMem=0x663340) returned 0x0 [0040.828] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.828] lstrcmpiA (lpString1=".", lpString2="EVWhitelist") returned -1 [0040.828] lstrcmpiA (lpString1="..", lpString2="EVWhitelist") returned -1 [0040.829] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.829] lstrlenA (lpString="\\") returned 1 [0040.829] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6637f0 [0040.829] lstrcpyA (in: lpString1=0x6637f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.829] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.829] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.829] lstrlenA (lpString="EVWhitelist") returned 11 [0040.829] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fd28 [0040.829] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.829] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="EVWhitelist" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0040.829] LocalFree (hMem=0x6637f0) returned 0x0 [0040.829] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 67 [0040.829] lstrlenA (lpString="\\*.*") returned 4 [0040.829] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x69fdf8 [0040.829] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0040.829] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*" [0040.829] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690068 [0040.829] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.829] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.829] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.829] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.829] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.829] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0040.829] LocalFree (hMem=0x69fdf8) returned 0x0 [0040.829] LocalFree (hMem=0x69fd28) returned 0x0 [0040.829] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.829] lstrcmpiA (lpString1=".", lpString2="FileTypePolicies") returned -1 [0040.829] lstrcmpiA (lpString1="..", lpString2="FileTypePolicies") returned -1 [0040.829] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.829] lstrlenA (lpString="\\") returned 1 [0040.830] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663340 [0040.830] lstrcpyA (in: lpString1=0x663340, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.830] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.830] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.830] lstrlenA (lpString="FileTypePolicies") returned 16 [0040.830] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x651aa0 [0040.830] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.830] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="FileTypePolicies" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0040.830] LocalFree (hMem=0x663340) returned 0x0 [0040.830] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 72 [0040.830] lstrlenA (lpString="\\*.*") returned 4 [0040.830] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x69df58 [0040.830] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0040.830] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*" [0040.830] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6906a8 [0040.831] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.831] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.831] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.831] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.831] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.831] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0040.831] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.831] StrStrIA (lpFirst="First Run", lpSrch="Web Data") returned 0x0 [0040.831] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.831] StrStrIA (lpFirst="Local State", lpSrch="Web Data") returned 0x0 [0040.831] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.831] lstrcmpiA (lpString1=".", lpString2="OriginTrials") returned -1 [0040.831] lstrcmpiA (lpString1="..", lpString2="OriginTrials") returned -1 [0040.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.831] lstrlenA (lpString="\\") returned 1 [0040.831] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663728 [0040.831] lstrcpyA (in: lpString1=0x663728, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.831] lstrlenA (lpString="OriginTrials") returned 12 [0040.831] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x69fd28 [0040.831] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="OriginTrials" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0040.831] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 68 [0040.831] lstrlenA (lpString="\\*.*") returned 4 [0040.831] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x651aa0 [0040.831] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0040.831] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*" [0040.831] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690128 [0040.832] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.832] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.832] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.832] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.832] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.832] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.832] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.832] lstrcmpiA (lpString1=".", lpString2="PepperFlash") returned -1 [0040.832] lstrcmpiA (lpString1="..", lpString2="PepperFlash") returned -1 [0040.832] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.832] lstrlenA (lpString="\\") returned 1 [0040.832] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6638b8 [0040.832] lstrcpyA (in: lpString1=0x6638b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.832] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.832] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.832] lstrlenA (lpString="PepperFlash") returned 11 [0040.832] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fec8 [0040.832] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.832] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="PepperFlash" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0040.832] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 67 [0040.832] lstrlenA (lpString="\\*.*") returned 4 [0040.832] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x6a0138 [0040.832] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0040.832] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*" [0040.832] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x68fee8 [0040.833] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.833] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.833] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.833] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.833] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.833] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.833] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.833] lstrcmpiA (lpString1=".", lpString2="pnacl") returned -1 [0040.833] lstrcmpiA (lpString1="..", lpString2="pnacl") returned -1 [0040.833] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.833] lstrlenA (lpString="\\") returned 1 [0040.833] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x662dc8 [0040.833] lstrcpyA (in: lpString1=0x662dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.833] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.833] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.833] lstrlenA (lpString="pnacl") returned 5 [0040.833] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662c38 [0040.833] lstrcpyA (in: lpString1=0x662c38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.833] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="pnacl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0040.833] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 61 [0040.833] lstrlenA (lpString="\\*.*") returned 4 [0040.833] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x6a0138 [0040.833] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0040.833] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*" [0040.833] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690128 [0040.834] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.834] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.834] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.834] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.834] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.834] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.834] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.834] lstrcmpiA (lpString1=".", lpString2="Safe Browsing") returned -1 [0040.834] lstrcmpiA (lpString1="..", lpString2="Safe Browsing") returned -1 [0040.834] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.834] lstrlenA (lpString="\\") returned 1 [0040.834] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x662dc8 [0040.834] lstrcpyA (in: lpString1=0x662dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.834] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.834] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.834] lstrlenA (lpString="Safe Browsing") returned 13 [0040.834] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x69fdf8 [0040.834] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.835] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Safe Browsing" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" [0040.835] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned 69 [0040.835] lstrlenA (lpString="\\*.*") returned 4 [0040.835] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.835] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" [0040.835] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*" [0040.835] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6903a8 [0040.860] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.860] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.860] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.860] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.860] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.860] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0040.860] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.860] lstrcmpiA (lpString1=".", lpString2="SSLErrorAssistant") returned -1 [0040.860] lstrcmpiA (lpString1="..", lpString2="SSLErrorAssistant") returned -1 [0040.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.860] lstrlenA (lpString="\\") returned 1 [0040.860] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663980 [0040.860] lstrcpyA (in: lpString1=0x663980, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.860] lstrlenA (lpString="SSLErrorAssistant") returned 17 [0040.860] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.860] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SSLErrorAssistant" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0040.860] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 73 [0040.860] lstrlenA (lpString="\\*.*") returned 4 [0040.860] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69df58 [0040.860] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0040.860] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*" [0040.860] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690428 [0040.861] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.861] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.861] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.861] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.861] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.861] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0040.861] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.861] lstrcmpiA (lpString1=".", lpString2="Subresource Filter") returned -1 [0040.861] lstrcmpiA (lpString1="..", lpString2="Subresource Filter") returned -1 [0040.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.861] lstrlenA (lpString="\\") returned 1 [0040.861] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663278 [0040.861] lstrcpyA (in: lpString1=0x663278, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.861] lstrlenA (lpString="Subresource Filter") returned 18 [0040.861] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x651aa0 [0040.861] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0040.861] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned 74 [0040.861] lstrlenA (lpString="\\*.*") returned 4 [0040.861] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x69df58 [0040.861] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0040.861] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*" [0040.861] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6904a8 [0040.862] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.862] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.862] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.862] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.862] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.862] lstrcmpiA (lpString1=".", lpString2="Unindexed Rules") returned -1 [0040.862] lstrcmpiA (lpString1="..", lpString2="Unindexed Rules") returned -1 [0040.862] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned 74 [0040.862] lstrlenA (lpString="\\") returned 1 [0040.862] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0040.862] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0040.862] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" [0040.862] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned 75 [0040.862] lstrlenA (lpString="Unindexed Rules") returned 15 [0040.862] LocalAlloc (uFlags=0x40, uBytes=0xdb) returned 0x69e108 [0040.862] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" [0040.862] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", lpString2="Unindexed Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" [0040.862] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned 90 [0040.862] lstrlenA (lpString="\\*.*") returned 4 [0040.862] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x6771d8 [0040.862] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" [0040.862] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*" [0040.862] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690568 [0040.863] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.863] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.863] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.863] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.863] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.863] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0040.863] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.863] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.863] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.863] lstrcmpiA (lpString1=".", lpString2="SwReporter") returned -1 [0040.863] lstrcmpiA (lpString1="..", lpString2="SwReporter") returned -1 [0040.863] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.863] lstrlenA (lpString="\\") returned 1 [0040.863] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663278 [0040.863] lstrcpyA (in: lpString1=0x663278, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.863] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.863] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.863] lstrlenA (lpString="SwReporter") returned 10 [0040.863] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x69fec8 [0040.863] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.863] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SwReporter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0040.863] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 66 [0040.863] lstrlenA (lpString="\\*.*") returned 4 [0040.863] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x69ff98 [0040.863] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0040.863] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*" [0040.863] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6901a8 [0040.864] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.864] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.864] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.864] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.864] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.864] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.864] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.864] lstrcmpiA (lpString1=".", lpString2="WidevineCdm") returned -1 [0040.864] lstrcmpiA (lpString1="..", lpString2="WidevineCdm") returned -1 [0040.864] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.864] lstrlenA (lpString="\\") returned 1 [0040.864] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663278 [0040.864] lstrcpyA (in: lpString1=0x663278, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.864] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.864] lstrlenA (lpString="WidevineCdm") returned 11 [0040.864] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fd28 [0040.864] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="WidevineCdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0040.864] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 67 [0040.864] lstrlenA (lpString="\\*.*") returned 4 [0040.864] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x6a0068 [0040.864] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0040.864] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*" [0040.864] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690528 [0040.864] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.865] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.865] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.865] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.865] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.865] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.866] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 0 [0040.866] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0040.866] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0 [0040.866] FindClose (in: hFindFile=0x690228 | out: hFindFile=0x690228) returned 1 [0040.866] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0040.866] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0040.866] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0040.866] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69aea8 [0040.866] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0040.866] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0040.866] LocalFree (hMem=0x6519e0) returned 0x0 [0040.866] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned 45 [0040.866] lstrlenA (lpString="\\*.*") returned 4 [0040.866] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x6519e0 [0040.866] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0040.866] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*" [0040.866] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0x6902a8 [0040.867] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.867] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 1 [0040.867] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.867] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.867] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 1 [0040.867] lstrcmpiA (lpString1=".", lpString2="User Data") returned -1 [0040.867] lstrcmpiA (lpString1="..", lpString2="User Data") returned -1 [0040.867] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned 45 [0040.867] lstrlenA (lpString="\\") returned 1 [0040.867] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x651aa0 [0040.867] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome" [0040.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" [0040.867] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned 46 [0040.867] lstrlenA (lpString="User Data") returned 9 [0040.867] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69de98 [0040.867] lstrcpyA (in: lpString1=0x69de98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\" [0040.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\", lpString2="User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.867] LocalFree (hMem=0x651aa0) returned 0x0 [0040.867] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.867] lstrlenA (lpString="\\*.*") returned 4 [0040.867] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x662dc8 [0040.867] lstrcpyA (in: lpString1=0x662dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*" [0040.867] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 0x690068 [0040.867] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.867] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.867] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.867] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.867] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.867] lstrcmpiA (lpString1=".", lpString2="CertificateTransparency") returned -1 [0040.867] lstrcmpiA (lpString1="..", lpString2="CertificateTransparency") returned -1 [0040.867] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.867] lstrlenA (lpString="\\") returned 1 [0040.867] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6638b8 [0040.867] lstrcpyA (in: lpString1=0x6638b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.867] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.867] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.867] lstrlenA (lpString="CertificateTransparency") returned 23 [0040.868] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0040.868] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="CertificateTransparency" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0040.868] LocalFree (hMem=0x6638b8) returned 0x0 [0040.868] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 79 [0040.868] lstrlenA (lpString="\\*.*") returned 4 [0040.868] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0040.868] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0040.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*" [0040.868] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x68fee8 [0040.868] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.868] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.868] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.868] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.868] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.868] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.868] LocalFree (hMem=0x69df58) returned 0x0 [0040.868] LocalFree (hMem=0x651aa0) returned 0x0 [0040.868] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.868] lstrcmpiA (lpString1=".", lpString2="Crashpad") returned -1 [0040.868] lstrcmpiA (lpString1="..", lpString2="Crashpad") returned -1 [0040.868] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.868] lstrlenA (lpString="\\") returned 1 [0040.868] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663980 [0040.868] lstrcpyA (in: lpString1=0x663980, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.868] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.868] lstrlenA (lpString="Crashpad") returned 8 [0040.868] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fd28 [0040.868] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.868] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0040.868] LocalFree (hMem=0x663980) returned 0x0 [0040.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 64 [0040.869] lstrlenA (lpString="\\*.*") returned 4 [0040.869] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x69fec8 [0040.869] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0040.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*" [0040.869] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690428 [0040.869] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.869] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.869] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.869] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.869] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.869] StrStrIA (lpFirst="metadata", lpSrch="Login Data") returned 0x0 [0040.869] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.869] lstrcmpiA (lpString1=".", lpString2="reports") returned -1 [0040.869] lstrcmpiA (lpString1="..", lpString2="reports") returned -1 [0040.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 64 [0040.869] lstrlenA (lpString="\\") returned 1 [0040.869] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x6a0138 [0040.869] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0040.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0040.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned 65 [0040.869] lstrlenA (lpString="reports") returned 7 [0040.869] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x651aa0 [0040.869] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0040.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpString2="reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0040.869] LocalFree (hMem=0x6a0138) returned 0x0 [0040.869] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 72 [0040.869] lstrlenA (lpString="\\*.*") returned 4 [0040.869] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x69df58 [0040.869] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0040.869] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*" [0040.869] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6902e8 [0040.870] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.870] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.870] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.870] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.870] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.870] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.870] LocalFree (hMem=0x69df58) returned 0x0 [0040.870] LocalFree (hMem=0x651aa0) returned 0x0 [0040.870] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.870] StrStrIA (lpFirst="settings.dat", lpSrch="Login Data") returned 0x0 [0040.870] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0040.870] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0040.870] LocalFree (hMem=0x69fec8) returned 0x0 [0040.870] LocalFree (hMem=0x69fd28) returned 0x0 [0040.870] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.870] StrStrIA (lpFirst="CrashpadMetrics-active.pma", lpSrch="Login Data") returned 0x0 [0040.870] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0040.870] lstrcmpiA (lpString1=".", lpString2="Default") returned -1 [0040.870] lstrcmpiA (lpString1="..", lpString2="Default") returned -1 [0040.870] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0040.870] lstrlenA (lpString="\\") returned 1 [0040.870] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6631b0 [0040.870] lstrcpyA (in: lpString1=0x6631b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0040.870] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.870] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0040.870] lstrlenA (lpString="Default") returned 7 [0040.871] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x6638b8 [0040.871] lstrcpyA (in: lpString1=0x6638b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0040.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.871] LocalFree (hMem=0x6631b0) returned 0x0 [0040.871] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.871] lstrlenA (lpString="\\*.*") returned 4 [0040.871] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fd28 [0040.871] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*" [0040.871] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6900a8 [0040.871] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.871] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.871] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.871] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.871] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.871] lstrcmpiA (lpString1=".", lpString2="Cache") returned -1 [0040.871] lstrcmpiA (lpString1="..", lpString2="Cache") returned -1 [0040.871] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.871] lstrlenA (lpString="\\") returned 1 [0040.871] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fdf8 [0040.871] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.871] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.871] lstrlenA (lpString="Cache") returned 5 [0040.871] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x6a0138 [0040.871] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.871] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Cache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0040.871] LocalFree (hMem=0x69fdf8) returned 0x0 [0040.871] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 69 [0040.871] lstrlenA (lpString="\\*.*") returned 4 [0040.871] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.871] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0040.872] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0040.872] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6904a8 [0040.872] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.872] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] StrStrIA (lpFirst="data_0", lpSrch="Login Data") returned 0x0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] StrStrIA (lpFirst="data_1", lpSrch="Login Data") returned 0x0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] StrStrIA (lpFirst="data_2", lpSrch="Login Data") returned 0x0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] StrStrIA (lpFirst="data_3", lpSrch="Login Data") returned 0x0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.872] StrStrIA (lpFirst="f_000001", lpSrch="Login Data") returned 0x0 [0040.872] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000002", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000003", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000004", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000005", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000006", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000007", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000008", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000009", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000a", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000b", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000c", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000d", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000e", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_00000f", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000010", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000011", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="f_000012", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.873] StrStrIA (lpFirst="index", lpSrch="Login Data") returned 0x0 [0040.873] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.873] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.874] LocalFree (hMem=0x651aa0) returned 0x0 [0040.874] LocalFree (hMem=0x6a0138) returned 0x0 [0040.874] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.874] StrStrIA (lpFirst="Cookies", lpSrch="Login Data") returned 0x0 [0040.874] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.874] StrStrIA (lpFirst="Cookies-journal", lpSrch="Login Data") returned 0x0 [0040.874] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.874] StrStrIA (lpFirst="Current Session", lpSrch="Login Data") returned 0x0 [0040.874] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.874] StrStrIA (lpFirst="Current Tabs", lpSrch="Login Data") returned 0x0 [0040.874] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.874] lstrcmpiA (lpString1=".", lpString2="databases") returned -1 [0040.874] lstrcmpiA (lpString1="..", lpString2="databases") returned -1 [0040.874] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.874] lstrlenA (lpString="\\") returned 1 [0040.874] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0068 [0040.874] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.874] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.874] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.874] lstrlenA (lpString="databases") returned 9 [0040.874] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x651aa0 [0040.874] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.874] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="databases" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" [0040.874] LocalFree (hMem=0x6a0068) returned 0x0 [0040.874] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned 73 [0040.874] lstrlenA (lpString="\\*.*") returned 4 [0040.875] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69df58 [0040.875] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases" [0040.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*" [0040.875] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690668 [0040.875] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.875] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.875] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.875] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.875] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.875] StrStrIA (lpFirst="Databases.db", lpSrch="Login Data") returned 0x0 [0040.875] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.875] StrStrIA (lpFirst="Databases.db-journal", lpSrch="Login Data") returned 0x0 [0040.875] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.875] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.875] LocalFree (hMem=0x69df58) returned 0x0 [0040.875] LocalFree (hMem=0x651aa0) returned 0x0 [0040.875] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.875] lstrcmpiA (lpString1=".", lpString2="data_reduction_proxy_leveldb") returned -1 [0040.875] lstrcmpiA (lpString1="..", lpString2="data_reduction_proxy_leveldb") returned -1 [0040.875] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.875] lstrlenA (lpString="\\") returned 1 [0040.875] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fdf8 [0040.875] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.875] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.875] lstrlenA (lpString="data_reduction_proxy_leveldb") returned 28 [0040.875] LocalAlloc (uFlags=0x40, uBytes=0xdd) returned 0x651aa0 [0040.875] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.875] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0040.875] LocalFree (hMem=0x69fdf8) returned 0x0 [0040.875] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 92 [0040.875] lstrlenA (lpString="\\*.*") returned 4 [0040.876] LocalAlloc (uFlags=0x40, uBytes=0xe1) returned 0x674940 [0040.876] lstrcpyA (in: lpString1=0x674940, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0040.876] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*" [0040.876] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6906a8 [0040.876] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.876] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0040.876] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.876] StrStrIA (lpFirst="MANIFEST-000002", lpSrch="Login Data") returned 0x0 [0040.877] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.877] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0040.877] LocalFree (hMem=0x674940) returned 0x0 [0040.877] LocalFree (hMem=0x651aa0) returned 0x0 [0040.877] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.877] lstrcmpiA (lpString1=".", lpString2="Extension Rules") returned -1 [0040.877] lstrcmpiA (lpString1="..", lpString2="Extension Rules") returned -1 [0040.877] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.877] lstrlenA (lpString="\\") returned 1 [0040.877] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fdf8 [0040.877] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.877] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.877] lstrlenA (lpString="Extension Rules") returned 15 [0040.877] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0040.877] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.877] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0040.877] LocalFree (hMem=0x69fdf8) returned 0x0 [0040.877] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 79 [0040.877] lstrlenA (lpString="\\*.*") returned 4 [0040.877] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0040.877] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0040.878] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*" [0040.878] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6900e8 [0040.878] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.878] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.878] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.878] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.878] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.878] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0040.878] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.878] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0040.878] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.878] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0040.878] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.878] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0040.879] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.879] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0040.879] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.879] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.879] LocalFree (hMem=0x69df58) returned 0x0 [0040.879] LocalFree (hMem=0x651aa0) returned 0x0 [0040.879] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.879] lstrcmpiA (lpString1=".", lpString2="Extension State") returned -1 [0040.879] lstrcmpiA (lpString1="..", lpString2="Extension State") returned -1 [0040.879] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.879] lstrlenA (lpString="\\") returned 1 [0040.879] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69ff98 [0040.879] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.879] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.879] lstrlenA (lpString="Extension State") returned 15 [0040.879] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x651aa0 [0040.879] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.879] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extension State" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0040.879] LocalFree (hMem=0x69ff98) returned 0x0 [0040.879] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 79 [0040.879] lstrlenA (lpString="\\*.*") returned 4 [0040.879] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x69df58 [0040.880] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0040.880] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*" [0040.880] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690168 [0040.880] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.880] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.880] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.880] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.880] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.880] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0040.880] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.880] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0040.880] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.880] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0040.881] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.881] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0040.881] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.881] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0040.881] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0040.881] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0040.892] LocalFree (hMem=0x69df58) returned 0x0 [0040.892] LocalFree (hMem=0x651aa0) returned 0x0 [0040.892] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0040.892] lstrcmpiA (lpString1=".", lpString2="Extensions") returned -1 [0040.892] lstrcmpiA (lpString1="..", lpString2="Extensions") returned -1 [0040.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0040.892] lstrlenA (lpString="\\") returned 1 [0040.892] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0138 [0040.892] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0040.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0040.892] lstrlenA (lpString="Extensions") returned 10 [0040.892] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x651aa0 [0040.892] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0040.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.892] LocalFree (hMem=0x6a0138) returned 0x0 [0040.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0040.892] lstrlenA (lpString="\\*.*") returned 4 [0040.892] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x69df58 [0040.892] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.892] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*" [0040.892] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690428 [0040.892] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.892] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.892] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.892] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.892] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.892] lstrcmpiA (lpString1=".", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0040.892] lstrcmpiA (lpString1="..", lpString2="aapocclcgogkmnckokdopfmhonfmgoek") returned -1 [0040.892] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0040.892] lstrlenA (lpString="\\") returned 1 [0040.892] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0040.893] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0040.893] lstrlenA (lpString="aapocclcgogkmnckokdopfmhonfmgoek") returned 32 [0040.893] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0040.893] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0040.893] LocalFree (hMem=0x69e030) returned 0x0 [0040.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 107 [0040.893] lstrlenA (lpString="\\*.*") returned 4 [0040.893] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0040.893] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0040.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*" [0040.893] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690128 [0040.893] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.893] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.893] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.893] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.893] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.893] lstrcmpiA (lpString1=".", lpString2="0.9_0") returned -1 [0040.893] lstrcmpiA (lpString1="..", lpString2="0.9_0") returned -1 [0040.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 107 [0040.893] lstrlenA (lpString="\\") returned 1 [0040.893] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0040.893] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0040.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0040.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned 108 [0040.893] lstrlenA (lpString="0.9_0") returned 5 [0040.893] LocalAlloc (uFlags=0x40, uBytes=0xf2) returned 0x664ac8 [0040.893] lstrcpyA (in: lpString1=0x664ac8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0040.893] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0040.893] LocalFree (hMem=0x6772d0) returned 0x0 [0040.893] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 113 [0040.893] lstrlenA (lpString="\\*.*") returned 4 [0040.893] LocalAlloc (uFlags=0x40, uBytes=0xf6) returned 0x6651c8 [0040.893] lstrcpyA (in: lpString1=0x6651c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0040.894] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*" [0040.894] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690468 [0040.894] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.894] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0040.894] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.894] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0040.894] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0040.894] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 113 [0040.894] lstrlenA (lpString="\\") returned 1 [0040.894] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6655c8 [0040.894] lstrcpyA (in: lpString1=0x6655c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0040.894] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0040.894] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned 114 [0040.894] lstrlenA (lpString="_locales") returned 8 [0040.894] LocalAlloc (uFlags=0x40, uBytes=0xfb) returned 0x6772d0 [0040.894] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0040.894] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.894] LocalFree (hMem=0x6655c8) returned 0x0 [0040.894] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.894] lstrlenA (lpString="\\*.*") returned 4 [0040.894] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6773d8 [0040.894] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.895] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*" [0040.895] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690268 [0040.895] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.895] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.895] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.895] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.895] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.895] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0040.895] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0040.895] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.895] lstrlenA (lpString="\\") returned 1 [0040.895] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.895] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.895] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.895] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.895] lstrlenA (lpString="ar") returned 2 [0040.895] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.895] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.896] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0040.896] LocalFree (hMem=0x6774e0) returned 0x0 [0040.896] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 125 [0040.896] lstrlenA (lpString="\\*.*") returned 4 [0040.896] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.896] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0040.896] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*" [0040.896] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.896] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.896] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.896] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.896] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.896] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.896] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.896] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.896] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.896] LocalFree (hMem=0x6776f0) returned 0x0 [0040.896] LocalFree (hMem=0x6775e8) returned 0x0 [0040.896] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.896] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0040.896] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0040.896] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.896] lstrlenA (lpString="\\") returned 1 [0040.896] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.896] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.896] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.896] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.896] lstrlenA (lpString="bg") returned 2 [0040.896] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.896] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.896] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0040.896] LocalFree (hMem=0x6774e0) returned 0x0 [0040.897] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 125 [0040.897] lstrlenA (lpString="\\*.*") returned 4 [0040.897] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.897] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0040.897] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*" [0040.897] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.897] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.897] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.897] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.897] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.901] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.901] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.901] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.901] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0040.901] LocalFree (hMem=0x6776f0) returned 0x0 [0040.901] LocalFree (hMem=0x6775e8) returned 0x0 [0040.901] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.901] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0040.901] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0040.901] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.901] lstrlenA (lpString="\\") returned 1 [0040.901] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.901] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.901] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.901] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.901] lstrlenA (lpString="ca") returned 2 [0040.901] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.901] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.901] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0040.901] LocalFree (hMem=0x6774e0) returned 0x0 [0040.901] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 125 [0040.901] lstrlenA (lpString="\\*.*") returned 4 [0040.901] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.901] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0040.901] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*" [0040.901] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.902] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.902] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.902] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.902] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.902] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.902] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.902] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.902] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.902] LocalFree (hMem=0x6776f0) returned 0x0 [0040.902] LocalFree (hMem=0x6775e8) returned 0x0 [0040.902] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.902] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0040.902] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0040.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.902] lstrlenA (lpString="\\") returned 1 [0040.902] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.902] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.902] lstrlenA (lpString="cs") returned 2 [0040.902] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.902] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.902] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0040.902] LocalFree (hMem=0x6774e0) returned 0x0 [0040.902] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 125 [0040.902] lstrlenA (lpString="\\*.*") returned 4 [0040.902] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.902] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0040.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*" [0040.903] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.903] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.903] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.903] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.903] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.903] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.903] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.903] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.903] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.903] LocalFree (hMem=0x6776f0) returned 0x0 [0040.903] LocalFree (hMem=0x6775e8) returned 0x0 [0040.903] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.903] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0040.903] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0040.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.903] lstrlenA (lpString="\\") returned 1 [0040.903] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.903] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.903] lstrlenA (lpString="da") returned 2 [0040.903] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.903] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0040.903] LocalFree (hMem=0x6774e0) returned 0x0 [0040.903] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 125 [0040.903] lstrlenA (lpString="\\*.*") returned 4 [0040.903] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.903] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0040.903] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*" [0040.903] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.904] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.904] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.904] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.904] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.904] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.904] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.904] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.904] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.904] LocalFree (hMem=0x6776f0) returned 0x0 [0040.904] LocalFree (hMem=0x6775e8) returned 0x0 [0040.904] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.904] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0040.904] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0040.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.904] lstrlenA (lpString="\\") returned 1 [0040.904] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.904] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.904] lstrlenA (lpString="de") returned 2 [0040.904] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.904] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0040.904] LocalFree (hMem=0x6774e0) returned 0x0 [0040.904] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 125 [0040.904] lstrlenA (lpString="\\*.*") returned 4 [0040.904] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.904] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0040.904] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*" [0040.904] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.905] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.905] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.905] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.905] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.905] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.905] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.905] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.905] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.905] LocalFree (hMem=0x6776f0) returned 0x0 [0040.905] LocalFree (hMem=0x6775e8) returned 0x0 [0040.905] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.905] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0040.905] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0040.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.905] lstrlenA (lpString="\\") returned 1 [0040.905] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.905] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.905] lstrlenA (lpString="el") returned 2 [0040.905] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.905] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0040.905] LocalFree (hMem=0x6774e0) returned 0x0 [0040.905] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 125 [0040.905] lstrlenA (lpString="\\*.*") returned 4 [0040.905] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.905] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0040.905] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*" [0040.905] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.906] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.906] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.906] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.906] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.906] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.906] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.906] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.906] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.906] LocalFree (hMem=0x6776f0) returned 0x0 [0040.906] LocalFree (hMem=0x6775e8) returned 0x0 [0040.906] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.906] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0040.906] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0040.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.906] lstrlenA (lpString="\\") returned 1 [0040.906] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.906] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.906] lstrlenA (lpString="en_GB") returned 5 [0040.906] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.906] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0040.906] LocalFree (hMem=0x6774e0) returned 0x0 [0040.906] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 128 [0040.906] lstrlenA (lpString="\\*.*") returned 4 [0040.906] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.906] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0040.906] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*" [0040.906] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0040.907] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.907] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.907] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.907] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.907] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.907] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.907] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.907] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0040.907] LocalFree (hMem=0x6776f8) returned 0x0 [0040.907] LocalFree (hMem=0x6775e8) returned 0x0 [0040.907] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.907] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0040.907] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0040.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.907] lstrlenA (lpString="\\") returned 1 [0040.907] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.907] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.907] lstrlenA (lpString="en_US") returned 5 [0040.907] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.907] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0040.907] LocalFree (hMem=0x6774e0) returned 0x0 [0040.907] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 128 [0040.907] lstrlenA (lpString="\\*.*") returned 4 [0040.907] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.907] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0040.907] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*" [0040.907] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.907] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.907] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.908] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.908] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.908] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.908] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.908] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.908] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.908] LocalFree (hMem=0x6776f8) returned 0x0 [0040.908] LocalFree (hMem=0x6775e8) returned 0x0 [0040.908] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.908] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0040.908] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0040.908] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.908] lstrlenA (lpString="\\") returned 1 [0040.908] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.911] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.911] lstrlenA (lpString="es") returned 2 [0040.911] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.911] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0040.911] LocalFree (hMem=0x6774e0) returned 0x0 [0040.911] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 125 [0040.911] lstrlenA (lpString="\\*.*") returned 4 [0040.911] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.911] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0040.911] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*" [0040.911] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.911] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.911] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.911] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.911] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.911] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.911] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.911] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.912] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.912] LocalFree (hMem=0x6776f0) returned 0x0 [0040.912] LocalFree (hMem=0x6775e8) returned 0x0 [0040.912] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.912] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0040.912] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0040.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.912] lstrlenA (lpString="\\") returned 1 [0040.912] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.912] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.912] lstrlenA (lpString="es_419") returned 6 [0040.912] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0040.912] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0040.912] LocalFree (hMem=0x6774e0) returned 0x0 [0040.912] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 129 [0040.912] lstrlenA (lpString="\\*.*") returned 4 [0040.912] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0040.912] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0040.912] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*" [0040.912] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690228 [0040.912] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.912] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.913] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.913] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.913] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.913] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.913] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.913] FindClose (in: hFindFile=0x690228 | out: hFindFile=0x690228) returned 1 [0040.913] LocalFree (hMem=0x6776f8) returned 0x0 [0040.913] LocalFree (hMem=0x6775e8) returned 0x0 [0040.913] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.913] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0040.913] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0040.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.913] lstrlenA (lpString="\\") returned 1 [0040.913] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.913] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.913] lstrlenA (lpString="et") returned 2 [0040.913] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.913] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0040.913] LocalFree (hMem=0x6774e0) returned 0x0 [0040.913] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 125 [0040.913] lstrlenA (lpString="\\*.*") returned 4 [0040.913] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.913] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0040.913] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*" [0040.913] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0040.914] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.914] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.914] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.914] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.914] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.914] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.914] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.914] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0040.914] LocalFree (hMem=0x6776f0) returned 0x0 [0040.914] LocalFree (hMem=0x6775e8) returned 0x0 [0040.914] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.914] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0040.914] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0040.914] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.914] lstrlenA (lpString="\\") returned 1 [0040.914] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.914] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.914] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.914] lstrlenA (lpString="fi") returned 2 [0040.914] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.914] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0040.914] LocalFree (hMem=0x6774e0) returned 0x0 [0040.914] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 125 [0040.914] lstrlenA (lpString="\\*.*") returned 4 [0040.914] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.914] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0040.914] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*" [0040.914] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0040.914] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.915] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.915] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.915] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.915] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.915] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.915] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.915] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.915] LocalFree (hMem=0x6776f0) returned 0x0 [0040.915] LocalFree (hMem=0x6775e8) returned 0x0 [0040.915] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.915] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0040.915] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0040.915] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.915] lstrlenA (lpString="\\") returned 1 [0040.915] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.915] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.915] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.915] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.915] lstrlenA (lpString="fil") returned 3 [0040.915] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.915] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.915] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0040.915] LocalFree (hMem=0x6774e0) returned 0x0 [0040.915] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 126 [0040.915] lstrlenA (lpString="\\*.*") returned 4 [0040.915] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.915] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0040.915] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*" [0040.915] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.915] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.915] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.916] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.916] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.916] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.916] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.916] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.916] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.916] LocalFree (hMem=0x6776f0) returned 0x0 [0040.916] LocalFree (hMem=0x6775e8) returned 0x0 [0040.916] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.916] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0040.916] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0040.916] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.916] lstrlenA (lpString="\\") returned 1 [0040.916] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.916] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.916] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.916] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.916] lstrlenA (lpString="fr") returned 2 [0040.916] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.916] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.916] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0040.916] LocalFree (hMem=0x6774e0) returned 0x0 [0040.916] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 125 [0040.916] lstrlenA (lpString="\\*.*") returned 4 [0040.916] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.916] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0040.916] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*" [0040.916] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.916] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.916] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.916] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.917] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.917] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.917] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.917] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.917] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.917] LocalFree (hMem=0x6776f0) returned 0x0 [0040.917] LocalFree (hMem=0x6775e8) returned 0x0 [0040.917] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.917] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0040.917] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0040.917] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 122 [0040.917] lstrlenA (lpString="\\") returned 1 [0040.917] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.917] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.917] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.917] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned 123 [0040.917] lstrlenA (lpString="he") returned 2 [0040.917] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.917] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.917] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0040.917] LocalFree (hMem=0x6774e0) returned 0x0 [0040.917] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 125 [0040.917] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.917] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0040.917] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*" [0040.917] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.917] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.917] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.917] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.917] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.918] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.918] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.918] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.918] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.918] LocalFree (hMem=0x6776f0) returned 0x0 [0040.918] LocalFree (hMem=0x6775e8) returned 0x0 [0040.918] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.918] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0040.918] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0040.918] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.918] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.918] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.918] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.918] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.918] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0040.918] LocalFree (hMem=0x6774e0) returned 0x0 [0040.918] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.918] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0040.918] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*" [0040.918] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.918] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.918] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.918] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.918] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.918] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.918] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.919] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.919] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.919] LocalFree (hMem=0x6776f0) returned 0x0 [0040.919] LocalFree (hMem=0x6775e8) returned 0x0 [0040.919] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.919] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0040.919] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0040.919] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.919] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.919] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.919] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0040.919] LocalFree (hMem=0x6774e0) returned 0x0 [0040.919] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.919] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0040.919] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*" [0040.919] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.919] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.919] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.919] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.919] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.919] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.919] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.919] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.919] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.920] LocalFree (hMem=0x6776f0) returned 0x0 [0040.920] LocalFree (hMem=0x6775e8) returned 0x0 [0040.920] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.920] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0040.920] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0040.920] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.920] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.920] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.920] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0040.920] LocalFree (hMem=0x6774e0) returned 0x0 [0040.920] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.920] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0040.920] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*" [0040.920] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.920] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.920] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.920] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.920] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.920] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.920] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.920] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.920] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.920] LocalFree (hMem=0x6776f0) returned 0x0 [0040.920] LocalFree (hMem=0x6775e8) returned 0x0 [0040.920] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.921] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0040.921] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0040.921] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.921] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.921] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.921] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.921] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.921] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0040.921] LocalFree (hMem=0x6774e0) returned 0x0 [0040.921] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.921] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0040.921] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*" [0040.921] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.921] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.921] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.921] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.921] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.921] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.921] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.921] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.921] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.921] LocalFree (hMem=0x6776f0) returned 0x0 [0040.921] LocalFree (hMem=0x6775e8) returned 0x0 [0040.921] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.921] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0040.921] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0040.921] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.921] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.921] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.921] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.922] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0040.922] LocalFree (hMem=0x6774e0) returned 0x0 [0040.922] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.922] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0040.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*" [0040.922] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.922] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.922] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.922] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.922] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.922] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.922] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.922] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.922] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.922] LocalFree (hMem=0x6776f0) returned 0x0 [0040.922] LocalFree (hMem=0x6775e8) returned 0x0 [0040.922] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.922] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0040.922] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0040.922] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.922] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.922] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.922] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.922] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0040.923] LocalFree (hMem=0x6774e0) returned 0x0 [0040.923] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.923] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0040.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*" [0040.923] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.923] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.923] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.923] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.923] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.923] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.923] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.923] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.923] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.923] LocalFree (hMem=0x6776f0) returned 0x0 [0040.923] LocalFree (hMem=0x6775e8) returned 0x0 [0040.923] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.923] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0040.923] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0040.923] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.923] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.923] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.923] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.923] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0040.923] LocalFree (hMem=0x6774e0) returned 0x0 [0040.924] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.924] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0040.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*" [0040.924] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.924] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.924] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.924] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.924] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.924] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.924] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.924] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.924] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.924] LocalFree (hMem=0x6776f0) returned 0x0 [0040.924] LocalFree (hMem=0x6775e8) returned 0x0 [0040.924] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.924] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0040.924] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0040.924] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.924] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.924] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.924] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0040.924] LocalFree (hMem=0x6774e0) returned 0x0 [0040.924] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.924] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0040.924] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*" [0040.924] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.925] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.925] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.925] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.925] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.925] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.925] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.925] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.925] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.925] LocalFree (hMem=0x6776f0) returned 0x0 [0040.925] LocalFree (hMem=0x6775e8) returned 0x0 [0040.925] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.925] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0040.925] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.925] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.925] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.925] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0040.925] LocalFree (hMem=0x6774e0) returned 0x0 [0040.925] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0040.925] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*" [0040.925] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.926] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.926] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.926] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.926] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.926] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.926] LocalFree (hMem=0x6776f0) returned 0x0 [0040.926] LocalFree (hMem=0x6775e8) returned 0x0 [0040.926] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.926] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.926] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.926] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.926] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0040.926] LocalFree (hMem=0x6774e0) returned 0x0 [0040.926] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0040.926] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*" [0040.926] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.926] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.926] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.926] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.926] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.926] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.927] LocalFree (hMem=0x6776f0) returned 0x0 [0040.927] LocalFree (hMem=0x6775e8) returned 0x0 [0040.927] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.927] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.927] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0040.927] LocalFree (hMem=0x6774e0) returned 0x0 [0040.927] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*" [0040.927] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0040.927] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.927] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.927] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.927] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.927] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0040.927] LocalFree (hMem=0x6776f0) returned 0x0 [0040.927] LocalFree (hMem=0x6775e8) returned 0x0 [0040.927] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.927] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.927] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0040.927] LocalFree (hMem=0x6774e0) returned 0x0 [0040.927] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0040.927] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*" [0040.928] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.928] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.928] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.928] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.928] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.928] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.928] LocalFree (hMem=0x6776f0) returned 0x0 [0040.928] LocalFree (hMem=0x6775e8) returned 0x0 [0040.928] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.928] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.928] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.928] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.928] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0040.928] LocalFree (hMem=0x6774e0) returned 0x0 [0040.928] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0040.928] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*" [0040.928] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.928] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.928] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.929] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.929] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.929] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.929] LocalFree (hMem=0x6776f8) returned 0x0 [0040.929] LocalFree (hMem=0x6775e8) returned 0x0 [0040.929] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.929] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.929] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0040.929] LocalFree (hMem=0x6774e0) returned 0x0 [0040.929] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0040.929] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*" [0040.929] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.929] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.929] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.929] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.929] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.929] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.929] LocalFree (hMem=0x6776f8) returned 0x0 [0040.929] LocalFree (hMem=0x6775e8) returned 0x0 [0040.929] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.930] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.930] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0040.930] LocalFree (hMem=0x6774e0) returned 0x0 [0040.930] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0040.930] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*" [0040.930] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.931] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.931] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.931] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.931] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.931] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0040.931] LocalFree (hMem=0x6774e0) returned 0x0 [0040.931] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0040.931] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*" [0040.931] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.932] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.932] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0040.933] LocalFree (hMem=0x6774e0) returned 0x0 [0040.933] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*" [0040.933] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.933] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.933] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0040.933] LocalFree (hMem=0x6774e0) returned 0x0 [0040.933] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*" [0040.933] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.933] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.933] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.933] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0040.933] LocalFree (hMem=0x6774e0) returned 0x0 [0040.933] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0040.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*" [0040.934] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0040.934] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.934] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.934] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0040.934] LocalFree (hMem=0x6774e0) returned 0x0 [0040.934] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0040.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*" [0040.934] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0040.934] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.934] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.934] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.935] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.935] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0040.935] LocalFree (hMem=0x6774e0) returned 0x0 [0040.935] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0040.935] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*" [0040.935] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.935] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.935] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.936] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.936] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.936] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0040.936] LocalFree (hMem=0x6774e0) returned 0x0 [0040.936] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0040.936] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*" [0040.936] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0040.937] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.937] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.937] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0040.937] LocalFree (hMem=0x6774e0) returned 0x0 [0040.937] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*" [0040.937] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.937] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.937] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.937] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0040.937] LocalFree (hMem=0x6774e0) returned 0x0 [0040.937] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0040.937] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*" [0040.937] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.938] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.938] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.938] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0040.938] LocalFree (hMem=0x6774e0) returned 0x0 [0040.938] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*" [0040.938] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0040.938] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.938] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.938] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0040.938] LocalFree (hMem=0x6774e0) returned 0x0 [0040.938] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0040.938] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*" [0040.938] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.938] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.939] lstrcpyA (in: lpString1=0x6641c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0040.939] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0040.939] LocalFree (hMem=0x6641c8) returned 0x0 [0040.939] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*" [0040.939] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6902e8 [0040.939] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0040.939] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0040.939] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.939] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0040.939] LocalFree (hMem=0x69e030) returned 0x0 [0040.939] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0040.939] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*" [0040.939] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x68ff68 [0040.940] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0040.940] lstrcpyA (in: lpString1=0x664fc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpString2="0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0040.940] LocalFree (hMem=0x6772d0) returned 0x0 [0040.940] lstrcpyA (in: lpString1=0x6654c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*" [0040.940] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6903a8 [0040.940] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0040.940] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0040.940] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0040.940] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0040.940] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0040.940] lstrcpyA (in: lpString1=0x6646c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0040.940] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.940] LocalFree (hMem=0x6646c8) returned 0x0 [0040.940] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.940] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*" [0040.940] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6900e8 [0040.941] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.941] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0040.941] LocalFree (hMem=0x6774e0) returned 0x0 [0040.941] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0040.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*" [0040.941] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904e8 [0040.941] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.941] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.941] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.941] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0040.942] LocalFree (hMem=0x6774e0) returned 0x0 [0040.942] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0040.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*" [0040.942] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.942] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.942] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.942] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0040.942] LocalFree (hMem=0x6774e0) returned 0x0 [0040.942] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0040.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*" [0040.942] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905a8 [0040.942] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.942] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.942] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.943] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0040.943] LocalFree (hMem=0x6774e0) returned 0x0 [0040.943] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*" [0040.943] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0040.943] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.943] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.943] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0040.943] LocalFree (hMem=0x6774e0) returned 0x0 [0040.943] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*" [0040.943] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.943] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.943] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.943] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.944] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.944] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0040.944] LocalFree (hMem=0x6774e0) returned 0x0 [0040.944] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0040.944] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*" [0040.944] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.944] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.944] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.944] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.944] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.944] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0040.944] LocalFree (hMem=0x6774e0) returned 0x0 [0040.944] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0040.944] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*" [0040.944] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.944] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.944] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.945] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0040.945] LocalFree (hMem=0x6774e0) returned 0x0 [0040.945] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*" [0040.945] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.945] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.945] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.945] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0040.945] LocalFree (hMem=0x6774e0) returned 0x0 [0040.945] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0040.945] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*" [0040.945] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.945] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.946] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.946] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.946] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.946] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0040.946] LocalFree (hMem=0x6774e0) returned 0x0 [0040.946] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0040.946] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*" [0040.946] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.946] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.946] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.946] lstrlenA (lpString="\\") returned 1 [0040.946] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.946] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.946] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.946] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.946] lstrlenA (lpString="es_419") returned 6 [0040.946] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0040.946] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.946] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0040.946] LocalFree (hMem=0x6774e0) returned 0x0 [0040.946] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 129 [0040.946] lstrlenA (lpString="\\*.*") returned 4 [0040.946] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0040.949] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0040.949] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*" [0040.949] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.949] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.949] lstrlenA (lpString="\\") returned 1 [0040.949] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.949] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0040.949] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0040.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.949] lstrlenA (lpString="et") returned 2 [0040.949] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.949] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 125 [0040.949] lstrlenA (lpString="\\*.*") returned 4 [0040.950] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.951] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.951] lstrlenA (lpString="\\") returned 1 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.951] lstrlenA (lpString="fi") returned 2 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 125 [0040.951] lstrlenA (lpString="\\*.*") returned 4 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.951] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.951] lstrlenA (lpString="\\") returned 1 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.951] lstrlenA (lpString="fil") returned 3 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 126 [0040.951] lstrlenA (lpString="\\*.*") returned 4 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.951] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.951] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.951] lstrlenA (lpString="\\") returned 1 [0040.951] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.952] lstrlenA (lpString="fr") returned 2 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 125 [0040.952] lstrlenA (lpString="\\*.*") returned 4 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.952] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.952] lstrlenA (lpString="\\") returned 1 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.952] lstrlenA (lpString="he") returned 2 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned 125 [0040.952] lstrlenA (lpString="\\*.*") returned 4 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.952] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.952] lstrlenA (lpString="\\") returned 1 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.952] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.952] lstrlenA (lpString="hi") returned 2 [0040.952] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned 125 [0040.953] lstrlenA (lpString="\\*.*") returned 4 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.953] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.953] lstrlenA (lpString="\\") returned 1 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.953] lstrlenA (lpString="hu") returned 2 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned 125 [0040.953] lstrlenA (lpString="\\*.*") returned 4 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.953] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.953] lstrlenA (lpString="\\") returned 1 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.953] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.953] lstrlenA (lpString="id") returned 2 [0040.953] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned 125 [0040.954] lstrlenA (lpString="\\*.*") returned 4 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.954] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.954] lstrlenA (lpString="\\") returned 1 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.954] lstrlenA (lpString="it") returned 2 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned 125 [0040.954] lstrlenA (lpString="\\*.*") returned 4 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.954] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.954] lstrlenA (lpString="\\") returned 1 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.954] lstrlenA (lpString="ja") returned 2 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.954] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned 125 [0040.954] lstrlenA (lpString="\\*.*") returned 4 [0040.954] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.955] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.955] lstrlenA (lpString="\\") returned 1 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.955] lstrlenA (lpString="ko") returned 2 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned 125 [0040.955] lstrlenA (lpString="\\*.*") returned 4 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.955] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.955] lstrlenA (lpString="\\") returned 1 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.955] lstrlenA (lpString="lt") returned 2 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned 125 [0040.955] lstrlenA (lpString="\\*.*") returned 4 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.955] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.955] lstrlenA (lpString="\\") returned 1 [0040.955] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.955] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.956] lstrlenA (lpString="lv") returned 2 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned 125 [0040.956] lstrlenA (lpString="\\*.*") returned 4 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.956] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.956] lstrlenA (lpString="\\") returned 1 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.956] lstrlenA (lpString="ms") returned 2 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned 125 [0040.956] lstrlenA (lpString="\\*.*") returned 4 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.956] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.956] lstrlenA (lpString="\\") returned 1 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.956] lstrlenA (lpString="nl") returned 2 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.956] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned 125 [0040.956] lstrlenA (lpString="\\*.*") returned 4 [0040.956] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.957] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.957] lstrlenA (lpString="\\") returned 1 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.957] lstrlenA (lpString="no") returned 2 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned 125 [0040.957] lstrlenA (lpString="\\*.*") returned 4 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.957] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.957] lstrlenA (lpString="\\") returned 1 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.957] lstrlenA (lpString="pl") returned 2 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned 125 [0040.957] lstrlenA (lpString="\\*.*") returned 4 [0040.957] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.957] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.957] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.957] lstrlenA (lpString="\\") returned 1 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.958] lstrlenA (lpString="pt_BR") returned 5 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned 128 [0040.958] lstrlenA (lpString="\\*.*") returned 4 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.958] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.958] lstrlenA (lpString="\\") returned 1 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.958] lstrlenA (lpString="pt_PT") returned 5 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned 128 [0040.958] lstrlenA (lpString="\\*.*") returned 4 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.958] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.958] lstrlenA (lpString="\\") returned 1 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.958] lstrlenA (lpString="ro") returned 2 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.958] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned 125 [0040.958] lstrlenA (lpString="\\*.*") returned 4 [0040.958] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.959] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.959] lstrlenA (lpString="\\") returned 1 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.959] lstrlenA (lpString="ru") returned 2 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned 125 [0040.959] lstrlenA (lpString="\\*.*") returned 4 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.959] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.959] lstrlenA (lpString="\\") returned 1 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.959] lstrlenA (lpString="sk") returned 2 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.959] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned 125 [0040.959] lstrlenA (lpString="\\*.*") returned 4 [0040.959] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.959] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.960] lstrlenA (lpString="\\") returned 1 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.960] lstrlenA (lpString="sl") returned 2 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned 125 [0040.960] lstrlenA (lpString="\\*.*") returned 4 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.960] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.960] lstrlenA (lpString="\\") returned 1 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.960] lstrlenA (lpString="sr") returned 2 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned 125 [0040.960] lstrlenA (lpString="\\*.*") returned 4 [0040.960] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.960] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.960] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.960] lstrlenA (lpString="\\") returned 1 [0040.961] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.961] lstrlenA (lpString="sv") returned 2 [0040.961] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.961] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned 125 [0040.961] lstrlenA (lpString="\\*.*") returned 4 [0040.961] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.961] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.962] lstrlenA (lpString="\\") returned 1 [0040.962] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.962] lstrlenA (lpString="th") returned 2 [0040.962] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.962] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned 125 [0040.962] lstrlenA (lpString="\\*.*") returned 4 [0040.962] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.962] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.962] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.962] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.963] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.963] LocalFree (hMem=0x6776f0) returned 0x0 [0040.963] LocalFree (hMem=0x6775e8) returned 0x0 [0040.963] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0040.963] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0040.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.963] lstrlenA (lpString="\\") returned 1 [0040.963] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.963] lstrlenA (lpString="tr") returned 2 [0040.963] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.963] LocalFree (hMem=0x6774e0) returned 0x0 [0040.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned 125 [0040.963] lstrlenA (lpString="\\*.*") returned 4 [0040.963] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.963] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.963] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.963] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.963] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.963] LocalFree (hMem=0x6776f0) returned 0x0 [0040.963] LocalFree (hMem=0x6775e8) returned 0x0 [0040.963] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0040.963] lstrcmpiA (lpString1="..", lpString2="uk") returned -1 [0040.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.963] lstrlenA (lpString="\\") returned 1 [0040.963] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.963] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.963] lstrlenA (lpString="uk") returned 2 [0040.963] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.964] LocalFree (hMem=0x6774e0) returned 0x0 [0040.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned 125 [0040.964] lstrlenA (lpString="\\*.*") returned 4 [0040.964] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.964] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.964] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.964] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.964] LocalFree (hMem=0x6776f0) returned 0x0 [0040.964] LocalFree (hMem=0x6775e8) returned 0x0 [0040.964] lstrcmpiA (lpString1=".", lpString2="vi") returned -1 [0040.964] lstrcmpiA (lpString1="..", lpString2="vi") returned -1 [0040.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.964] lstrlenA (lpString="\\") returned 1 [0040.964] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.964] lstrlenA (lpString="vi") returned 2 [0040.964] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6775e8 [0040.964] LocalFree (hMem=0x6774e0) returned 0x0 [0040.964] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned 125 [0040.964] lstrlenA (lpString="\\*.*") returned 4 [0040.964] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6776f0 [0040.964] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.964] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.964] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.965] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.965] LocalFree (hMem=0x6776f0) returned 0x0 [0040.965] LocalFree (hMem=0x6775e8) returned 0x0 [0040.965] lstrcmpiA (lpString1=".", lpString2="zh_CN") returned -1 [0040.965] lstrcmpiA (lpString1="..", lpString2="zh_CN") returned -1 [0040.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.965] lstrlenA (lpString="\\") returned 1 [0040.965] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.965] lstrlenA (lpString="zh_CN") returned 5 [0040.965] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.965] LocalFree (hMem=0x6774e0) returned 0x0 [0040.965] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned 128 [0040.965] lstrlenA (lpString="\\*.*") returned 4 [0040.966] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.966] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.966] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.966] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.966] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.967] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.967] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.967] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.968] LocalFree (hMem=0x6776f8) returned 0x0 [0040.968] LocalFree (hMem=0x6775e8) returned 0x0 [0040.968] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.968] lstrcmpiA (lpString1=".", lpString2="zh_TW") returned -1 [0040.968] lstrcmpiA (lpString1="..", lpString2="zh_TW") returned -1 [0040.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 122 [0040.968] lstrlenA (lpString="\\") returned 1 [0040.968] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6774e0 [0040.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned 123 [0040.968] lstrlenA (lpString="zh_TW") returned 5 [0040.968] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775e8 [0040.968] LocalFree (hMem=0x6774e0) returned 0x0 [0040.968] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned 128 [0040.969] lstrlenA (lpString="\\*.*") returned 4 [0040.969] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x6776f8 [0040.969] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0040.969] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.969] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.969] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.969] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.969] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.969] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0040.969] LocalFree (hMem=0x6776f8) returned 0x0 [0040.969] LocalFree (hMem=0x6775e8) returned 0x0 [0040.969] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.969] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.969] LocalFree (hMem=0x6773d8) returned 0x0 [0040.969] LocalFree (hMem=0x6772d0) returned 0x0 [0040.969] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.969] lstrcmpiA (lpString1=".", lpString2="_metadata") returned -1 [0040.969] lstrcmpiA (lpString1="..", lpString2="_metadata") returned -1 [0040.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 113 [0040.969] lstrlenA (lpString="\\") returned 1 [0040.969] LocalAlloc (uFlags=0x40, uBytes=0xf3) returned 0x6648c8 [0040.969] lstrcpyA (in: lpString1=0x6648c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0040.969] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0040.969] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned 114 [0040.969] lstrlenA (lpString="_metadata") returned 9 [0040.969] LocalAlloc (uFlags=0x40, uBytes=0xfc) returned 0x6772d0 [0040.969] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0040.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0040.970] LocalFree (hMem=0x6648c8) returned 0x0 [0040.970] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned 123 [0040.970] lstrlenA (lpString="\\*.*") returned 4 [0040.970] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6773d8 [0040.970] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0040.970] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*" [0040.970] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690128 [0040.970] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.970] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.970] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.970] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.970] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.970] StrStrIA (lpFirst="computed_hashes.json", lpSrch="Login Data") returned 0x0 [0040.970] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.970] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0040.970] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0040.970] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.970] LocalFree (hMem=0x6773d8) returned 0x0 [0040.970] LocalFree (hMem=0x6772d0) returned 0x0 [0040.970] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0040.970] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0040.970] LocalFree (hMem=0x6654c8) returned 0x0 [0040.970] LocalFree (hMem=0x664fc8) returned 0x0 [0040.970] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0040.970] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.970] LocalFree (hMem=0x6771d8) returned 0x0 [0040.970] LocalFree (hMem=0x69e108) returned 0x0 [0040.971] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0040.971] lstrcmpiA (lpString1=".", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0040.971] lstrcmpiA (lpString1="..", lpString2="apdfllckaahabafndbhieahigkjlhalf") returned -1 [0040.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0040.971] lstrlenA (lpString="\\") returned 1 [0040.971] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0040.971] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0040.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0040.971] lstrlenA (lpString="apdfllckaahabafndbhieahigkjlhalf") returned 32 [0040.971] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0040.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0040.971] LocalFree (hMem=0x69e030) returned 0x0 [0040.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 107 [0040.971] lstrlenA (lpString="\\*.*") returned 4 [0040.971] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0040.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*" [0040.971] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690228 [0040.971] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.971] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.971] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.971] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.971] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0040.971] lstrcmpiA (lpString1=".", lpString2="14.1_0") returned -1 [0040.971] lstrcmpiA (lpString1="..", lpString2="14.1_0") returned -1 [0040.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 107 [0040.971] lstrlenA (lpString="\\") returned 1 [0040.971] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0040.971] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0040.971] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned 108 [0040.971] lstrlenA (lpString="14.1_0") returned 6 [0040.971] lstrcpyA (in: lpString1=0x6640c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0040.972] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpString2="14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0040.972] LocalFree (hMem=0x6772d0) returned 0x0 [0040.972] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0040.972] lstrlenA (lpString="\\*.*") returned 4 [0040.972] lstrcpyA (in: lpString1=0x6649c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0040.972] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*" [0040.972] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x690268 [0040.972] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.972] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.972] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.972] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.972] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.972] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0040.972] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.972] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0040.972] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0040.972] lstrcmpiA (lpString1=".", lpString2="_locales") returned -1 [0040.972] lstrcmpiA (lpString1="..", lpString2="_locales") returned -1 [0040.972] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0040.972] lstrlenA (lpString="\\") returned 1 [0040.972] lstrcpyA (in: lpString1=0x664ac8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0040.972] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0040.972] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 115 [0040.972] lstrlenA (lpString="_locales") returned 8 [0040.972] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0040.972] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.972] LocalFree (hMem=0x664ac8) returned 0x0 [0040.972] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.972] lstrlenA (lpString="\\*.*") returned 4 [0040.972] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.973] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*" [0040.973] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x6906a8 [0040.973] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.973] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.973] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.973] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.973] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.973] lstrcmpiA (lpString1=".", lpString2="ar") returned -1 [0040.973] lstrcmpiA (lpString1="..", lpString2="ar") returned -1 [0040.973] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.973] lstrlenA (lpString="\\") returned 1 [0040.973] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.973] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.973] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.973] lstrlenA (lpString="ar") returned 2 [0040.973] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.973] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0040.974] LocalFree (hMem=0x6774e0) returned 0x0 [0040.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned 126 [0040.974] lstrlenA (lpString="\\*.*") returned 4 [0040.974] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0040.974] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*" [0040.974] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.974] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.974] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.974] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.974] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.974] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.974] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.974] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.974] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.974] LocalFree (hMem=0x6776f0) returned 0x0 [0040.974] LocalFree (hMem=0x6775e8) returned 0x0 [0040.974] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.974] lstrcmpiA (lpString1=".", lpString2="bg") returned -1 [0040.974] lstrcmpiA (lpString1="..", lpString2="bg") returned -1 [0040.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.974] lstrlenA (lpString="\\") returned 1 [0040.974] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.974] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.974] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.974] lstrlenA (lpString="bg") returned 2 [0040.974] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.975] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0040.975] LocalFree (hMem=0x6774e0) returned 0x0 [0040.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned 126 [0040.975] lstrlenA (lpString="\\*.*") returned 4 [0040.975] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0040.975] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*" [0040.975] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.975] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.975] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.975] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.975] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.975] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.975] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.975] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.975] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.975] LocalFree (hMem=0x6776f0) returned 0x0 [0040.975] LocalFree (hMem=0x6775e8) returned 0x0 [0040.975] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.975] lstrcmpiA (lpString1=".", lpString2="ca") returned -1 [0040.975] lstrcmpiA (lpString1="..", lpString2="ca") returned -1 [0040.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.975] lstrlenA (lpString="\\") returned 1 [0040.975] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.975] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.975] lstrlenA (lpString="ca") returned 2 [0040.975] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.975] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0040.975] LocalFree (hMem=0x6774e0) returned 0x0 [0040.975] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned 126 [0040.975] lstrlenA (lpString="\\*.*") returned 4 [0040.976] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0040.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*" [0040.976] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.976] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.976] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.976] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.976] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.976] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.976] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.976] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.976] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.976] LocalFree (hMem=0x6776f0) returned 0x0 [0040.976] LocalFree (hMem=0x6775e8) returned 0x0 [0040.976] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.976] lstrcmpiA (lpString1=".", lpString2="cs") returned -1 [0040.976] lstrcmpiA (lpString1="..", lpString2="cs") returned -1 [0040.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.976] lstrlenA (lpString="\\") returned 1 [0040.976] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.976] lstrlenA (lpString="cs") returned 2 [0040.976] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0040.976] LocalFree (hMem=0x6774e0) returned 0x0 [0040.976] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned 126 [0040.976] lstrlenA (lpString="\\*.*") returned 4 [0040.976] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0040.976] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*" [0040.977] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0040.977] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.977] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.977] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.977] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.977] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.977] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.977] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.977] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0040.977] LocalFree (hMem=0x6776f0) returned 0x0 [0040.977] LocalFree (hMem=0x6775e8) returned 0x0 [0040.977] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.977] lstrcmpiA (lpString1=".", lpString2="da") returned -1 [0040.977] lstrcmpiA (lpString1="..", lpString2="da") returned -1 [0040.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.977] lstrlenA (lpString="\\") returned 1 [0040.977] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.977] lstrlenA (lpString="da") returned 2 [0040.977] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0040.977] LocalFree (hMem=0x6774e0) returned 0x0 [0040.977] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned 126 [0040.977] lstrlenA (lpString="\\*.*") returned 4 [0040.977] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0040.977] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*" [0040.978] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0040.978] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.978] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.978] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.978] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.978] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.978] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.978] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.978] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0040.978] LocalFree (hMem=0x6776f0) returned 0x0 [0040.978] LocalFree (hMem=0x6775e8) returned 0x0 [0040.978] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.978] lstrcmpiA (lpString1=".", lpString2="de") returned -1 [0040.978] lstrcmpiA (lpString1="..", lpString2="de") returned -1 [0040.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0040.978] lstrlenA (lpString="\\") returned 1 [0040.978] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.978] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.978] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0040.978] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.978] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0040.978] LocalFree (hMem=0x6774e0) returned 0x0 [0040.978] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0040.978] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*" [0040.978] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0040.979] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.979] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.979] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.979] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.979] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.979] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.979] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.979] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0040.979] LocalFree (hMem=0x6776f0) returned 0x0 [0040.979] LocalFree (hMem=0x6775e8) returned 0x0 [0040.979] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.979] lstrcmpiA (lpString1=".", lpString2="el") returned -1 [0040.979] lstrcmpiA (lpString1="..", lpString2="el") returned -1 [0040.979] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.979] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0040.979] LocalFree (hMem=0x6774e0) returned 0x0 [0040.979] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0040.979] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*" [0040.979] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.979] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.979] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.979] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.979] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.980] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.980] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.980] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.980] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.980] LocalFree (hMem=0x6776f0) returned 0x0 [0040.980] LocalFree (hMem=0x6775e8) returned 0x0 [0040.980] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.980] lstrcmpiA (lpString1=".", lpString2="en_GB") returned -1 [0040.980] lstrcmpiA (lpString1="..", lpString2="en_GB") returned -1 [0040.980] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.980] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.980] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.980] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0040.980] LocalFree (hMem=0x6774e0) returned 0x0 [0040.980] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0040.980] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*" [0040.980] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0040.980] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.980] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.980] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.980] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.980] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.980] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.980] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.980] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0040.981] LocalFree (hMem=0x6776f8) returned 0x0 [0040.981] LocalFree (hMem=0x6775e8) returned 0x0 [0040.981] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.981] lstrcmpiA (lpString1=".", lpString2="en_US") returned -1 [0040.981] lstrcmpiA (lpString1="..", lpString2="en_US") returned -1 [0040.981] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.981] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0040.981] LocalFree (hMem=0x6774e0) returned 0x0 [0040.981] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0040.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*" [0040.981] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.981] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.981] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.981] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.981] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.981] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.981] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.981] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.981] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.981] LocalFree (hMem=0x6776f8) returned 0x0 [0040.981] LocalFree (hMem=0x6775e8) returned 0x0 [0040.981] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.981] lstrcmpiA (lpString1=".", lpString2="es") returned -1 [0040.981] lstrcmpiA (lpString1="..", lpString2="es") returned -1 [0040.981] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.981] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.981] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0040.982] LocalFree (hMem=0x6774e0) returned 0x0 [0040.982] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0040.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*" [0040.982] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.982] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.982] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.982] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.982] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.982] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.982] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.982] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.982] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.982] LocalFree (hMem=0x6776f0) returned 0x0 [0040.982] LocalFree (hMem=0x6775e8) returned 0x0 [0040.982] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.982] lstrcmpiA (lpString1=".", lpString2="es_419") returned -1 [0040.982] lstrcmpiA (lpString1="..", lpString2="es_419") returned -1 [0040.982] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.982] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0040.982] LocalFree (hMem=0x6774e0) returned 0x0 [0040.982] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0040.982] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*" [0040.983] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.983] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.983] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.983] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.983] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.983] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.983] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.983] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.983] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.983] LocalFree (hMem=0x6776f8) returned 0x0 [0040.983] LocalFree (hMem=0x6775e8) returned 0x0 [0040.983] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.983] lstrcmpiA (lpString1=".", lpString2="et") returned -1 [0040.983] lstrcmpiA (lpString1="..", lpString2="et") returned -1 [0040.983] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.983] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0040.983] LocalFree (hMem=0x6774e0) returned 0x0 [0040.983] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0040.983] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*" [0040.983] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.983] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.983] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.983] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.984] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.984] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.984] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.984] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.984] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.984] LocalFree (hMem=0x6776f0) returned 0x0 [0040.984] LocalFree (hMem=0x6775e8) returned 0x0 [0040.984] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.984] lstrcmpiA (lpString1=".", lpString2="eu") returned -1 [0040.984] lstrcmpiA (lpString1="..", lpString2="eu") returned -1 [0040.984] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.984] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0040.984] LocalFree (hMem=0x6774e0) returned 0x0 [0040.984] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0040.984] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*" [0040.984] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.984] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.984] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.985] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.985] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.985] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.985] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.985] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.985] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.985] LocalFree (hMem=0x6776f0) returned 0x0 [0040.985] LocalFree (hMem=0x6775e8) returned 0x0 [0040.985] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.985] lstrcmpiA (lpString1=".", lpString2="fi") returned -1 [0040.985] lstrcmpiA (lpString1="..", lpString2="fi") returned -1 [0040.985] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.985] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0040.985] LocalFree (hMem=0x6774e0) returned 0x0 [0040.985] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0040.985] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*" [0040.985] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.985] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.985] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.985] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.985] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.985] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.985] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.985] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.985] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.985] LocalFree (hMem=0x6776f0) returned 0x0 [0040.986] LocalFree (hMem=0x6775e8) returned 0x0 [0040.986] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.986] lstrcmpiA (lpString1=".", lpString2="fil") returned -1 [0040.986] lstrcmpiA (lpString1="..", lpString2="fil") returned -1 [0040.986] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.986] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0040.986] LocalFree (hMem=0x6774e0) returned 0x0 [0040.986] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0040.986] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*" [0040.986] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0040.986] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.986] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.986] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.986] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.986] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.986] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.986] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.986] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0040.986] LocalFree (hMem=0x6776f0) returned 0x0 [0040.986] LocalFree (hMem=0x6775e8) returned 0x0 [0040.986] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.986] lstrcmpiA (lpString1=".", lpString2="fr") returned -1 [0040.986] lstrcmpiA (lpString1="..", lpString2="fr") returned -1 [0040.987] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.987] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.988] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0040.988] LocalFree (hMem=0x6774e0) returned 0x0 [0040.988] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0040.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*" [0040.988] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.988] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.988] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.988] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.988] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.988] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.988] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.988] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.988] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.988] LocalFree (hMem=0x6776f0) returned 0x0 [0040.988] LocalFree (hMem=0x6775e8) returned 0x0 [0040.988] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.988] lstrcmpiA (lpString1=".", lpString2="he") returned -1 [0040.988] lstrcmpiA (lpString1="..", lpString2="he") returned -1 [0040.988] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.988] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.988] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.988] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.988] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0040.988] LocalFree (hMem=0x6774e0) returned 0x0 [0040.988] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.989] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0040.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*" [0040.989] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.989] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.989] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.989] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.989] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.989] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.989] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.989] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.989] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.989] LocalFree (hMem=0x6776f0) returned 0x0 [0040.989] LocalFree (hMem=0x6775e8) returned 0x0 [0040.989] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.989] lstrcmpiA (lpString1=".", lpString2="hi") returned -1 [0040.989] lstrcmpiA (lpString1="..", lpString2="hi") returned -1 [0040.989] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.989] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.989] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.989] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0040.989] LocalFree (hMem=0x6774e0) returned 0x0 [0040.989] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.989] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0040.989] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*" [0040.989] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.990] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.990] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.990] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.990] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.990] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.990] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.990] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.990] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.990] LocalFree (hMem=0x6776f0) returned 0x0 [0040.990] LocalFree (hMem=0x6775e8) returned 0x0 [0040.990] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.990] lstrcmpiA (lpString1=".", lpString2="hr") returned -1 [0040.990] lstrcmpiA (lpString1="..", lpString2="hr") returned -1 [0040.990] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.990] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.990] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.990] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0040.990] LocalFree (hMem=0x6774e0) returned 0x0 [0040.990] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.990] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0040.990] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*" [0040.990] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0040.990] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.990] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.990] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.991] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.991] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.991] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.991] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.991] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0040.991] LocalFree (hMem=0x6776f0) returned 0x0 [0040.991] LocalFree (hMem=0x6775e8) returned 0x0 [0040.991] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.991] lstrcmpiA (lpString1=".", lpString2="hu") returned -1 [0040.991] lstrcmpiA (lpString1="..", lpString2="hu") returned -1 [0040.991] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.991] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.991] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.991] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.991] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.991] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0040.991] LocalFree (hMem=0x6774e0) returned 0x0 [0040.991] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.991] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0040.991] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*" [0040.991] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0040.991] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.991] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.991] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.991] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.991] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.991] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.991] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.992] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0040.992] LocalFree (hMem=0x6776f0) returned 0x0 [0040.992] LocalFree (hMem=0x6775e8) returned 0x0 [0040.992] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.992] lstrcmpiA (lpString1=".", lpString2="id") returned -1 [0040.992] lstrcmpiA (lpString1="..", lpString2="id") returned -1 [0040.992] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.992] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.992] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.992] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.992] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.992] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0040.992] LocalFree (hMem=0x6774e0) returned 0x0 [0040.992] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.992] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0040.992] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*" [0040.992] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.992] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.992] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.992] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.992] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.992] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.992] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.992] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.992] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.993] LocalFree (hMem=0x6776f0) returned 0x0 [0040.993] LocalFree (hMem=0x6775e8) returned 0x0 [0040.993] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.993] lstrcmpiA (lpString1=".", lpString2="it") returned -1 [0040.993] lstrcmpiA (lpString1="..", lpString2="it") returned -1 [0040.993] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.993] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.993] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.993] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0040.993] LocalFree (hMem=0x6774e0) returned 0x0 [0040.993] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.993] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0040.993] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*" [0040.993] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0040.993] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.993] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.993] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.993] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.993] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.993] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.993] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.993] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0040.993] LocalFree (hMem=0x6776f0) returned 0x0 [0040.993] LocalFree (hMem=0x6775e8) returned 0x0 [0040.993] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.994] lstrcmpiA (lpString1=".", lpString2="ja") returned -1 [0040.994] lstrcmpiA (lpString1="..", lpString2="ja") returned -1 [0040.994] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.994] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.994] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.994] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0040.994] LocalFree (hMem=0x6774e0) returned 0x0 [0040.994] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.994] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0040.994] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*" [0040.994] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.994] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.994] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.994] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.994] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.994] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.994] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.994] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.994] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.994] LocalFree (hMem=0x6776f0) returned 0x0 [0040.994] LocalFree (hMem=0x6775e8) returned 0x0 [0040.995] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.995] lstrcmpiA (lpString1=".", lpString2="ko") returned -1 [0040.995] lstrcmpiA (lpString1="..", lpString2="ko") returned -1 [0040.995] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.995] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.995] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.995] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0040.995] LocalFree (hMem=0x6774e0) returned 0x0 [0040.995] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0040.995] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0040.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*" [0040.995] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0040.995] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.995] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.995] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.995] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.995] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.995] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.995] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.995] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0040.995] LocalFree (hMem=0x6776f0) returned 0x0 [0040.995] LocalFree (hMem=0x6775e8) returned 0x0 [0040.995] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.995] lstrcmpiA (lpString1=".", lpString2="lt") returned -1 [0040.995] lstrcmpiA (lpString1="..", lpString2="lt") returned -1 [0040.995] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0040.995] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.995] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.996] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0040.996] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0040.996] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0040.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*" [0040.996] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0040.996] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.996] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.996] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.996] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.996] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.996] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.996] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.996] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0040.996] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.996] lstrcmpiA (lpString1=".", lpString2="lv") returned -1 [0040.996] lstrcmpiA (lpString1="..", lpString2="lv") returned -1 [0040.996] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.996] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0040.996] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0040.996] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*" [0040.996] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0040.997] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.997] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.997] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.997] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.997] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.997] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.997] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.997] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0040.997] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.997] lstrcmpiA (lpString1=".", lpString2="ms") returned -1 [0040.997] lstrcmpiA (lpString1="..", lpString2="ms") returned -1 [0040.997] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.997] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0040.997] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0040.997] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*" [0040.997] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690328 [0040.997] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.997] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.997] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.997] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.997] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.998] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.998] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.998] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0040.998] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.998] lstrcmpiA (lpString1=".", lpString2="nl") returned -1 [0040.998] lstrcmpiA (lpString1="..", lpString2="nl") returned -1 [0040.998] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.998] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.998] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.998] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0040.998] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0040.998] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*" [0040.998] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0040.998] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.998] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.998] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.998] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.998] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.998] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.998] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.998] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0040.998] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.998] lstrcmpiA (lpString1=".", lpString2="no") returned -1 [0040.998] lstrcmpiA (lpString1="..", lpString2="no") returned -1 [0040.998] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.998] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.999] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0040.999] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0040.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*" [0040.999] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0040.999] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0040.999] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.999] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0040.999] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0040.999] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0040.999] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0040.999] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0040.999] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0040.999] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0040.999] lstrcmpiA (lpString1=".", lpString2="pl") returned -1 [0040.999] lstrcmpiA (lpString1="..", lpString2="pl") returned -1 [0040.999] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0040.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.999] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0040.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0040.999] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0040.999] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*" [0040.999] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0041.000] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.000] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.000] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.000] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.000] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.000] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.000] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.000] FindClose (in: hFindFile=0x690368 | out: hFindFile=0x690368) returned 1 [0041.000] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.000] lstrcmpiA (lpString1=".", lpString2="pt_BR") returned -1 [0041.000] lstrcmpiA (lpString1="..", lpString2="pt_BR") returned -1 [0041.000] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.003] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.003] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0041.004] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0041.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*" [0041.004] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690668 [0041.004] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.004] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.004] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.004] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.004] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.004] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.004] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.004] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0041.004] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.004] lstrcmpiA (lpString1=".", lpString2="pt_PT") returned -1 [0041.004] lstrcmpiA (lpString1="..", lpString2="pt_PT") returned -1 [0041.004] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.004] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0041.004] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0041.004] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*" [0041.004] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0041.005] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.005] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.005] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.005] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.005] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.005] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.005] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.005] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0041.005] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.005] lstrcmpiA (lpString1=".", lpString2="ro") returned -1 [0041.005] lstrcmpiA (lpString1="..", lpString2="ro") returned -1 [0041.005] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.005] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0041.005] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0041.005] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*" [0041.005] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6903a8 [0041.005] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.005] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.005] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.005] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.005] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.005] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.006] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.006] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0041.006] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.006] lstrcmpiA (lpString1=".", lpString2="ru") returned -1 [0041.006] lstrcmpiA (lpString1="..", lpString2="ru") returned -1 [0041.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.006] lstrlenA (lpString="\\") returned 1 [0041.006] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.006] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.006] lstrlenA (lpString="ru") returned 2 [0041.006] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.006] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0041.006] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned 126 [0041.006] lstrlenA (lpString="\\*.*") returned 4 [0041.006] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.006] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0041.006] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*" [0041.006] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0041.006] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.006] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.006] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.006] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.006] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.006] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.006] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.006] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.007] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.007] lstrcmpiA (lpString1=".", lpString2="sk") returned -1 [0041.007] lstrcmpiA (lpString1="..", lpString2="sk") returned -1 [0041.007] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.007] lstrlenA (lpString="\\") returned 1 [0041.007] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.007] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.007] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.007] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.007] lstrlenA (lpString="sk") returned 2 [0041.007] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.007] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.007] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0041.007] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned 126 [0041.007] lstrlenA (lpString="\\*.*") returned 4 [0041.007] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.007] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0041.007] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*" [0041.007] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0041.007] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.007] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.007] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.007] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.007] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.007] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.007] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.007] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0041.007] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.007] lstrcmpiA (lpString1=".", lpString2="sl") returned -1 [0041.007] lstrcmpiA (lpString1="..", lpString2="sl") returned -1 [0041.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.008] lstrlenA (lpString="\\") returned 1 [0041.008] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.008] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.008] lstrlenA (lpString="sl") returned 2 [0041.008] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.008] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0041.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned 126 [0041.008] lstrlenA (lpString="\\*.*") returned 4 [0041.008] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.008] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0041.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*" [0041.008] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68ff68 [0041.008] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.008] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.008] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.008] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.008] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.008] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.008] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.008] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.008] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.008] lstrcmpiA (lpString1=".", lpString2="sr") returned -1 [0041.008] lstrcmpiA (lpString1="..", lpString2="sr") returned -1 [0041.008] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.008] lstrlenA (lpString="\\") returned 1 [0041.008] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.008] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.008] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.009] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.009] lstrlenA (lpString="sr") returned 2 [0041.009] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.009] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.009] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0041.009] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned 126 [0041.009] lstrlenA (lpString="\\*.*") returned 4 [0041.009] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.009] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0041.009] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*" [0041.009] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6904a8 [0041.009] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.009] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.009] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.009] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.009] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.009] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.009] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.009] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0041.009] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.009] lstrcmpiA (lpString1=".", lpString2="sv") returned -1 [0041.009] lstrcmpiA (lpString1="..", lpString2="sv") returned -1 [0041.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.010] lstrlenA (lpString="\\") returned 1 [0041.010] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.010] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.010] lstrlenA (lpString="sv") returned 2 [0041.010] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.010] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0041.010] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned 126 [0041.010] lstrlenA (lpString="\\*.*") returned 4 [0041.010] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.010] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0041.010] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*" [0041.010] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0041.010] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.010] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.010] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.010] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.010] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.010] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.010] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.010] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.010] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.010] lstrcmpiA (lpString1=".", lpString2="th") returned -1 [0041.010] lstrcmpiA (lpString1="..", lpString2="th") returned -1 [0041.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.011] lstrlenA (lpString="\\") returned 1 [0041.011] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.011] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.011] lstrlenA (lpString="th") returned 2 [0041.011] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.011] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0041.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned 126 [0041.011] lstrlenA (lpString="\\*.*") returned 4 [0041.011] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.011] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0041.011] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*" [0041.011] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0041.011] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.011] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.011] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.011] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.011] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.011] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.011] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.011] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0041.011] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.011] lstrcmpiA (lpString1=".", lpString2="tr") returned -1 [0041.011] lstrcmpiA (lpString1="..", lpString2="tr") returned -1 [0041.011] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.011] lstrlenA (lpString="\\") returned 1 [0041.011] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.012] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.012] lstrlenA (lpString="tr") returned 2 [0041.012] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.012] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0041.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned 126 [0041.012] lstrlenA (lpString="\\*.*") returned 4 [0041.012] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.012] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0041.012] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*" [0041.012] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0041.012] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.012] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.012] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.012] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.012] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.012] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.012] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.012] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.012] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.012] lstrcmpiA (lpString1=".", lpString2="uk") returned -1 [0041.012] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.013] lstrlenA (lpString="\\") returned 1 [0041.013] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.013] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.013] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.013] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.013] lstrlenA (lpString="uk") returned 2 [0041.013] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.013] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.013] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0041.013] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned 126 [0041.013] lstrlenA (lpString="\\*.*") returned 4 [0041.013] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.013] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0041.013] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*" [0041.013] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0041.013] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.013] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.013] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.013] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.013] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.013] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.013] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.013] lstrlenA (lpString="\\") returned 1 [0041.013] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.014] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.014] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.014] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.014] lstrlenA (lpString="vi") returned 2 [0041.014] LocalAlloc (uFlags=0x40, uBytes=0xff) returned 0x6775e8 [0041.014] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.014] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0041.014] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned 126 [0041.014] lstrlenA (lpString="\\*.*") returned 4 [0041.014] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6776f0 [0041.014] lstrcpyA (in: lpString1=0x6776f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0041.014] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*" [0041.014] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0041.014] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.014] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.014] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.014] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.014] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0041.014] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.014] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.014] lstrlenA (lpString="\\") returned 1 [0041.014] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.014] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.014] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.014] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.014] lstrlenA (lpString="zh_CN") returned 5 [0041.014] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0041.014] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.014] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0041.015] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned 129 [0041.015] lstrlenA (lpString="\\*.*") returned 4 [0041.015] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0041.015] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0041.015] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*" [0041.015] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6900e8 [0041.015] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.015] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.015] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.015] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.015] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.015] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.015] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 123 [0041.015] lstrlenA (lpString="\\") returned 1 [0041.015] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6774e0 [0041.015] lstrcpyA (in: lpString1=0x6774e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0041.015] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.015] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned 124 [0041.015] lstrlenA (lpString="zh_TW") returned 5 [0041.015] LocalAlloc (uFlags=0x40, uBytes=0x102) returned 0x6775e8 [0041.015] lstrcpyA (in: lpString1=0x6775e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0041.015] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpString2="zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0041.015] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned 129 [0041.015] lstrlenA (lpString="\\*.*") returned 4 [0041.015] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x6776f8 [0041.015] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0041.015] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*" [0041.016] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0041.016] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.016] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.016] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.016] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.016] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0041.016] FindNextFileA (in: hFindFile=0x6906a8, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0041.016] FindClose (in: hFindFile=0x6906a8 | out: hFindFile=0x6906a8) returned 1 [0041.016] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.016] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 114 [0041.016] lstrlenA (lpString="\\") returned 1 [0041.016] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x6659c8 [0041.016] lstrcpyA (in: lpString1=0x6659c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0041.016] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0041.016] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned 115 [0041.016] lstrlenA (lpString="_metadata") returned 9 [0041.016] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6772d0 [0041.016] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0041.016] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpString2="_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0041.016] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned 124 [0041.016] lstrlenA (lpString="\\*.*") returned 4 [0041.016] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6773d8 [0041.016] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0041.016] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*" [0041.016] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x68ff68 [0041.017] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.017] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.017] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0041.017] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0041.017] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.017] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0041.017] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0041.017] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.017] FindClose (in: hFindFile=0x690228 | out: hFindFile=0x690228) returned 1 [0041.017] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.017] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 74 [0041.017] lstrlenA (lpString="\\") returned 1 [0041.017] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e030 [0041.017] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0041.017] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0041.017] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned 75 [0041.017] lstrlenA (lpString="blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 32 [0041.017] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x69e108 [0041.017] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0041.017] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpString2="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0041.017] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 107 [0041.017] lstrlenA (lpString="\\*.*") returned 4 [0041.017] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x6771d8 [0041.017] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0041.018] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*" [0041.018] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6900e8 [0041.018] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.018] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.018] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 107 [0041.018] lstrlenA (lpString="\\") returned 1 [0041.018] LocalAlloc (uFlags=0x40, uBytes=0xed) returned 0x6772d0 [0041.018] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0041.018] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0041.018] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned 108 [0041.018] lstrlenA (lpString="4.2.8_0") returned 7 [0041.018] LocalAlloc (uFlags=0x40, uBytes=0xf4) returned 0x663dc8 [0041.018] lstrcpyA (in: lpString1=0x663dc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0041.018] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpString2="4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0041.018] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 115 [0041.018] lstrlenA (lpString="\\*.*") returned 4 [0041.018] LocalAlloc (uFlags=0x40, uBytes=0xf8) returned 0x6643c8 [0041.018] lstrcpyA (in: lpString1=0x6643c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0041.018] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*" [0041.018] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x68ff68 [0041.018] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.018] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.018] StrStrIA (lpFirst="128.png", lpSrch="Login Data") returned 0x0 [0041.018] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.018] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0041.018] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.018] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 115 [0041.018] lstrlenA (lpString="\\") returned 1 [0041.019] LocalAlloc (uFlags=0x40, uBytes=0xf5) returned 0x6644c8 [0041.019] lstrcpyA (in: lpString1=0x6644c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0041.019] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0041.019] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned 116 [0041.019] lstrlenA (lpString="_locales") returned 8 [0041.019] LocalAlloc (uFlags=0x40, uBytes=0xfd) returned 0x6772d0 [0041.019] lstrcpyA (in: lpString1=0x6772d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0041.019] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpString2="_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.019] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.019] lstrlenA (lpString="\\*.*") returned 4 [0041.019] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6773d8 [0041.019] lstrcpyA (in: lpString1=0x6773d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.019] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*" [0041.019] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690228 [0041.019] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.019] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.020] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.020] lstrlenA (lpString="\\") returned 1 [0041.020] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.020] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.020] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.020] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.020] lstrlenA (lpString="ar") returned 2 [0041.020] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.020] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.020] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0041.020] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned 127 [0041.020] lstrlenA (lpString="\\*.*") returned 4 [0041.020] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.020] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0041.020] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*" [0041.020] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.020] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.020] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.020] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.020] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.020] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0041.020] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.020] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.020] lstrlenA (lpString="\\") returned 1 [0041.020] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.020] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.020] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.020] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.021] lstrlenA (lpString="bg") returned 2 [0041.021] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.021] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.021] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0041.021] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned 127 [0041.021] lstrlenA (lpString="\\*.*") returned 4 [0041.021] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.021] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0041.021] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*" [0041.021] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.021] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.021] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.021] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.021] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.021] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0041.021] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.021] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.021] lstrlenA (lpString="\\") returned 1 [0041.021] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.021] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.021] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.021] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.021] lstrlenA (lpString="ca") returned 2 [0041.021] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.022] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0041.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned 127 [0041.022] lstrlenA (lpString="\\*.*") returned 4 [0041.022] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.022] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0041.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*" [0041.022] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0041.022] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.022] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.022] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.022] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.022] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0041.022] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.022] lstrlenA (lpString="\\") returned 1 [0041.022] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.022] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.022] lstrlenA (lpString="cs") returned 2 [0041.022] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.022] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.022] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0041.022] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned 127 [0041.022] lstrlenA (lpString="\\*.*") returned 4 [0041.022] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.023] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0041.023] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*" [0041.023] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0041.023] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.023] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.023] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.023] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.023] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0041.024] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.024] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.024] lstrlenA (lpString="\\") returned 1 [0041.024] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.024] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.024] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.024] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.024] lstrlenA (lpString="da") returned 2 [0041.024] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.024] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.024] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0041.024] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned 127 [0041.024] lstrlenA (lpString="\\*.*") returned 4 [0041.024] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.024] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0041.024] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*" [0041.024] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.025] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.025] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.025] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.025] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.025] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0041.025] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.025] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.025] lstrlenA (lpString="\\") returned 1 [0041.025] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.025] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.025] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.025] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.025] lstrlenA (lpString="de") returned 2 [0041.025] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.025] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.025] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0041.025] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned 127 [0041.025] lstrlenA (lpString="\\*.*") returned 4 [0041.025] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.025] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0041.025] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*" [0041.043] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690568 [0041.043] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.043] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.043] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.043] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.043] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0041.043] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.043] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.043] lstrlenA (lpString="\\") returned 1 [0041.043] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.043] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.043] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.043] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.043] lstrlenA (lpString="el") returned 2 [0041.043] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.043] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.043] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0041.043] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned 127 [0041.043] lstrlenA (lpString="\\*.*") returned 4 [0041.043] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.043] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0041.043] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*" [0041.043] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.044] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.044] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0041.044] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.044] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.044] lstrlenA (lpString="\\") returned 1 [0041.044] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.044] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.044] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.044] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.044] lstrlenA (lpString="en") returned 2 [0041.044] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.044] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.044] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0041.044] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned 127 [0041.044] lstrlenA (lpString="\\*.*") returned 4 [0041.044] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.044] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0041.044] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*" [0041.044] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.044] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.044] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.045] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0041.045] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.045] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.045] lstrlenA (lpString="\\") returned 1 [0041.045] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.045] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.045] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.045] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.045] lstrlenA (lpString="es") returned 2 [0041.045] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.045] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.045] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0041.045] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned 127 [0041.045] lstrlenA (lpString="\\*.*") returned 4 [0041.045] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.045] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0041.045] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*" [0041.045] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0041.045] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.045] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.045] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.045] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.045] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.046] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.046] lstrlenA (lpString="\\") returned 1 [0041.046] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.046] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.046] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.046] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.046] lstrlenA (lpString="fi") returned 2 [0041.046] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.046] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.046] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0041.046] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned 127 [0041.046] lstrlenA (lpString="\\*.*") returned 4 [0041.046] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.046] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0041.046] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*" [0041.046] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0041.047] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.047] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.047] lstrlenA (lpString="\\") returned 1 [0041.047] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.047] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.047] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.047] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.047] lstrlenA (lpString="fil") returned 3 [0041.047] LocalAlloc (uFlags=0x40, uBytes=0x101) returned 0x6775f0 [0041.047] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.047] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0041.047] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned 128 [0041.047] lstrlenA (lpString="\\*.*") returned 4 [0041.047] LocalAlloc (uFlags=0x40, uBytes=0x105) returned 0x677700 [0041.047] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0041.047] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*" [0041.048] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.048] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.048] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.048] lstrlenA (lpString="\\") returned 1 [0041.048] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.048] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.048] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.048] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.048] lstrlenA (lpString="fr") returned 2 [0041.048] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.048] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.048] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0041.048] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned 127 [0041.048] lstrlenA (lpString="\\*.*") returned 4 [0041.048] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.048] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0041.048] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*" [0041.049] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.049] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.049] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.049] lstrlenA (lpString="\\") returned 1 [0041.049] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.049] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.049] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.049] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.049] lstrlenA (lpString="he") returned 2 [0041.049] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.049] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.049] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0041.049] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned 127 [0041.049] lstrlenA (lpString="\\*.*") returned 4 [0041.049] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.049] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0041.049] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*" [0041.049] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0041.049] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.050] lstrlenA (lpString="\\") returned 1 [0041.050] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.050] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.050] lstrlenA (lpString="hi") returned 2 [0041.050] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.050] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned 127 [0041.050] lstrlenA (lpString="\\*.*") returned 4 [0041.050] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.050] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0041.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*" [0041.050] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.050] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.050] lstrlenA (lpString="\\") returned 1 [0041.050] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.050] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.050] lstrlenA (lpString="hr") returned 2 [0041.050] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.050] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.050] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0041.050] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned 127 [0041.051] lstrlenA (lpString="\\*.*") returned 4 [0041.051] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.051] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0041.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*" [0041.051] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690368 [0041.051] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.051] lstrlenA (lpString="\\") returned 1 [0041.051] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.051] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.051] lstrlenA (lpString="hu") returned 2 [0041.051] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.051] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0041.051] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned 127 [0041.051] lstrlenA (lpString="\\*.*") returned 4 [0041.051] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.051] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0041.051] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*" [0041.051] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6901a8 [0041.051] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.052] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.052] lstrlenA (lpString="\\") returned 1 [0041.052] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.052] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.052] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.052] lstrlenA (lpString="id") returned 2 [0041.052] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.052] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0041.052] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned 127 [0041.052] lstrlenA (lpString="\\*.*") returned 4 [0041.052] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.052] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0041.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*" [0041.052] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0041.052] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.052] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.052] lstrlenA (lpString="\\") returned 1 [0041.052] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.052] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.052] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.052] lstrlenA (lpString="it") returned 2 [0041.052] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.052] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.052] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0041.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned 127 [0041.053] lstrlenA (lpString="\\*.*") returned 4 [0041.053] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.053] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0041.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*" [0041.053] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0041.053] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.053] lstrlenA (lpString="\\") returned 1 [0041.053] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.053] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.053] lstrlenA (lpString="ja") returned 2 [0041.053] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.053] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0041.053] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned 127 [0041.053] lstrlenA (lpString="\\*.*") returned 4 [0041.053] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.053] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0041.053] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*" [0041.053] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x68fee8 [0041.053] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.054] lstrlenA (lpString="\\") returned 1 [0041.054] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.054] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.054] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.054] lstrlenA (lpString="ko") returned 2 [0041.054] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.054] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.054] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned 127 [0041.054] lstrlenA (lpString="\\*.*") returned 4 [0041.054] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.054] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0041.054] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*" [0041.054] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0041.054] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.054] lstrlenA (lpString="\\") returned 1 [0041.054] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.054] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.054] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.054] lstrlenA (lpString="lt") returned 2 [0041.054] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.054] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.054] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0041.054] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned 127 [0041.054] lstrlenA (lpString="\\*.*") returned 4 [0041.055] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.055] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0041.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*" [0041.055] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.055] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.055] lstrlenA (lpString="\\") returned 1 [0041.055] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.055] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.055] lstrlenA (lpString="lv") returned 2 [0041.055] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.055] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0041.055] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned 127 [0041.055] lstrlenA (lpString="\\*.*") returned 4 [0041.055] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.055] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0041.055] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*" [0041.055] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0041.055] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.056] lstrlenA (lpString="\\") returned 1 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.056] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.056] lstrlenA (lpString="nl") returned 2 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.056] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned 127 [0041.056] lstrlenA (lpString="\\*.*") returned 4 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.056] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0041.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*" [0041.056] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.056] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.056] lstrlenA (lpString="\\") returned 1 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.056] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.056] lstrlenA (lpString="no") returned 2 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.056] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.056] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0041.056] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned 127 [0041.056] lstrlenA (lpString="\\*.*") returned 4 [0041.056] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.057] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0041.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*" [0041.057] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690528 [0041.057] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.057] lstrlenA (lpString="\\") returned 1 [0041.057] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.057] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.057] lstrlenA (lpString="pl") returned 2 [0041.057] LocalAlloc (uFlags=0x40, uBytes=0x100) returned 0x6775f0 [0041.057] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0041.057] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned 127 [0041.057] lstrlenA (lpString="\\*.*") returned 4 [0041.057] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x6776f8 [0041.057] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0041.057] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*" [0041.057] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6906a8 [0041.058] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.058] lstrlenA (lpString="\\") returned 1 [0041.058] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.058] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.058] lstrlenA (lpString="pt_BR") returned 5 [0041.058] LocalAlloc (uFlags=0x40, uBytes=0x103) returned 0x6775f0 [0041.058] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0041.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned 130 [0041.058] lstrlenA (lpString="\\*.*") returned 4 [0041.058] LocalAlloc (uFlags=0x40, uBytes=0x107) returned 0x677700 [0041.058] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0041.058] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*" [0041.058] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0041.058] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.058] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 124 [0041.058] lstrlenA (lpString="\\") returned 1 [0041.058] LocalAlloc (uFlags=0x40, uBytes=0xfe) returned 0x6774e8 [0041.058] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.059] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned 125 [0041.059] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0041.059] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*" [0041.059] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690468 [0041.059] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.059] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.059] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0041.059] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0041.059] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*" [0041.059] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690268 [0041.059] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.059] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.060] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0041.060] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*" [0041.060] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690128 [0041.060] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.060] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.060] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0041.060] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*" [0041.060] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x690168 [0041.060] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.060] lstrcpyA (in: lpString1=0x6774e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0041.060] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.061] lstrcpyA (in: lpString1=0x6775f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0041.061] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpString2="sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0041.061] lstrcpyA (in: lpString1=0x6776f8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0041.061] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*" [0041.061] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6902e8 [0041.061] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.062] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.062] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.062] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.062] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="verified_contents.json", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="icon_128.png", lpSrch="Login Data") returned 0x0 [0041.063] StrStrIA (lpFirst="icon_16.png", lpSrch="Login Data") returned 0x0 [0041.064] StrStrIA (lpFirst="main.html", lpSrch="Login Data") returned 0x0 [0041.064] StrStrIA (lpFirst="main.js", lpSrch="Login Data") returned 0x0 [0041.064] StrStrIA (lpFirst="manifest.json", lpSrch="Login Data") returned 0x0 [0041.064] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.065] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.065] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.065] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.065] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.065] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.066] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.066] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.066] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.066] StrStrIA (lpFirst="messages.json", lpSrch="Login Data") returned 0x0 [0041.100] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19fa58 | out: ppstm=0x19fa58*=0x6601a0) returned 0x0 [0041.101] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0041.101] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0041.103] ISequentialStream:RemoteWrite (in: This=0x6601a0, pv=0x19ea40*=0x53, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0041.103] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0041.103] ISequentialStream:RemoteWrite (in: This=0x6601a0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0041.103] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0041.103] ISequentialStream:RemoteWrite (in: This=0x6601a0, pv=0x19ea40*=0xa, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0041.103] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x1000, lpOverlapped=0x0) returned 1 [0041.103] ISequentialStream:RemoteWrite (in: This=0x6601a0, pv=0x19ea40*=0xd, cb=0x1000, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x1000) returned 0x0 [0041.103] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x800, lpOverlapped=0x0) returned 1 [0041.103] ISequentialStream:RemoteWrite (in: This=0x6601a0, pv=0x19ea40*=0xa, cb=0x800, pcbWritten=0x19ea28 | out: pcbWritten=0x19ea28*=0x800) returned 0x0 [0041.103] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x0, lpOverlapped=0x0) returned 1 [0041.103] CloseHandle (hObject=0x328) returned 1 [0041.103] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.103] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.103] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.103] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.103] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa38, cb=0x10, pcbRead=0x19fa1c | out: pv=0x19fa38*=0x53, pcbRead=0x19fa1c*=0x10) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x10, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.104] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa22, cb=0x2, pcbRead=0x19f9f0 | out: pv=0x19fa22*=0x8, pcbRead=0x19f9f0*=0x2) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x12, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.104] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x1, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x13, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.104] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x1, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.104] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x0, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.104] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x15, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.105] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x40, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.105] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x20, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x17, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.105] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa23, cb=0x1, pcbRead=0x19f9f0 | out: pv=0x19fa23*=0x20, pcbRead=0x19f9f0*=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.105] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x20, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x38, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.106] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19fa20, cb=0x4, pcbRead=0x19f9f0 | out: pv=0x19fa20*=0x0, pcbRead=0x19f9f0*=0x4) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x3c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x28, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x64, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x64, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.106] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9cb, cb=0x1, pcbRead=0x19f998 | out: pv=0x19f9cb*=0xd, pcbRead=0x19f998*=0x1) returned 0x0 [0041.106] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x65, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.107] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x67, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.107] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x0, pcbRead=0x19f998*=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x69, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.107] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x2, pcbRead=0x19f998*=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.107] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x6b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.107] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9cb, cb=0x1, pcbRead=0x19f998 | out: pv=0x19f9cb*=0x0, pcbRead=0x19f998*=0x1) returned 0x0 [0041.107] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6a4a40 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x6c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.108] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x6e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.108] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0041.108] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x70, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.109] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x4, pcbRead=0x19f998*=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x72, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.109] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x7, pcbRead=0x19f998*=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x74, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.109] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x4, pcbRead=0x19f998*=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x76, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.109] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x3, pcbRead=0x19f998*=0x2) returned 0x0 [0041.109] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x78, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.110] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x4, pcbRead=0x19f998*=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x7a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.110] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ca, cb=0x2, pcbRead=0x19f998 | out: pv=0x19f9ca*=0x2, pcbRead=0x19f998*=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x767, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x767, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.110] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x66, pcbRead=0x19f978*=0x1) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.110] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x768, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.110] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x1, pcbRead=0x19f978*=0x1) returned 0x0 [0041.110] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.110] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x769, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.111] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x66, pcbRead=0x19f988 | out: pv=0x6771d8*=0x7, pcbRead=0x19f988*=0x66) returned 0x0 [0041.111] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x7, cb=0x66, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x66) returned 0x0 [0041.111] LocalFree (hMem=0x6771d8) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.111] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x7, pcbRead=0x19f938*=0x1) returned 0x0 [0041.111] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e870 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.111] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.111] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.112] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x15, pcbRead=0x19f938*=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.112] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x15, pcbRead=0x19f938*=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.112] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.112] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x81, pcbRead=0x19f938*=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.112] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.113] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x2f, pcbRead=0x19f938*=0x1) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e0f0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f558 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.113] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f558, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f558*=0x74, pcbRead=0x19f948*=0x5) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.113] LocalFree (hMem=0x66f558) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66fb88 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.113] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66fb88, cb=0x4, pcbRead=0x19f948 | out: pv=0x66fb88*=0x6d, pcbRead=0x19f948*=0x4) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0041.113] LocalFree (hMem=0x66fb88) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66ef28 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x10, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.113] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66ef28, cb=0x4, pcbRead=0x19f948 | out: pv=0x66ef28*=0x6d, pcbRead=0x19f948*=0x4) returned 0x0 [0041.113] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.113] LocalFree (hMem=0x66ef28) returned 0x0 [0041.113] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x14, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.114] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x2, pcbRead=0x19f934*=0x1) returned 0x0 [0041.114] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e120 [0041.114] LocalAlloc (uFlags=0x40, uBytes=0xd1) returned 0x6771d8 [0041.114] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x15, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.114] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x6771d8, cb=0x51, pcbRead=0x19f948 | out: pv=0x6771d8*=0x43, pcbRead=0x19f948*=0x51) returned 0x0 [0041.114] LocalAlloc (uFlags=0x40, uBytes=0xd9) returned 0x6772b8 [0041.114] LocalFree (hMem=0x6771d8) returned 0x0 [0041.114] LocalFree (hMem=0x66e870) returned 0x0 [0041.114] IUnknown:Release (This=0x660268) returned 0x0 [0041.114] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0041.114] LocalFree (hMem=0x69df58) returned 0x0 [0041.114] LocalFree (hMem=0x69dff0) returned 0x0 [0041.114] LocalFree (hMem=0x69e088) returned 0x0 [0041.114] LocalFree (hMem=0x69e120) returned 0x0 [0041.114] LocalFree (hMem=0x6772b8) returned 0x0 [0041.114] LocalFree (hMem=0x66e0f0) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x7cf, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x7cf, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.114] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x27, pcbRead=0x19f978*=0x1) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.114] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x7d0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.115] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x2, pcbRead=0x19f978*=0x1) returned 0x0 [0041.115] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.115] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x7d1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.115] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x27, pcbRead=0x19f988 | out: pv=0x6771d8*=0x6, pcbRead=0x19f988*=0x27) returned 0x0 [0041.115] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x6, cb=0x27, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x27) returned 0x0 [0041.115] LocalFree (hMem=0x6771d8) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.115] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6, pcbRead=0x19f938*=0x1) returned 0x0 [0041.115] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e730 [0041.115] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.116] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.116] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x3b, pcbRead=0x19f938*=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.116] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x15, pcbRead=0x19f938*=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.116] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.116] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.117] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x0, pcbRead=0x19f938*=0x1) returned 0x0 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dd30 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66fa68 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.117] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66fa68, cb=0x5, pcbRead=0x19f948 | out: pv=0x66fa68*=0x69, pcbRead=0x19f948*=0x5) returned 0x0 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.117] LocalFree (hMem=0x66fa68) returned 0x0 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66e230 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.117] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.117] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66e230, cb=0x17, pcbRead=0x19f948 | out: pv=0x66e230*=0x73, pcbRead=0x19f948*=0x17) returned 0x0 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x9f) returned 0x6708c8 [0041.117] LocalFree (hMem=0x66e230) returned 0x0 [0041.117] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x66f558 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x22, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.118] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f558, cb=0x4, pcbRead=0x19f948 | out: pv=0x66f558*=0x6d, pcbRead=0x19f948*=0x4) returned 0x0 [0041.118] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0041.118] LocalFree (hMem=0x66f558) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x26, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.118] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x3, pcbRead=0x19f934*=0x1) returned 0x0 [0041.118] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.118] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f8b8 [0041.118] LocalFree (hMem=0x66e730) returned 0x0 [0041.118] IUnknown:Release (This=0x660268) returned 0x0 [0041.118] lstrcmpiA (lpString1="meta", lpString2="logins") returned 1 [0041.118] LocalFree (hMem=0x69df58) returned 0x0 [0041.118] LocalFree (hMem=0x6708c8) returned 0x0 [0041.118] LocalFree (hMem=0x69dff0) returned 0x0 [0041.118] LocalFree (hMem=0x69e088) returned 0x0 [0041.118] LocalFree (hMem=0x66f8b8) returned 0x0 [0041.118] LocalFree (hMem=0x66dd30) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x487, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.118] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x487, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.119] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x85, pcbRead=0x19f978*=0x1) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x488, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.119] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x30, pcbRead=0x19f978*=0x1) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x489, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.119] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x3, pcbRead=0x19f978*=0x1) returned 0x0 [0041.119] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.119] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.119] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x48a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.121] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x2b0, pcbRead=0x19f988 | out: pv=0x6771d8*=0x7, pcbRead=0x19f988*=0x2b0) returned 0x0 [0041.121] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x7, cb=0x2b0, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x2b0) returned 0x0 [0041.121] LocalFree (hMem=0x6771d8) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.121] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x7, pcbRead=0x19f938*=0x1) returned 0x0 [0041.121] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e370 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.121] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.122] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.122] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x19, pcbRead=0x19f938*=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.122] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x19, pcbRead=0x19f938*=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.122] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.122] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.123] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x8a, pcbRead=0x19f938*=0x1) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.123] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x3b, pcbRead=0x19f938*=0x1) returned 0x0 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e730 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f1f8 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.123] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f1f8, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f1f8*=0x74, pcbRead=0x19f948*=0x5) returned 0x0 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x6771d8 [0041.123] LocalFree (hMem=0x66f1f8) returned 0x0 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x66fa68 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.123] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.123] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66fa68, cb=0x6, pcbRead=0x19f948 | out: pv=0x66fa68*=0x6c, pcbRead=0x19f948*=0x6) returned 0x0 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x677270 [0041.123] LocalFree (hMem=0x66fa68) returned 0x0 [0041.123] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x66f678 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x12, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.124] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f678, cb=0x6, pcbRead=0x19f948 | out: pv=0x66f678*=0x6c, pcbRead=0x19f948*=0x6) returned 0x0 [0041.124] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x677308 [0041.124] LocalFree (hMem=0x66f678) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.124] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x4, pcbRead=0x19f934*=0x1) returned 0x0 [0041.124] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x6773a0 [0041.124] LocalAlloc (uFlags=0x40, uBytes=0x317) returned 0x677438 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.124] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x19, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.124] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x677438, cb=0x297, pcbRead=0x19f948 | out: pv=0x677438*=0x43, pcbRead=0x19f948*=0x297) returned 0x0 [0041.124] LocalAlloc (uFlags=0x40, uBytes=0x31f) returned 0x677758 [0041.124] LocalFree (hMem=0x677438) returned 0x0 [0041.124] LocalFree (hMem=0x66e370) returned 0x0 [0041.124] IUnknown:Release (This=0x660268) returned 0x0 [0041.124] lstrcmpiA (lpString1="logins", lpString2="logins") returned 0 [0041.124] lstrcmpA (lpString1="table", lpString2="table") returned 0 [0041.125] lstrcmpiA (lpString1="CONSTRAINT", lpString2="origin_url") returned -1 [0041.125] lstrcmpiA (lpString1="PRIMARY", lpString2="origin_url") returned 1 [0041.125] lstrcmpiA (lpString1="UNIQUE", lpString2="origin_url") returned 1 [0041.125] lstrcmpiA (lpString1="CHECK", lpString2="origin_url") returned -1 [0041.125] lstrcmpiA (lpString1="FOREIGN", lpString2="origin_url") returned -1 [0041.125] lstrcmpiA (lpString1="origin_url", lpString2="origin_url") returned 0 [0041.125] lstrcmpiA (lpString1="origin_url", lpString2="password_value") returned -1 [0041.125] lstrcmpiA (lpString1="origin_url", lpString2="username_value") returned -1 [0041.125] lstrcmpiA (lpString1="CONSTRAINT", lpString2="action_url") returned 1 [0041.125] lstrcmpiA (lpString1="PRIMARY", lpString2="action_url") returned 1 [0041.125] lstrcmpiA (lpString1="UNIQUE", lpString2="action_url") returned 1 [0041.125] lstrcmpiA (lpString1="CHECK", lpString2="action_url") returned 1 [0041.125] lstrcmpiA (lpString1="FOREIGN", lpString2="action_url") returned 1 [0041.125] lstrcmpiA (lpString1="action_url", lpString2="origin_url") returned -1 [0041.126] lstrcmpiA (lpString1="action_url", lpString2="password_value") returned -1 [0041.126] lstrcmpiA (lpString1="action_url", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="CONSTRAINT", lpString2="username_element") returned -1 [0041.126] lstrcmpiA (lpString1="PRIMARY", lpString2="username_element") returned -1 [0041.126] lstrcmpiA (lpString1="UNIQUE", lpString2="username_element") returned -1 [0041.126] lstrcmpiA (lpString1="CHECK", lpString2="username_element") returned -1 [0041.126] lstrcmpiA (lpString1="FOREIGN", lpString2="username_element") returned -1 [0041.126] lstrcmpiA (lpString1="username_element", lpString2="origin_url") returned 1 [0041.126] lstrcmpiA (lpString1="username_element", lpString2="password_value") returned 1 [0041.126] lstrcmpiA (lpString1="username_element", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="CONSTRAINT", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="PRIMARY", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="UNIQUE", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="CHECK", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="FOREIGN", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="username_value", lpString2="origin_url") returned 1 [0041.126] lstrcmpiA (lpString1="username_value", lpString2="password_value") returned 1 [0041.126] lstrcmpiA (lpString1="username_value", lpString2="username_value") returned 0 [0041.126] lstrcmpiA (lpString1="CONSTRAINT", lpString2="password_element") returned -1 [0041.126] lstrcmpiA (lpString1="PRIMARY", lpString2="password_element") returned 1 [0041.126] lstrcmpiA (lpString1="UNIQUE", lpString2="password_element") returned 1 [0041.126] lstrcmpiA (lpString1="CHECK", lpString2="password_element") returned -1 [0041.126] lstrcmpiA (lpString1="FOREIGN", lpString2="password_element") returned -1 [0041.126] lstrcmpiA (lpString1="password_element", lpString2="origin_url") returned 1 [0041.126] lstrcmpiA (lpString1="password_element", lpString2="password_value") returned -1 [0041.126] lstrcmpiA (lpString1="password_element", lpString2="username_value") returned -1 [0041.126] lstrcmpiA (lpString1="CONSTRAINT", lpString2="password_value") returned -1 [0041.126] lstrcmpiA (lpString1="PRIMARY", lpString2="password_value") returned 1 [0041.126] lstrcmpiA (lpString1="UNIQUE", lpString2="password_value") returned 1 [0041.126] lstrcmpiA (lpString1="CHECK", lpString2="password_value") returned -1 [0041.126] lstrcmpiA (lpString1="FOREIGN", lpString2="password_value") returned -1 [0041.126] lstrcmpiA (lpString1="password_value", lpString2="origin_url") returned 1 [0041.127] lstrcmpiA (lpString1="password_value", lpString2="password_value") returned 0 [0041.127] lstrcmpiA (lpString1="password_value", lpString2="username_value") returned -1 [0041.127] lstrcmpiA (lpString1="CONSTRAINT", lpString2="submit_element") returned -1 [0041.127] lstrcmpiA (lpString1="PRIMARY", lpString2="submit_element") returned -1 [0041.127] lstrcmpiA (lpString1="UNIQUE", lpString2="submit_element") returned 1 [0041.127] lstrcmpiA (lpString1="CHECK", lpString2="submit_element") returned -1 [0041.127] lstrcmpiA (lpString1="FOREIGN", lpString2="submit_element") returned -1 [0041.127] lstrcmpiA (lpString1="submit_element", lpString2="origin_url") returned 1 [0041.127] lstrcmpiA (lpString1="submit_element", lpString2="password_value") returned 1 [0041.127] lstrcmpiA (lpString1="submit_element", lpString2="username_value") returned -1 [0041.127] lstrcmpiA (lpString1="CONSTRAINT", lpString2="signon_realm") returned -1 [0041.127] lstrcmpiA (lpString1="PRIMARY", lpString2="signon_realm") returned -1 [0041.127] lstrcmpiA (lpString1="UNIQUE", lpString2="signon_realm") returned 1 [0041.127] lstrcmpiA (lpString1="CHECK", lpString2="signon_realm") returned -1 [0041.127] lstrcmpiA (lpString1="FOREIGN", lpString2="signon_realm") returned -1 [0041.127] lstrcmpiA (lpString1="signon_realm", lpString2="origin_url") returned 1 [0041.127] lstrcmpiA (lpString1="signon_realm", lpString2="password_value") returned 1 [0041.127] lstrcmpiA (lpString1="signon_realm", lpString2="username_value") returned -1 [0041.127] lstrcmpiA (lpString1="CONSTRAINT", lpString2="preferred") returned -1 [0041.127] lstrcmpiA (lpString1="PRIMARY", lpString2="preferred") returned 1 [0041.127] lstrcmpiA (lpString1="UNIQUE", lpString2="preferred") returned 1 [0041.127] lstrcmpiA (lpString1="CHECK", lpString2="preferred") returned -1 [0041.127] lstrcmpiA (lpString1="FOREIGN", lpString2="preferred") returned -1 [0041.127] lstrcmpiA (lpString1="preferred", lpString2="origin_url") returned 1 [0041.127] lstrcmpiA (lpString1="preferred", lpString2="password_value") returned 1 [0041.127] lstrcmpiA (lpString1="preferred", lpString2="username_value") returned -1 [0041.127] lstrcmpiA (lpString1="CONSTRAINT", lpString2="date_created") returned -1 [0041.127] lstrcmpiA (lpString1="PRIMARY", lpString2="date_created") returned 1 [0041.127] lstrcmpiA (lpString1="UNIQUE", lpString2="date_created") returned 1 [0041.127] lstrcmpiA (lpString1="CHECK", lpString2="date_created") returned -1 [0041.128] lstrcmpiA (lpString1="FOREIGN", lpString2="date_created") returned 1 [0041.128] lstrcmpiA (lpString1="date_created", lpString2="origin_url") returned -1 [0041.128] lstrcmpiA (lpString1="date_created", lpString2="password_value") returned -1 [0041.128] lstrcmpiA (lpString1="date_created", lpString2="username_value") returned -1 [0041.128] lstrcmpiA (lpString1="CONSTRAINT", lpString2="blacklisted_by_user") returned 1 [0041.128] lstrcmpiA (lpString1="PRIMARY", lpString2="blacklisted_by_user") returned 1 [0041.128] lstrcmpiA (lpString1="UNIQUE", lpString2="blacklisted_by_user") returned 1 [0041.128] lstrcmpiA (lpString1="CHECK", lpString2="blacklisted_by_user") returned 1 [0041.128] lstrcmpiA (lpString1="FOREIGN", lpString2="blacklisted_by_user") returned 1 [0041.128] lstrcmpiA (lpString1="blacklisted_by_user", lpString2="origin_url") returned -1 [0041.128] lstrcmpiA (lpString1="blacklisted_by_user", lpString2="password_value") returned -1 [0041.128] lstrcmpiA (lpString1="blacklisted_by_user", lpString2="username_value") returned -1 [0041.128] lstrcmpiA (lpString1="CONSTRAINT", lpString2="scheme") returned -1 [0041.128] lstrcmpiA (lpString1="PRIMARY", lpString2="scheme") returned -1 [0041.128] lstrcmpiA (lpString1="UNIQUE", lpString2="scheme") returned 1 [0041.128] lstrcmpiA (lpString1="CHECK", lpString2="scheme") returned -1 [0041.128] lstrcmpiA (lpString1="FOREIGN", lpString2="scheme") returned -1 [0041.128] lstrcmpiA (lpString1="scheme", lpString2="origin_url") returned 1 [0041.128] lstrcmpiA (lpString1="scheme", lpString2="password_value") returned 1 [0041.128] lstrcmpiA (lpString1="scheme", lpString2="username_value") returned -1 [0041.128] lstrcmpiA (lpString1="CONSTRAINT", lpString2="password_type") returned -1 [0041.128] lstrcmpiA (lpString1="PRIMARY", lpString2="password_type") returned 1 [0041.128] lstrcmpiA (lpString1="UNIQUE", lpString2="password_type") returned 1 [0041.128] lstrcmpiA (lpString1="CHECK", lpString2="password_type") returned -1 [0041.128] lstrcmpiA (lpString1="FOREIGN", lpString2="password_type") returned -1 [0041.128] lstrcmpiA (lpString1="password_type", lpString2="origin_url") returned 1 [0041.128] lstrcmpiA (lpString1="password_type", lpString2="password_value") returned -1 [0041.128] lstrcmpiA (lpString1="password_type", lpString2="username_value") returned -1 [0041.128] lstrcmpiA (lpString1="CONSTRAINT", lpString2="times_used") returned -1 [0041.128] lstrcmpiA (lpString1="PRIMARY", lpString2="times_used") returned -1 [0041.128] lstrcmpiA (lpString1="UNIQUE", lpString2="times_used") returned 1 [0041.128] lstrcmpiA (lpString1="CHECK", lpString2="times_used") returned -1 [0041.128] lstrcmpiA (lpString1="FOREIGN", lpString2="times_used") returned -1 [0041.128] lstrcmpiA (lpString1="times_used", lpString2="origin_url") returned 1 [0041.128] lstrcmpiA (lpString1="times_used", lpString2="password_value") returned 1 [0041.129] lstrcmpiA (lpString1="times_used", lpString2="username_value") returned -1 [0041.129] lstrcmpiA (lpString1="CONSTRAINT", lpString2="form_data") returned -1 [0041.129] lstrcmpiA (lpString1="PRIMARY", lpString2="form_data") returned 1 [0041.129] lstrcmpiA (lpString1="UNIQUE", lpString2="form_data") returned 1 [0041.129] lstrcmpiA (lpString1="CHECK", lpString2="form_data") returned -1 [0041.129] lstrcmpiA (lpString1="FOREIGN", lpString2="form_data") returned -1 [0041.129] lstrcmpiA (lpString1="form_data", lpString2="origin_url") returned -1 [0041.129] lstrcmpiA (lpString1="form_data", lpString2="password_value") returned -1 [0041.129] lstrcmpiA (lpString1="form_data", lpString2="username_value") returned -1 [0041.129] lstrcmpiA (lpString1="CONSTRAINT", lpString2="date_synced") returned -1 [0041.129] lstrcmpiA (lpString1="PRIMARY", lpString2="date_synced") returned 1 [0041.129] lstrcmpiA (lpString1="UNIQUE", lpString2="date_synced") returned 1 [0041.129] lstrcmpiA (lpString1="CHECK", lpString2="date_synced") returned -1 [0041.129] lstrcmpiA (lpString1="FOREIGN", lpString2="date_synced") returned 1 [0041.129] lstrcmpiA (lpString1="date_synced", lpString2="origin_url") returned -1 [0041.129] lstrcmpiA (lpString1="date_synced", lpString2="password_value") returned -1 [0041.129] lstrcmpiA (lpString1="date_synced", lpString2="username_value") returned -1 [0041.129] lstrcmpiA (lpString1="CONSTRAINT", lpString2="display_name") returned -1 [0041.129] lstrcmpiA (lpString1="PRIMARY", lpString2="display_name") returned 1 [0041.129] lstrcmpiA (lpString1="UNIQUE", lpString2="display_name") returned 1 [0041.129] lstrcmpiA (lpString1="CHECK", lpString2="display_name") returned -1 [0041.129] lstrcmpiA (lpString1="FOREIGN", lpString2="display_name") returned 1 [0041.129] lstrcmpiA (lpString1="display_name", lpString2="origin_url") returned -1 [0041.129] lstrcmpiA (lpString1="display_name", lpString2="password_value") returned -1 [0041.129] lstrcmpiA (lpString1="display_name", lpString2="username_value") returned -1 [0041.129] lstrcmpiA (lpString1="CONSTRAINT", lpString2="icon_url") returned -1 [0041.129] lstrcmpiA (lpString1="PRIMARY", lpString2="icon_url") returned 1 [0041.129] lstrcmpiA (lpString1="UNIQUE", lpString2="icon_url") returned 1 [0041.129] lstrcmpiA (lpString1="CHECK", lpString2="icon_url") returned -1 [0041.129] lstrcmpiA (lpString1="FOREIGN", lpString2="icon_url") returned -1 [0041.130] lstrcmpiA (lpString1="icon_url", lpString2="origin_url") returned -1 [0041.130] lstrcmpiA (lpString1="icon_url", lpString2="password_value") returned -1 [0041.130] lstrcmpiA (lpString1="icon_url", lpString2="username_value") returned -1 [0041.130] lstrcmpiA (lpString1="CONSTRAINT", lpString2="federation_url") returned -1 [0041.130] lstrcmpiA (lpString1="PRIMARY", lpString2="federation_url") returned 1 [0041.130] lstrcmpiA (lpString1="UNIQUE", lpString2="federation_url") returned 1 [0041.130] lstrcmpiA (lpString1="CHECK", lpString2="federation_url") returned -1 [0041.130] lstrcmpiA (lpString1="FOREIGN", lpString2="federation_url") returned 1 [0041.130] lstrcmpiA (lpString1="federation_url", lpString2="origin_url") returned -1 [0041.130] lstrcmpiA (lpString1="federation_url", lpString2="password_value") returned -1 [0041.130] lstrcmpiA (lpString1="federation_url", lpString2="username_value") returned -1 [0041.130] lstrcmpiA (lpString1="CONSTRAINT", lpString2="skip_zero_click") returned -1 [0041.130] lstrcmpiA (lpString1="PRIMARY", lpString2="skip_zero_click") returned -1 [0041.130] lstrcmpiA (lpString1="UNIQUE", lpString2="skip_zero_click") returned 1 [0041.130] lstrcmpiA (lpString1="CHECK", lpString2="skip_zero_click") returned -1 [0041.130] lstrcmpiA (lpString1="FOREIGN", lpString2="skip_zero_click") returned -1 [0041.130] lstrcmpiA (lpString1="skip_zero_click", lpString2="origin_url") returned 1 [0041.130] lstrcmpiA (lpString1="skip_zero_click", lpString2="password_value") returned 1 [0041.130] lstrcmpiA (lpString1="skip_zero_click", lpString2="username_value") returned -1 [0041.130] lstrcmpiA (lpString1="CONSTRAINT", lpString2="generation_upload_status") returned -1 [0041.130] lstrcmpiA (lpString1="PRIMARY", lpString2="generation_upload_status") returned 1 [0041.130] lstrcmpiA (lpString1="UNIQUE", lpString2="generation_upload_status") returned 1 [0041.130] lstrcmpiA (lpString1="CHECK", lpString2="generation_upload_status") returned -1 [0041.130] lstrcmpiA (lpString1="FOREIGN", lpString2="generation_upload_status") returned -1 [0041.130] lstrcmpiA (lpString1="generation_upload_status", lpString2="origin_url") returned -1 [0041.130] lstrcmpiA (lpString1="generation_upload_status", lpString2="password_value") returned -1 [0041.130] lstrcmpiA (lpString1="generation_upload_status", lpString2="username_value") returned -1 [0041.130] lstrcmpiA (lpString1="CONSTRAINT", lpString2="possible_username_pairs") returned -1 [0041.130] lstrcmpiA (lpString1="PRIMARY", lpString2="possible_username_pairs") returned 1 [0041.130] lstrcmpiA (lpString1="UNIQUE", lpString2="possible_username_pairs") returned 1 [0041.130] lstrcmpiA (lpString1="CHECK", lpString2="possible_username_pairs") returned -1 [0041.130] lstrcmpiA (lpString1="FOREIGN", lpString2="possible_username_pairs") returned -1 [0041.130] lstrcmpiA (lpString1="possible_username_pairs", lpString2="origin_url") returned 1 [0041.130] lstrcmpiA (lpString1="possible_username_pairs", lpString2="password_value") returned 1 [0041.130] lstrcmpiA (lpString1="possible_username_pairs", lpString2="username_value") returned -1 [0041.130] lstrcmpiA (lpString1="CONSTRAINT", lpString2="UNIQUE") returned -1 [0041.130] lstrcmpiA (lpString1="PRIMARY", lpString2="UNIQUE") returned -1 [0041.131] lstrcmpiA (lpString1="UNIQUE", lpString2="UNIQUE") returned 0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1800, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1800, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.131] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f943, cb=0x1, pcbRead=0x19f910 | out: pv=0x19f943*=0xd, pcbRead=0x19f910*=0x1) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1801, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.131] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f942, cb=0x2, pcbRead=0x19f910 | out: pv=0x19f942*=0x0, pcbRead=0x19f910*=0x2) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1803, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.131] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f942, cb=0x2, pcbRead=0x19f910 | out: pv=0x19f942*=0x0, pcbRead=0x19f910*=0x2) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.131] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.132] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1805, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.132] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f942, cb=0x2, pcbRead=0x19f910 | out: pv=0x19f942*=0x8, pcbRead=0x19f910*=0x2) returned 0x0 [0041.132] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.132] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.132] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x1807, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.132] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f943, cb=0x1, pcbRead=0x19f910 | out: pv=0x19f943*=0x0, pcbRead=0x19f910*=0x1) returned 0x0 [0041.132] LocalAlloc (uFlags=0x40, uBytes=0x10080) returned 0x6b4ac8 [0041.132] LocalFree (hMem=0x6b4ac8) returned 0x0 [0041.132] LocalFree (hMem=0x6771d8) returned 0x0 [0041.132] LocalFree (hMem=0x677270) returned 0x0 [0041.132] LocalFree (hMem=0x677308) returned 0x0 [0041.132] LocalFree (hMem=0x6773a0) returned 0x0 [0041.132] LocalFree (hMem=0x677758) returned 0x0 [0041.132] LocalFree (hMem=0x66e730) returned 0x0 [0041.132] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x73a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x73a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.133] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x2b, pcbRead=0x19f978*=0x1) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x73b, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.133] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x4, pcbRead=0x19f978*=0x1) returned 0x0 [0041.133] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.133] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x73c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.133] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x2b, pcbRead=0x19f988 | out: pv=0x6771d8*=0x6, pcbRead=0x19f988*=0x2b) returned 0x0 [0041.133] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x6, cb=0x2b, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x2b) returned 0x0 [0041.133] LocalFree (hMem=0x6771d8) returned 0x0 [0041.133] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.134] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6, pcbRead=0x19f938*=0x1) returned 0x0 [0041.134] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dbf0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.134] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.134] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x3f, pcbRead=0x19f938*=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.134] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.135] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x19, pcbRead=0x19f938*=0x1) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.135] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.135] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x0, pcbRead=0x19f938*=0x1) returned 0x0 [0041.135] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e550 [0041.135] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ee98 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.135] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66ee98, cb=0x5, pcbRead=0x19f948 | out: pv=0x66ee98*=0x69, pcbRead=0x19f948*=0x5) returned 0x0 [0041.135] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.135] LocalFree (hMem=0x66ee98) returned 0x0 [0041.135] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6706d0 [0041.135] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.136] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x6706d0, cb=0x19, pcbRead=0x19f948 | out: pv=0x6706d0*=0x73, pcbRead=0x19f948*=0x19) returned 0x0 [0041.136] LocalAlloc (uFlags=0x40, uBytes=0xa1) returned 0x679418 [0041.136] LocalFree (hMem=0x6706d0) returned 0x0 [0041.136] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x66f828 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x24, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.136] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f828, cb=0x6, pcbRead=0x19f948 | out: pv=0x66f828*=0x6c, pcbRead=0x19f948*=0x6) returned 0x0 [0041.136] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x69dff0 [0041.136] LocalFree (hMem=0x66f828) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.136] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.136] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x5, pcbRead=0x19f934*=0x1) returned 0x0 [0041.136] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.136] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66ee08 [0041.136] LocalFree (hMem=0x66dbf0) returned 0x0 [0041.136] IUnknown:Release (This=0x660268) returned 0x0 [0041.136] lstrcmpiA (lpString1="logins", lpString2="logins") returned 0 [0041.136] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0041.136] LocalFree (hMem=0x69df58) returned 0x0 [0041.136] LocalFree (hMem=0x679418) returned 0x0 [0041.136] LocalFree (hMem=0x69dff0) returned 0x0 [0041.136] LocalFree (hMem=0x69e088) returned 0x0 [0041.137] LocalFree (hMem=0x66ee08) returned 0x0 [0041.137] LocalFree (hMem=0x66e550) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x433, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x433, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.137] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x52, pcbRead=0x19f978*=0x1) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x434, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.137] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x5, pcbRead=0x19f978*=0x1) returned 0x0 [0041.137] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.137] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.137] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x435, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.137] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x52, pcbRead=0x19f988 | out: pv=0x6771d8*=0x6, pcbRead=0x19f988*=0x52) returned 0x0 [0041.138] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x6, cb=0x52, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x52) returned 0x0 [0041.138] LocalFree (hMem=0x6771d8) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.138] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6, pcbRead=0x19f938*=0x1) returned 0x0 [0041.138] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e690 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.138] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.138] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x27, pcbRead=0x19f938*=0x1) returned 0x0 [0041.138] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.139] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x19, pcbRead=0x19f938*=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.139] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.139] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x73, pcbRead=0x19f938*=0x1) returned 0x0 [0041.139] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66ea50 [0041.139] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f678 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.139] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.140] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f678, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f678*=0x69, pcbRead=0x19f948*=0x5) returned 0x0 [0041.140] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.140] LocalFree (hMem=0x66f678) returned 0x0 [0041.140] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.140] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x69dff0, cb=0xd, pcbRead=0x19f948 | out: pv=0x69dff0*=0x6c, pcbRead=0x19f948*=0xd) returned 0x0 [0041.140] LocalAlloc (uFlags=0x40, uBytes=0x95) returned 0x66db50 [0041.140] LocalFree (hMem=0x69dff0) returned 0x0 [0041.140] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x66f0d8 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x18, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.140] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f0d8, cb=0x6, pcbRead=0x19f948 | out: pv=0x66f0d8*=0x6c, pcbRead=0x19f948*=0x6) returned 0x0 [0041.140] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x69dff0 [0041.140] LocalFree (hMem=0x66f0d8) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.140] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1e, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.140] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x6, pcbRead=0x19f934*=0x1) returned 0x0 [0041.141] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.141] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x69e120 [0041.141] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1f, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.141] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x69e120, cb=0x33, pcbRead=0x19f948 | out: pv=0x69e120*=0x43, pcbRead=0x19f948*=0x33) returned 0x0 [0041.141] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662c38 [0041.141] LocalFree (hMem=0x69e120) returned 0x0 [0041.141] LocalFree (hMem=0x66e690) returned 0x0 [0041.141] IUnknown:Release (This=0x660268) returned 0x0 [0041.141] lstrcmpiA (lpString1="logins", lpString2="logins") returned 0 [0041.141] lstrcmpA (lpString1="table", lpString2="index") returned 1 [0041.141] LocalFree (hMem=0x69df58) returned 0x0 [0041.141] LocalFree (hMem=0x66db50) returned 0x0 [0041.141] LocalFree (hMem=0x69dff0) returned 0x0 [0041.141] LocalFree (hMem=0x69e088) returned 0x0 [0041.141] LocalFree (hMem=0x662c38) returned 0x0 [0041.141] LocalFree (hMem=0x66ea50) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x345, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x345, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.141] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x81, pcbRead=0x19f978*=0x1) returned 0x0 [0041.141] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x346, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.142] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x40, pcbRead=0x19f978*=0x1) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x347, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.142] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x6, pcbRead=0x19f978*=0x1) returned 0x0 [0041.142] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.142] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x348, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.142] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0xc0, pcbRead=0x19f988 | out: pv=0x6771d8*=0x7, pcbRead=0x19f988*=0xc0) returned 0x0 [0041.142] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x7, cb=0xc0, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0xc0) returned 0x0 [0041.142] LocalFree (hMem=0x6771d8) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.142] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.143] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x7, pcbRead=0x19f938*=0x1) returned 0x0 [0041.143] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e730 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.143] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.143] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.143] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.143] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.144] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.144] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x82, pcbRead=0x19f938*=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.144] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x5f, pcbRead=0x19f938*=0x1) returned 0x0 [0041.144] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66db50 [0041.144] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ece8 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.144] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.145] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66ece8, cb=0x5, pcbRead=0x19f948 | out: pv=0x66ece8*=0x74, pcbRead=0x19f948*=0x5) returned 0x0 [0041.145] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.145] LocalFree (hMem=0x66ece8) returned 0x0 [0041.145] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f048 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xc, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.145] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f048, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f048*=0x73, pcbRead=0x19f948*=0x5) returned 0x0 [0041.145] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0041.145] LocalFree (hMem=0x66f048) returned 0x0 [0041.145] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66ee98 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x11, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.145] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66ee98, cb=0x5, pcbRead=0x19f948 | out: pv=0x66ee98*=0x73, pcbRead=0x19f948*=0x5) returned 0x0 [0041.145] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69e088 [0041.145] LocalFree (hMem=0x66ee98) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.145] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x16, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.145] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x7, pcbRead=0x19f934*=0x1) returned 0x0 [0041.146] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e120 [0041.146] LocalAlloc (uFlags=0x40, uBytes=0x129) returned 0x6771d8 [0041.146] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x17, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.146] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x6771d8, cb=0xa9, pcbRead=0x19f948 | out: pv=0x6771d8*=0x43, pcbRead=0x19f948*=0xa9) returned 0x0 [0041.146] LocalAlloc (uFlags=0x40, uBytes=0x131) returned 0x677310 [0041.146] LocalFree (hMem=0x6771d8) returned 0x0 [0041.146] LocalFree (hMem=0x66e730) returned 0x0 [0041.146] IUnknown:Release (This=0x660268) returned 0x0 [0041.146] lstrcmpiA (lpString1="stats", lpString2="logins") returned 1 [0041.146] LocalFree (hMem=0x69df58) returned 0x0 [0041.146] LocalFree (hMem=0x69dff0) returned 0x0 [0041.146] LocalFree (hMem=0x69e088) returned 0x0 [0041.146] LocalFree (hMem=0x69e120) returned 0x0 [0041.146] LocalFree (hMem=0x677310) returned 0x0 [0041.146] LocalFree (hMem=0x66db50) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x408, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x408, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.146] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x29, pcbRead=0x19f978*=0x1) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.146] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x409, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.147] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x7, pcbRead=0x19f978*=0x1) returned 0x0 [0041.147] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.147] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x40a, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.147] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x29, pcbRead=0x19f988 | out: pv=0x6771d8*=0x6, pcbRead=0x19f988*=0x29) returned 0x0 [0041.147] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x6, cb=0x29, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x29) returned 0x0 [0041.147] LocalFree (hMem=0x6771d8) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.147] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6, pcbRead=0x19f938*=0x1) returned 0x0 [0041.147] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e730 [0041.147] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.148] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.148] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x3d, pcbRead=0x19f938*=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.148] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.148] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.148] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.149] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x0, pcbRead=0x19f938*=0x1) returned 0x0 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e050 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f798 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.149] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f798, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f798*=0x69, pcbRead=0x19f948*=0x5) returned 0x0 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.149] LocalFree (hMem=0x66f798) returned 0x0 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66dc90 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.149] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66dc90, cb=0x18, pcbRead=0x19f948 | out: pv=0x66dc90*=0x73, pcbRead=0x19f948*=0x18) returned 0x0 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x670040 [0041.149] LocalFree (hMem=0x66dc90) returned 0x0 [0041.149] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f168 [0041.149] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x23, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.150] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f168, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f168*=0x73, pcbRead=0x19f948*=0x5) returned 0x0 [0041.150] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0041.150] LocalFree (hMem=0x66f168) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x28, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.150] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x8, pcbRead=0x19f934*=0x1) returned 0x0 [0041.150] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.150] LocalAlloc (uFlags=0x40, uBytes=0x88) returned 0x66f1f8 [0041.150] LocalFree (hMem=0x66e730) returned 0x0 [0041.150] IUnknown:Release (This=0x660268) returned 0x0 [0041.150] lstrcmpiA (lpString1="stats", lpString2="logins") returned 1 [0041.150] LocalFree (hMem=0x69df58) returned 0x0 [0041.150] LocalFree (hMem=0x670040) returned 0x0 [0041.150] LocalFree (hMem=0x69dff0) returned 0x0 [0041.150] LocalFree (hMem=0x69e088) returned 0x0 [0041.150] LocalFree (hMem=0x66f1f8) returned 0x0 [0041.150] LocalFree (hMem=0x66e050) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x2f5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x2f5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.150] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x4e, pcbRead=0x19f978*=0x1) returned 0x0 [0041.150] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x2f6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.151] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x19f9ab, cb=0x1, pcbRead=0x19f978 | out: pv=0x19f9ab*=0x8, pcbRead=0x19f978*=0x1) returned 0x0 [0041.151] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6771d8 [0041.151] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19f9c0 | out: ppstm=0x19f9c0*=0x660268) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x6601a0, dlibMove=0x2f7, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.151] ISequentialStream:RemoteRead (in: This=0x6601a0, pv=0x6771d8, cb=0x4e, pcbRead=0x19f988 | out: pv=0x6771d8*=0x6, pcbRead=0x19f988*=0x4e) returned 0x0 [0041.151] ISequentialStream:RemoteWrite (in: This=0x660268, pv=0x6771d8*=0x6, cb=0x4e, pcbWritten=0x19f9a0 | out: pcbWritten=0x19f9a0*=0x4e) returned 0x0 [0041.151] LocalFree (hMem=0x6771d8) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.151] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6, pcbRead=0x19f938*=0x1) returned 0x0 [0041.151] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e910 [0041.151] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.152] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x2, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.152] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x25, pcbRead=0x19f938*=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x3, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.152] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x17, pcbRead=0x19f938*=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x4, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.152] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x1, pcbRead=0x19f938*=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.152] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x5, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.152] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f96b, cb=0x1, pcbRead=0x19f938 | out: pv=0x19f96b*=0x6f, pcbRead=0x19f938*=0x1) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66dbf0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66efb8 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x6, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.153] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66efb8, cb=0x5, pcbRead=0x19f948 | out: pv=0x66efb8*=0x69, pcbRead=0x19f948*=0x5) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69df58 [0041.153] LocalFree (hMem=0x66efb8) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69dff0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0xb, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.153] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x69dff0, cb=0xc, pcbRead=0x19f948 | out: pv=0x69dff0*=0x73, pcbRead=0x19f948*=0xc) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x66e550 [0041.153] LocalFree (hMem=0x69dff0) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x66f048 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x17, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.153] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x66f048, cb=0x5, pcbRead=0x19f948 | out: pv=0x66f048*=0x73, pcbRead=0x19f948*=0x5) returned 0x0 [0041.153] LocalAlloc (uFlags=0x40, uBytes=0x8d) returned 0x69dff0 [0041.153] LocalFree (hMem=0x66f048) returned 0x0 [0041.153] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.154] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.154] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1c, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.154] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x19f967, cb=0x1, pcbRead=0x19f934 | out: pv=0x19f967*=0x9, pcbRead=0x19f934*=0x1) returned 0x0 [0041.154] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x69e088 [0041.154] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x69e120 [0041.154] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.159] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.159] IStream:RemoteSeek (in: This=0x660268, dlibMove=0x1d, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.159] ISequentialStream:RemoteRead (in: This=0x660268, pv=0x69e120, cb=0x31, pcbRead=0x19f948 | out: pv=0x69e120*=0x43, pcbRead=0x19f948*=0x31) returned 0x0 [0041.159] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6631b0 [0041.159] LocalFree (hMem=0x69e120) returned 0x0 [0041.159] LocalFree (hMem=0x66e910) returned 0x0 [0041.159] IUnknown:Release (This=0x660268) returned 0x0 [0041.159] lstrcmpiA (lpString1="stats", lpString2="logins") returned 1 [0041.159] LocalFree (hMem=0x69df58) returned 0x0 [0041.160] LocalFree (hMem=0x66e550) returned 0x0 [0041.160] LocalFree (hMem=0x69dff0) returned 0x0 [0041.160] LocalFree (hMem=0x69e088) returned 0x0 [0041.160] LocalFree (hMem=0x6631b0) returned 0x0 [0041.160] LocalFree (hMem=0x66dbf0) returned 0x0 [0041.160] LocalFree (hMem=0x6a4a40) returned 0x0 [0041.160] IUnknown:Release (This=0x6601a0) returned 0x0 [0041.161] LocalFree (hMem=0x651aa0) returned 0x0 [0041.161] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.161] lstrlenA (lpString="\\") returned 1 [0041.161] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x69fdf8 [0041.161] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.161] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.161] lstrlenA (lpString="Login Data-journal") returned 18 [0041.161] LocalAlloc (uFlags=0x40, uBytes=0xd3) returned 0x651aa0 [0041.161] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.161] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Login Data-journal" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" [0041.161] LocalFree (hMem=0x69fdf8) returned 0x0 [0041.161] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x19fa58 | out: ppstm=0x19fa58*=0x660240) returned 0x0 [0041.161] CreateFileA (lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\nd9e1fyi\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0041.161] ReadFile (in: hFile=0x328, lpBuffer=0x19ea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19fa40, lpOverlapped=0x0 | out: lpBuffer=0x19ea40*, lpNumberOfBytesRead=0x19fa40*=0x0, lpOverlapped=0x0) returned 1 [0041.161] CloseHandle (hObject=0x328) returned 1 [0041.161] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.161] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.162] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.162] IStream:RemoteSeek (in: This=0x660240, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.162] IUnknown:Release (This=0x660240) returned 0x0 [0041.162] LocalFree (hMem=0x651aa0) returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Network Action Predictor", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Network Action Predictor-journal", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Origin Bound Certs", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Origin Bound Certs-journal", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Preferences", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="previews_opt_out.db", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="previews_opt_out.db-journal", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="QuotaManager", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="QuotaManager-journal", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] StrStrIA (lpFirst="Secure Preferences", lpSrch="Login Data") returned 0x0 [0041.162] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.162] lstrcmpiA (lpString1=".", lpString2="Service Worker") returned -1 [0041.162] lstrcmpiA (lpString1="..", lpString2="Service Worker") returned -1 [0041.162] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.162] lstrlenA (lpString="\\") returned 1 [0041.162] LocalAlloc (uFlags=0x40, uBytes=0xc1) returned 0x6a0068 [0041.162] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.162] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.163] lstrlenA (lpString="Service Worker") returned 14 [0041.163] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x651aa0 [0041.163] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0041.163] LocalFree (hMem=0x6a0068) returned 0x0 [0041.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0041.163] lstrlenA (lpString="\\*.*") returned 4 [0041.163] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0041.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*" [0041.163] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690568 [0041.163] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.163] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.163] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.163] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.163] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.163] lstrcmpiA (lpString1=".", lpString2="CacheStorage") returned -1 [0041.163] lstrcmpiA (lpString1="..", lpString2="CacheStorage") returned -1 [0041.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0041.163] lstrlenA (lpString="\\") returned 1 [0041.163] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0041.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.163] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0041.163] lstrlenA (lpString="CacheStorage") returned 12 [0041.163] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.163] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0041.163] LocalFree (hMem=0x69e038) returned 0x0 [0041.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned 91 [0041.164] lstrlenA (lpString="\\*.*") returned 4 [0041.164] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0041.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*" [0041.164] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x690128 [0041.164] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.164] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.164] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.164] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.164] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.164] lstrcmpiA (lpString1=".", lpString2="28da9c56fde4021055a681112c092453f74d8dd8") returned -1 [0041.164] lstrcmpiA (lpString1="..", lpString2="28da9c56fde4021055a681112c092453f74d8dd8") returned -1 [0041.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned 91 [0041.164] lstrlenA (lpString="\\") returned 1 [0041.164] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage" [0041.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" [0041.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned 92 [0041.164] lstrlenA (lpString="28da9c56fde4021055a681112c092453f74d8dd8") returned 40 [0041.164] lstrcpyA (in: lpString1=0x6773a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\" [0041.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", lpString2="28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0041.164] LocalFree (hMem=0x6772c0) returned 0x0 [0041.164] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned 132 [0041.164] lstrlenA (lpString="\\*.*") returned 4 [0041.164] lstrcpyA (in: lpString1=0x675178, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0041.164] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*" [0041.164] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6900e8 [0041.164] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.164] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.164] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.165] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.165] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.165] lstrcmpiA (lpString1=".", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned -1 [0041.165] lstrcmpiA (lpString1="..", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned -1 [0041.165] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned 132 [0041.165] lstrlenA (lpString="\\") returned 1 [0041.165] lstrcpyA (in: lpString1=0x6774b8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8" [0041.165] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" [0041.165] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned 133 [0041.165] lstrlenA (lpString="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 36 [0041.165] lstrcpyA (in: lpString1=0x6775c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\" [0041.165] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", lpString2="1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0041.165] LocalFree (hMem=0x6774b8) returned 0x0 [0041.165] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 169 [0041.165] lstrlenA (lpString="\\*.*") returned 4 [0041.165] lstrcpyA (in: lpString1=0x677700, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0041.165] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*" [0041.165] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\*.*", lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0x690168 [0041.165] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.165] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] StrStrIA (lpFirst="1dd0446e4b2b157b_0", lpSrch="Login Data") returned 0x0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] StrStrIA (lpFirst="60bf3aba3df02770_0", lpSrch="Login Data") returned 0x0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] StrStrIA (lpFirst="d4a1768080ecf56d_0", lpSrch="Login Data") returned 0x0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] StrStrIA (lpFirst="fdf2cfeb8ad0eeac_0", lpSrch="Login Data") returned 0x0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] StrStrIA (lpFirst="index", lpSrch="Login Data") returned 0x0 [0041.165] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 1 [0041.165] lstrcmpiA (lpString1=".", lpString2="index-dir") returned -1 [0041.165] lstrcmpiA (lpString1="..", lpString2="index-dir") returned -1 [0041.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned 169 [0041.166] lstrlenA (lpString="\\") returned 1 [0041.166] lstrcpyA (in: lpString1=0x677838, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4" [0041.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" [0041.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned 170 [0041.166] lstrlenA (lpString="index-dir") returned 9 [0041.166] lstrcpyA (in: lpString1=0x677970, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\" [0041.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\", lpString2="index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" [0041.166] LocalFree (hMem=0x677838) returned 0x0 [0041.166] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned 179 [0041.166] lstrlenA (lpString="\\*.*") returned 4 [0041.166] lstrcpyA (in: lpString1=0x6a0230, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir" [0041.166] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*" [0041.166] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\1c2e7ec1-3c51-44bf-9a9b-62fed598cca4\\index-dir\\*.*", lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0x6905e8 [0041.166] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.166] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.166] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.167] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.167] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 1 [0041.167] StrStrIA (lpFirst="the-real-index", lpSrch="Login Data") returned 0x0 [0041.167] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f366 | out: lpFindFileData=0x19f366) returned 0 [0041.167] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0041.167] LocalFree (hMem=0x6a0230) returned 0x0 [0041.167] LocalFree (hMem=0x677970) returned 0x0 [0041.167] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19f4d2 | out: lpFindFileData=0x19f4d2) returned 0 [0041.167] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0041.167] LocalFree (hMem=0x677700) returned 0x0 [0041.167] LocalFree (hMem=0x6775c8) returned 0x0 [0041.167] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.167] StrStrIA (lpFirst="index.txt", lpSrch="Login Data") returned 0x0 [0041.167] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0041.167] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.168] LocalFree (hMem=0x675178) returned 0x0 [0041.168] LocalFree (hMem=0x6773a8) returned 0x0 [0041.168] FindNextFileA (in: hFindFile=0x690128, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.168] FindClose (in: hFindFile=0x690128 | out: hFindFile=0x690128) returned 1 [0041.168] LocalFree (hMem=0x6771d8) returned 0x0 [0041.168] LocalFree (hMem=0x69e110) returned 0x0 [0041.168] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.168] lstrcmpiA (lpString1=".", lpString2="Database") returned -1 [0041.168] lstrcmpiA (lpString1="..", lpString2="Database") returned -1 [0041.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0041.168] lstrlenA (lpString="\\") returned 1 [0041.168] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0041.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0041.168] lstrlenA (lpString="Database") returned 8 [0041.168] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="Database" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" [0041.168] LocalFree (hMem=0x69e038) returned 0x0 [0041.168] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned 87 [0041.168] lstrlenA (lpString="\\*.*") returned 4 [0041.168] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database" [0041.168] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*" [0041.168] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x68ff68 [0041.169] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.169] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.169] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.169] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.169] LocalFree (hMem=0x6771d8) returned 0x0 [0041.169] LocalFree (hMem=0x69e110) returned 0x0 [0041.169] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.169] lstrcmpiA (lpString1=".", lpString2="ScriptCache") returned -1 [0041.169] lstrcmpiA (lpString1="..", lpString2="ScriptCache") returned -1 [0041.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned 78 [0041.169] lstrlenA (lpString="\\") returned 1 [0041.169] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker" [0041.169] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned 79 [0041.169] lstrlenA (lpString="ScriptCache") returned 11 [0041.169] lstrcpyA (in: lpString1=0x69e110, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\" [0041.169] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpString2="ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0041.169] LocalFree (hMem=0x69e038) returned 0x0 [0041.169] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned 90 [0041.169] lstrlenA (lpString="\\*.*") returned 4 [0041.169] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0041.169] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*" [0041.169] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6902e8 [0041.170] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.170] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.170] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.170] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.170] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.170] StrStrIA (lpFirst="2cc80dabc69f58b6_0", lpSrch="Login Data") returned 0x0 [0041.170] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.170] StrStrIA (lpFirst="2cc80dabc69f58b6_1", lpSrch="Login Data") returned 0x0 [0041.170] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.170] StrStrIA (lpFirst="index", lpSrch="Login Data") returned 0x0 [0041.170] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.170] lstrcmpiA (lpString1=".", lpString2="index-dir") returned -1 [0041.170] lstrcmpiA (lpString1="..", lpString2="index-dir") returned -1 [0041.170] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned 90 [0041.170] lstrlenA (lpString="\\") returned 1 [0041.170] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache" [0041.170] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" [0041.170] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned 91 [0041.170] lstrlenA (lpString="index-dir") returned 9 [0041.170] lstrcpyA (in: lpString1=0x674490, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\" [0041.170] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", lpString2="index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" [0041.170] LocalFree (hMem=0x6772c0) returned 0x0 [0041.170] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned 100 [0041.170] lstrlenA (lpString="\\*.*") returned 4 [0041.170] lstrcpyA (in: lpString1=0x6772c0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir" [0041.170] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*" [0041.170] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*.*", lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0x6900e8 [0041.194] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.194] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.194] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.194] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.194] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 1 [0041.195] StrStrIA (lpFirst="the-real-index", lpSrch="Login Data") returned 0x0 [0041.195] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f63e | out: lpFindFileData=0x19f63e) returned 0 [0041.195] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.195] LocalFree (hMem=0x6772c0) returned 0x0 [0041.195] LocalFree (hMem=0x674490) returned 0x0 [0041.195] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.195] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0041.195] LocalFree (hMem=0x6771d8) returned 0x0 [0041.195] LocalFree (hMem=0x69e110) returned 0x0 [0041.195] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.195] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0041.195] LocalFree (hMem=0x69df58) returned 0x0 [0041.195] LocalFree (hMem=0x651aa0) returned 0x0 [0041.195] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.195] lstrcmpiA (lpString1=".", lpString2="Session Storage") returned -1 [0041.195] lstrcmpiA (lpString1="..", lpString2="Session Storage") returned -1 [0041.195] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.195] lstrlenA (lpString="\\") returned 1 [0041.196] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.196] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.196] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.196] lstrlenA (lpString="Session Storage") returned 15 [0041.196] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.196] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Session Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" [0041.196] LocalFree (hMem=0x6a0138) returned 0x0 [0041.196] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned 79 [0041.196] lstrlenA (lpString="\\*.*") returned 4 [0041.196] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage" [0041.196] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*" [0041.196] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690468 [0041.196] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.196] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.196] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.196] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.196] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.197] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.197] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.197] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.197] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.197] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.197] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0041.197] LocalFree (hMem=0x69df58) returned 0x0 [0041.197] LocalFree (hMem=0x651aa0) returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.197] StrStrIA (lpFirst="Shortcuts", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.197] StrStrIA (lpFirst="Shortcuts-journal", lpSrch="Login Data") returned 0x0 [0041.197] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.197] lstrcmpiA (lpString1=".", lpString2="Sync Data") returned -1 [0041.197] lstrcmpiA (lpString1="..", lpString2="Sync Data") returned -1 [0041.197] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.197] lstrlenA (lpString="\\") returned 1 [0041.198] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.198] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.198] lstrlenA (lpString="Sync Data") returned 9 [0041.198] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Sync Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data" [0041.198] LocalFree (hMem=0x6a0138) returned 0x0 [0041.198] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned 73 [0041.198] lstrlenA (lpString="\\*.*") returned 4 [0041.198] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*.*" [0041.198] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6905e8 [0041.198] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.198] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.198] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.198] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.198] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.198] lstrcmpiA (lpString1=".", lpString2="LevelDB") returned -1 [0041.198] lstrcmpiA (lpString1="..", lpString2="LevelDB") returned -1 [0041.198] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned 73 [0041.198] lstrlenA (lpString="\\") returned 1 [0041.198] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\" [0041.198] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\") returned 74 [0041.198] lstrlenA (lpString="LevelDB") returned 7 [0041.198] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\", lpString2="LevelDB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB" [0041.198] LocalFree (hMem=0x69e030) returned 0x0 [0041.198] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB") returned 81 [0041.198] lstrlenA (lpString="\\*.*") returned 4 [0041.198] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB" [0041.198] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*.*" [0041.199] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6900e8 [0041.199] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.199] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.199] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.199] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.199] LocalFree (hMem=0x6771d8) returned 0x0 [0041.199] LocalFree (hMem=0x69e108) returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.199] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0041.199] LocalFree (hMem=0x69df58) returned 0x0 [0041.199] LocalFree (hMem=0x651aa0) returned 0x0 [0041.199] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.199] lstrcmpiA (lpString1=".", lpString2="Sync Extension Settings") returned -1 [0041.199] lstrcmpiA (lpString1="..", lpString2="Sync Extension Settings") returned -1 [0041.199] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.199] lstrlenA (lpString="\\") returned 1 [0041.199] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.200] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.200] lstrlenA (lpString="Sync Extension Settings") returned 23 [0041.200] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Sync Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" [0041.200] LocalFree (hMem=0x6a0138) returned 0x0 [0041.200] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 87 [0041.200] lstrlenA (lpString="\\*.*") returned 4 [0041.200] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*.*" [0041.200] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x690468 [0041.200] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.200] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.200] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.200] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.200] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.200] lstrcmpiA (lpString1=".", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned -1 [0041.200] lstrcmpiA (lpString1="..", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned -1 [0041.200] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 87 [0041.200] lstrlenA (lpString="\\") returned 1 [0041.200] lstrcpyA (in: lpString1=0x69e040, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\" [0041.200] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\") returned 88 [0041.200] lstrlenA (lpString="pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 32 [0041.200] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpString2="pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" [0041.200] LocalFree (hMem=0x69e040) returned 0x0 [0041.200] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 120 [0041.200] lstrlenA (lpString="\\*.*") returned 4 [0041.200] lstrcpyA (in: lpString1=0x69e040, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" [0041.200] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*" [0041.200] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6901a8 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] StrStrIA (lpFirst="000003.log", lpSrch="Login Data") returned 0x0 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] StrStrIA (lpFirst="CURRENT", lpSrch="Login Data") returned 0x0 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] StrStrIA (lpFirst="LOCK", lpSrch="Login Data") returned 0x0 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] StrStrIA (lpFirst="LOG", lpSrch="Login Data") returned 0x0 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.201] StrStrIA (lpFirst="MANIFEST-000001", lpSrch="Login Data") returned 0x0 [0041.201] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.201] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0041.202] LocalFree (hMem=0x69e040) returned 0x0 [0041.202] LocalFree (hMem=0x6771d8) returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.202] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0041.202] LocalFree (hMem=0x69df58) returned 0x0 [0041.202] LocalFree (hMem=0x651aa0) returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.202] StrStrIA (lpFirst="Top Sites", lpSrch="Login Data") returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.202] StrStrIA (lpFirst="Top Sites-journal", lpSrch="Login Data") returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.202] StrStrIA (lpFirst="TransportSecurity", lpSrch="Login Data") returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.202] StrStrIA (lpFirst="Visited Links", lpSrch="Login Data") returned 0x0 [0041.202] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.202] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 63 [0041.202] lstrlenA (lpString="\\") returned 1 [0041.202] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.203] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned 64 [0041.203] lstrlenA (lpString="Web Applications") returned 16 [0041.203] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpString2="Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0041.203] LocalFree (hMem=0x6a0138) returned 0x0 [0041.203] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 80 [0041.203] lstrlenA (lpString="\\*.*") returned 4 [0041.203] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*" [0041.203] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6901a8 [0041.203] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.203] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.203] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 80 [0041.203] lstrlenA (lpString="\\") returned 1 [0041.203] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0041.203] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned 81 [0041.203] lstrlenA (lpString="_crx_aohghmighlieiainnegkcijnfilokake") returned 37 [0041.203] lstrcpyA (in: lpString1=0x663fc8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpString2="_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0041.203] LocalFree (hMem=0x69e038) returned 0x0 [0041.203] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned 118 [0041.203] lstrlenA (lpString="\\*.*") returned 4 [0041.203] lstrcpyA (in: lpString1=0x69e038, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0041.203] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*" [0041.203] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0x6900e8 [0041.204] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.204] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.204] StrStrIA (lpFirst="Google Docs.ico", lpSrch="Login Data") returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 1 [0041.204] StrStrIA (lpFirst="Google Docs.ico.md5", lpSrch="Login Data") returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6900e8, lpFindFileData=0x19f7aa | out: lpFindFileData=0x19f7aa) returned 0 [0041.204] FindClose (in: hFindFile=0x6900e8 | out: hFindFile=0x6900e8) returned 1 [0041.204] LocalFree (hMem=0x69e038) returned 0x0 [0041.204] LocalFree (hMem=0x663fc8) returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6901a8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.204] FindClose (in: hFindFile=0x6901a8 | out: hFindFile=0x6901a8) returned 1 [0041.204] LocalFree (hMem=0x69df58) returned 0x0 [0041.204] LocalFree (hMem=0x651aa0) returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.204] StrStrIA (lpFirst="Web Data", lpSrch="Login Data") returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.204] StrStrIA (lpFirst="Web Data-journal", lpSrch="Login Data") returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.204] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0041.204] LocalFree (hMem=0x69fd28) returned 0x0 [0041.204] LocalFree (hMem=0x6638b8) returned 0x0 [0041.204] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.204] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.204] lstrlenA (lpString="\\") returned 1 [0041.204] lstrcpyA (in: lpString1=0x662d00, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.204] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.205] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.205] lstrlenA (lpString="EVWhitelist") returned 11 [0041.205] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.205] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="EVWhitelist" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0041.205] LocalFree (hMem=0x662d00) returned 0x0 [0041.205] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 67 [0041.205] lstrlenA (lpString="\\*.*") returned 4 [0041.205] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0041.205] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*" [0041.205] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6904a8 [0041.205] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.205] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.205] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0041.205] LocalFree (hMem=0x69fec8) returned 0x0 [0041.205] LocalFree (hMem=0x69ff98) returned 0x0 [0041.205] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.205] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.205] lstrlenA (lpString="\\") returned 1 [0041.205] lstrcpyA (in: lpString1=0x663408, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.205] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.205] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.205] lstrlenA (lpString="FileTypePolicies") returned 16 [0041.205] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.205] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="FileTypePolicies" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0041.205] LocalFree (hMem=0x663408) returned 0x0 [0041.205] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 72 [0041.205] lstrlenA (lpString="\\*.*") returned 4 [0041.205] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0041.206] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*" [0041.206] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690668 [0041.206] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.206] FindNextFileA (in: hFindFile=0x690668, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.206] FindClose (in: hFindFile=0x690668 | out: hFindFile=0x690668) returned 1 [0041.206] LocalFree (hMem=0x69df58) returned 0x0 [0041.206] LocalFree (hMem=0x651aa0) returned 0x0 [0041.206] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.206] StrStrIA (lpFirst="First Run", lpSrch="Login Data") returned 0x0 [0041.206] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.206] StrStrIA (lpFirst="Local State", lpSrch="Login Data") returned 0x0 [0041.206] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.206] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.206] lstrlenA (lpString="\\") returned 1 [0041.206] lstrcpyA (in: lpString1=0x662c38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.206] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.206] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.206] lstrlenA (lpString="OriginTrials") returned 12 [0041.206] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.206] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="OriginTrials" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0041.206] LocalFree (hMem=0x662c38) returned 0x0 [0041.206] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 68 [0041.206] lstrlenA (lpString="\\*.*") returned 4 [0041.206] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0041.206] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*" [0041.206] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x68ff68 [0041.207] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.207] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.207] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.207] LocalFree (hMem=0x651aa0) returned 0x0 [0041.207] LocalFree (hMem=0x6a0138) returned 0x0 [0041.207] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.207] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.207] lstrlenA (lpString="\\") returned 1 [0041.207] lstrcpyA (in: lpString1=0x662f58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.207] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.207] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.207] lstrlenA (lpString="PepperFlash") returned 11 [0041.207] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.207] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="PepperFlash" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0041.207] LocalFree (hMem=0x662f58) returned 0x0 [0041.207] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 67 [0041.207] lstrlenA (lpString="\\*.*") returned 4 [0041.207] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0041.207] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*" [0041.207] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x68fee8 [0041.207] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.207] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.207] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.207] LocalFree (hMem=0x6a0068) returned 0x0 [0041.207] LocalFree (hMem=0x69fd28) returned 0x0 [0041.208] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.208] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.208] lstrlenA (lpString="\\") returned 1 [0041.208] lstrcpyA (in: lpString1=0x663728, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.208] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.208] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.208] lstrlenA (lpString="pnacl") returned 5 [0041.208] lstrcpyA (in: lpString1=0x6637f0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.208] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="pnacl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0041.208] LocalFree (hMem=0x663728) returned 0x0 [0041.208] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 61 [0041.208] lstrlenA (lpString="\\*.*") returned 4 [0041.208] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0041.208] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*" [0041.208] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690428 [0041.208] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.208] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.208] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0041.208] LocalFree (hMem=0x69fd28) returned 0x0 [0041.208] LocalFree (hMem=0x6637f0) returned 0x0 [0041.208] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.208] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.208] lstrlenA (lpString="\\") returned 1 [0041.208] lstrcpyA (in: lpString1=0x663b10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.208] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.208] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.208] lstrlenA (lpString="Safe Browsing") returned 13 [0041.208] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.209] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Safe Browsing" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" [0041.209] LocalFree (hMem=0x663b10) returned 0x0 [0041.209] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned 69 [0041.209] lstrlenA (lpString="\\*.*") returned 4 [0041.209] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing" [0041.209] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*" [0041.209] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690428 [0041.209] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.209] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.209] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0041.209] LocalFree (hMem=0x651aa0) returned 0x0 [0041.209] LocalFree (hMem=0x69fec8) returned 0x0 [0041.209] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.209] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.209] lstrlenA (lpString="\\") returned 1 [0041.209] lstrcpyA (in: lpString1=0x663728, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.209] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.209] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.209] lstrlenA (lpString="SSLErrorAssistant") returned 17 [0041.209] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.209] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SSLErrorAssistant" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0041.209] LocalFree (hMem=0x663728) returned 0x0 [0041.209] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 73 [0041.209] lstrlenA (lpString="\\*.*") returned 4 [0041.209] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0041.209] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*" [0041.209] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690268 [0041.210] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.210] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.210] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0041.210] LocalFree (hMem=0x69df58) returned 0x0 [0041.210] LocalFree (hMem=0x651aa0) returned 0x0 [0041.210] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.210] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.210] lstrlenA (lpString="\\") returned 1 [0041.210] lstrcpyA (in: lpString1=0x663a48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.210] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.210] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.210] lstrlenA (lpString="Subresource Filter") returned 18 [0041.210] lstrcpyA (in: lpString1=0x651aa0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.210] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0041.210] LocalFree (hMem=0x663a48) returned 0x0 [0041.210] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned 74 [0041.210] lstrlenA (lpString="\\*.*") returned 4 [0041.210] lstrcpyA (in: lpString1=0x69df58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0041.210] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*" [0041.210] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x6900a8 [0041.210] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.210] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.210] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned 74 [0041.210] lstrlenA (lpString="\\") returned 1 [0041.210] lstrcpyA (in: lpString1=0x69e030, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter" [0041.210] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" [0041.211] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned 75 [0041.211] lstrlenA (lpString="Unindexed Rules") returned 15 [0041.211] lstrcpyA (in: lpString1=0x69e108, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\" [0041.211] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", lpString2="Unindexed Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" [0041.211] LocalFree (hMem=0x69e030) returned 0x0 [0041.211] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned 90 [0041.211] lstrlenA (lpString="\\*.*") returned 4 [0041.211] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules" [0041.211] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*" [0041.211] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*.*", lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0x6902e8 [0041.211] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 1 [0041.211] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f916 | out: lpFindFileData=0x19f916) returned 0 [0041.211] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0041.211] LocalFree (hMem=0x6771d8) returned 0x0 [0041.211] LocalFree (hMem=0x69e108) returned 0x0 [0041.211] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.211] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0041.211] LocalFree (hMem=0x69df58) returned 0x0 [0041.211] LocalFree (hMem=0x651aa0) returned 0x0 [0041.211] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.211] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.211] lstrlenA (lpString="\\") returned 1 [0041.211] lstrcpyA (in: lpString1=0x663980, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.211] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.211] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.211] lstrlenA (lpString="SwReporter") returned 10 [0041.211] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.211] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="SwReporter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0041.212] LocalFree (hMem=0x663980) returned 0x0 [0041.212] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 66 [0041.212] lstrlenA (lpString="\\*.*") returned 4 [0041.212] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0041.212] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*" [0041.212] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690468 [0041.212] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.212] FindNextFileA (in: hFindFile=0x690468, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.212] FindClose (in: hFindFile=0x690468 | out: hFindFile=0x690468) returned 1 [0041.212] LocalFree (hMem=0x69ff98) returned 0x0 [0041.212] LocalFree (hMem=0x69fec8) returned 0x0 [0041.212] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 1 [0041.212] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned 55 [0041.212] lstrlenA (lpString="\\") returned 1 [0041.212] lstrcpyA (in: lpString1=0x662f58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data" [0041.212] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.212] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned 56 [0041.212] lstrlenA (lpString="WidevineCdm") returned 11 [0041.212] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\" [0041.212] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\", lpString2="WidevineCdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0041.212] LocalFree (hMem=0x662f58) returned 0x0 [0041.212] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 67 [0041.212] lstrlenA (lpString="\\*.*") returned 4 [0041.212] lstrcpyA (in: lpString1=0x69ff98, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0041.212] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*" [0041.213] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*.*", lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0x690268 [0041.213] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 1 [0041.213] FindNextFileA (in: hFindFile=0x690268, lpFindFileData=0x19fa82 | out: lpFindFileData=0x19fa82) returned 0 [0041.213] FindClose (in: hFindFile=0x690268 | out: hFindFile=0x690268) returned 1 [0041.213] LocalFree (hMem=0x69ff98) returned 0x0 [0041.213] LocalFree (hMem=0x69fd28) returned 0x0 [0041.213] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fbee | out: lpFindFileData=0x19fbee) returned 0 [0041.213] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0041.213] LocalFree (hMem=0x662dc8) returned 0x0 [0041.213] LocalFree (hMem=0x69de98) returned 0x0 [0041.213] FindNextFileA (in: hFindFile=0x6902a8, lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0 [0041.213] FindClose (in: hFindFile=0x6902a8 | out: hFindFile=0x6902a8) returned 1 [0041.214] LocalFree (hMem=0x6519e0) returned 0x0 [0041.214] LocalFree (hMem=0x69aea8) returned 0x0 [0041.214] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.214] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.214] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0041.214] lstrcpyA (in: lpString1=0x670a18, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.214] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Google\\Chrome" | out: lpString1="C:\\ProgramData\\Google\\Chrome") returned="C:\\ProgramData\\Google\\Chrome" [0041.214] LocalFree (hMem=0x6519e0) returned 0x0 [0041.214] lstrlenA (lpString="C:\\ProgramData\\Google\\Chrome") returned 28 [0041.214] lstrlenA (lpString="\\*.*") returned 4 [0041.214] lstrcpyA (in: lpString1=0x679368, lpString2="C:\\ProgramData\\Google\\Chrome" | out: lpString1="C:\\ProgramData\\Google\\Chrome") returned="C:\\ProgramData\\Google\\Chrome" [0041.214] lstrcatA (in: lpString1="C:\\ProgramData\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Google\\Chrome\\*.*") returned="C:\\ProgramData\\Google\\Chrome\\*.*" [0041.214] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.215] LocalFree (hMem=0x679368) returned 0x0 [0041.215] LocalFree (hMem=0x670a18) returned 0x0 [0041.215] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.215] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.215] lstrlenA (lpString="\\Google\\Chrome") returned 14 [0041.215] lstrcpyA (in: lpString1=0x6702e0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.215] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Google\\Chrome" | out: lpString1="C:\\ProgramData\\Google\\Chrome") returned="C:\\ProgramData\\Google\\Chrome" [0041.215] LocalFree (hMem=0x6519e0) returned 0x0 [0041.215] lstrlenA (lpString="C:\\ProgramData\\Google\\Chrome") returned 28 [0041.215] lstrlenA (lpString="\\*.*") returned 4 [0041.215] lstrcpyA (in: lpString1=0x679628, lpString2="C:\\ProgramData\\Google\\Chrome" | out: lpString1="C:\\ProgramData\\Google\\Chrome") returned="C:\\ProgramData\\Google\\Chrome" [0041.215] lstrcatA (in: lpString1="C:\\ProgramData\\Google\\Chrome", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Google\\Chrome\\*.*") returned="C:\\ProgramData\\Google\\Chrome\\*.*" [0041.215] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Google\\Chrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.215] LocalFree (hMem=0x679628) returned 0x0 [0041.215] LocalFree (hMem=0x6702e0) returned 0x0 [0041.215] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.215] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.215] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.215] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.215] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.215] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.215] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.216] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.216] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.216] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.216] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x33, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.216] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.216] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.216] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.216] lstrlenA (lpString="\\Chromium") returned 9 [0041.216] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.216] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" [0041.216] LocalFree (hMem=0x6519e0) returned 0x0 [0041.216] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned 42 [0041.216] lstrlenA (lpString="\\*.*") returned 4 [0041.216] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" [0041.216] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*" [0041.216] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.216] LocalFree (hMem=0x6519e0) returned 0x0 [0041.216] LocalFree (hMem=0x69aea8) returned 0x0 [0041.216] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.216] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.216] lstrlenA (lpString="\\Chromium") returned 9 [0041.216] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.216] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" [0041.216] LocalFree (hMem=0x6519e0) returned 0x0 [0041.216] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned 42 [0041.216] lstrlenA (lpString="\\*.*") returned 4 [0041.216] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium" [0041.216] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*" [0041.216] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.217] LocalFree (hMem=0x6519e0) returned 0x0 [0041.217] LocalFree (hMem=0x69aea8) returned 0x0 [0041.217] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.217] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.217] lstrlenA (lpString="\\Chromium") returned 9 [0041.217] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.217] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" [0041.217] LocalFree (hMem=0x6519e0) returned 0x0 [0041.217] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned 40 [0041.217] lstrlenA (lpString="\\*.*") returned 4 [0041.217] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" [0041.217] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*" [0041.217] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.221] LocalFree (hMem=0x6519e0) returned 0x0 [0041.221] LocalFree (hMem=0x69aea8) returned 0x0 [0041.221] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.221] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.221] lstrlenA (lpString="\\Chromium") returned 9 [0041.221] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.221] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" [0041.221] LocalFree (hMem=0x6519e0) returned 0x0 [0041.221] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned 40 [0041.221] lstrlenA (lpString="\\*.*") returned 4 [0041.221] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium" [0041.221] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*" [0041.221] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.222] LocalFree (hMem=0x6519e0) returned 0x0 [0041.222] LocalFree (hMem=0x69aea8) returned 0x0 [0041.222] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.222] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.222] lstrlenA (lpString="\\Chromium") returned 9 [0041.222] lstrcpyA (in: lpString1=0x66e230, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.222] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Chromium" | out: lpString1="C:\\ProgramData\\Chromium") returned="C:\\ProgramData\\Chromium" [0041.222] LocalFree (hMem=0x6519e0) returned 0x0 [0041.222] lstrlenA (lpString="C:\\ProgramData\\Chromium") returned 23 [0041.222] lstrlenA (lpString="\\*.*") returned 4 [0041.222] lstrcpyA (in: lpString1=0x670778, lpString2="C:\\ProgramData\\Chromium" | out: lpString1="C:\\ProgramData\\Chromium") returned="C:\\ProgramData\\Chromium" [0041.222] lstrcatA (in: lpString1="C:\\ProgramData\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Chromium\\*.*") returned="C:\\ProgramData\\Chromium\\*.*" [0041.222] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.222] LocalFree (hMem=0x670778) returned 0x0 [0041.222] LocalFree (hMem=0x66e230) returned 0x0 [0041.222] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.222] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.222] lstrlenA (lpString="\\Chromium") returned 9 [0041.222] lstrcpyA (in: lpString1=0x66dbf0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.222] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Chromium" | out: lpString1="C:\\ProgramData\\Chromium") returned="C:\\ProgramData\\Chromium" [0041.222] LocalFree (hMem=0x6519e0) returned 0x0 [0041.222] lstrlenA (lpString="C:\\ProgramData\\Chromium") returned 23 [0041.222] lstrlenA (lpString="\\*.*") returned 4 [0041.222] lstrcpyA (in: lpString1=0x66fda0, lpString2="C:\\ProgramData\\Chromium" | out: lpString1="C:\\ProgramData\\Chromium") returned="C:\\ProgramData\\Chromium" [0041.222] lstrcatA (in: lpString1="C:\\ProgramData\\Chromium", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Chromium\\*.*") returned="C:\\ProgramData\\Chromium\\*.*" [0041.222] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Chromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.222] LocalFree (hMem=0x66fda0) returned 0x0 [0041.222] LocalFree (hMem=0x66dbf0) returned 0x0 [0041.222] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.223] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.223] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.223] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.223] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.223] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.223] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.223] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.223] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.223] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.223] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x34, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.223] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.223] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.223] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.223] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.223] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.223] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" [0041.223] LocalFree (hMem=0x6519e0) returned 0x0 [0041.223] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned 44 [0041.223] lstrlenA (lpString="\\*.*") returned 4 [0041.223] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" [0041.223] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*" [0041.223] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.223] LocalFree (hMem=0x6519e0) returned 0x0 [0041.223] LocalFree (hMem=0x69aea8) returned 0x0 [0041.223] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.224] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.224] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.224] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.224] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" [0041.224] LocalFree (hMem=0x6519e0) returned 0x0 [0041.224] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned 44 [0041.224] lstrlenA (lpString="\\*.*") returned 4 [0041.224] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus" [0041.224] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*" [0041.224] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.224] LocalFree (hMem=0x6519e0) returned 0x0 [0041.224] LocalFree (hMem=0x69aea8) returned 0x0 [0041.224] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.224] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.224] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.224] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.224] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" [0041.224] LocalFree (hMem=0x6519e0) returned 0x0 [0041.224] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned 42 [0041.224] lstrlenA (lpString="\\*.*") returned 4 [0041.224] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" [0041.224] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*" [0041.224] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.224] LocalFree (hMem=0x6519e0) returned 0x0 [0041.224] LocalFree (hMem=0x69aea8) returned 0x0 [0041.224] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.224] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.224] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.224] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.224] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" [0041.225] LocalFree (hMem=0x6519e0) returned 0x0 [0041.225] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned 42 [0041.225] lstrlenA (lpString="\\*.*") returned 4 [0041.225] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus" [0041.225] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*" [0041.225] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.225] LocalFree (hMem=0x6519e0) returned 0x0 [0041.225] LocalFree (hMem=0x69aea8) returned 0x0 [0041.225] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.225] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.225] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.225] lstrcpyA (in: lpString1=0x66fda0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.225] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\ChromePlus" | out: lpString1="C:\\ProgramData\\ChromePlus") returned="C:\\ProgramData\\ChromePlus" [0041.225] LocalFree (hMem=0x6519e0) returned 0x0 [0041.225] lstrlenA (lpString="C:\\ProgramData\\ChromePlus") returned 25 [0041.225] lstrlenA (lpString="\\*.*") returned 4 [0041.225] lstrcpyA (in: lpString1=0x6702e0, lpString2="C:\\ProgramData\\ChromePlus" | out: lpString1="C:\\ProgramData\\ChromePlus") returned="C:\\ProgramData\\ChromePlus" [0041.225] lstrcatA (in: lpString1="C:\\ProgramData\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\ChromePlus\\*.*") returned="C:\\ProgramData\\ChromePlus\\*.*" [0041.225] FindFirstFileA (in: lpFileName="C:\\ProgramData\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.225] LocalFree (hMem=0x6702e0) returned 0x0 [0041.225] LocalFree (hMem=0x66fda0) returned 0x0 [0041.225] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.225] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.225] lstrlenA (lpString="\\ChromePlus") returned 11 [0041.225] lstrcpyA (in: lpString1=0x6704d8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.225] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\ChromePlus" | out: lpString1="C:\\ProgramData\\ChromePlus") returned="C:\\ProgramData\\ChromePlus" [0041.225] LocalFree (hMem=0x6519e0) returned 0x0 [0041.225] lstrlenA (lpString="C:\\ProgramData\\ChromePlus") returned 25 [0041.225] lstrlenA (lpString="\\*.*") returned 4 [0041.225] lstrcpyA (in: lpString1=0x670f58, lpString2="C:\\ProgramData\\ChromePlus" | out: lpString1="C:\\ProgramData\\ChromePlus") returned="C:\\ProgramData\\ChromePlus" [0041.225] lstrcatA (in: lpString1="C:\\ProgramData\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\ChromePlus\\*.*") returned="C:\\ProgramData\\ChromePlus\\*.*" [0041.226] FindFirstFileA (in: lpFileName="C:\\ProgramData\\ChromePlus\\*.*", lpFindFileData=0x19fd56 | out: lpFindFileData=0x19fd56) returned 0xffffffff [0041.226] LocalFree (hMem=0x670f58) returned 0x0 [0041.226] LocalFree (hMem=0x6704d8) returned 0x0 [0041.226] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea8 | out: phkResult=0x19fea8*=0x0) returned 0x2 [0041.226] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe7c | out: phkResult=0x19fe7c*=0x0) returned 0x2 [0041.226] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\ChromePlus", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe50 | out: phkResult=0x19fe50*=0x0) returned 0x2 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.226] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.226] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.226] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.227] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.227] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.227] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x35, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.227] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.227] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.227] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.227] lstrlenA (lpString="\\Bromium") returned 8 [0041.227] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.227] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" [0041.227] LocalFree (hMem=0x6519e0) returned 0x0 [0041.227] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned 41 [0041.227] lstrlenA (lpString="\\*.*") returned 4 [0041.227] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" [0041.227] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*" [0041.227] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.227] LocalFree (hMem=0x6519e0) returned 0x0 [0041.227] LocalFree (hMem=0x69aea8) returned 0x0 [0041.227] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.227] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.227] lstrlenA (lpString="\\Bromium") returned 8 [0041.227] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.227] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" [0041.227] LocalFree (hMem=0x6519e0) returned 0x0 [0041.227] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned 41 [0041.227] lstrlenA (lpString="\\*.*") returned 4 [0041.227] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium" [0041.227] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*" [0041.227] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.227] LocalFree (hMem=0x6519e0) returned 0x0 [0041.227] LocalFree (hMem=0x69aea8) returned 0x0 [0041.227] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.227] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.228] lstrlenA (lpString="\\Bromium") returned 8 [0041.228] lstrcpyA (in: lpString1=0x679a48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.228] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" [0041.228] LocalFree (hMem=0x6519e0) returned 0x0 [0041.228] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned 39 [0041.228] lstrlenA (lpString="\\*.*") returned 4 [0041.228] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" [0041.228] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*" [0041.228] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.228] LocalFree (hMem=0x69aea8) returned 0x0 [0041.228] LocalFree (hMem=0x679a48) returned 0x0 [0041.228] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.228] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.228] lstrlenA (lpString="\\Bromium") returned 8 [0041.228] lstrcpyA (in: lpString1=0x679998, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.228] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" [0041.228] LocalFree (hMem=0x6519e0) returned 0x0 [0041.228] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned 39 [0041.228] lstrlenA (lpString="\\*.*") returned 4 [0041.228] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium" [0041.228] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*" [0041.228] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.228] LocalFree (hMem=0x69aea8) returned 0x0 [0041.228] LocalFree (hMem=0x679998) returned 0x0 [0041.228] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.228] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.228] lstrlenA (lpString="\\Bromium") returned 8 [0041.228] lstrcpyA (in: lpString1=0x66df10, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.228] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Bromium" | out: lpString1="C:\\ProgramData\\Bromium") returned="C:\\ProgramData\\Bromium" [0041.228] LocalFree (hMem=0x6519e0) returned 0x0 [0041.228] lstrlenA (lpString="C:\\ProgramData\\Bromium") returned 22 [0041.228] lstrlenA (lpString="\\*.*") returned 4 [0041.229] lstrcpyA (in: lpString1=0x66ff98, lpString2="C:\\ProgramData\\Bromium" | out: lpString1="C:\\ProgramData\\Bromium") returned="C:\\ProgramData\\Bromium" [0041.229] lstrcatA (in: lpString1="C:\\ProgramData\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Bromium\\*.*") returned="C:\\ProgramData\\Bromium\\*.*" [0041.229] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.229] LocalFree (hMem=0x66ff98) returned 0x0 [0041.229] LocalFree (hMem=0x66df10) returned 0x0 [0041.229] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.229] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.229] lstrlenA (lpString="\\Bromium") returned 8 [0041.229] lstrcpyA (in: lpString1=0x66e730, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.229] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Bromium" | out: lpString1="C:\\ProgramData\\Bromium") returned="C:\\ProgramData\\Bromium" [0041.229] LocalFree (hMem=0x6519e0) returned 0x0 [0041.229] lstrlenA (lpString="C:\\ProgramData\\Bromium") returned 22 [0041.229] lstrlenA (lpString="\\*.*") returned 4 [0041.229] lstrcpyA (in: lpString1=0x6708c8, lpString2="C:\\ProgramData\\Bromium" | out: lpString1="C:\\ProgramData\\Bromium") returned="C:\\ProgramData\\Bromium" [0041.229] lstrcatA (in: lpString1="C:\\ProgramData\\Bromium", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Bromium\\*.*") returned="C:\\ProgramData\\Bromium\\*.*" [0041.229] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Bromium\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.229] LocalFree (hMem=0x6708c8) returned 0x0 [0041.229] LocalFree (hMem=0x66e730) returned 0x0 [0041.229] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.229] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.229] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.229] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.229] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.229] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.229] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.230] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.230] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.230] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.230] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x36, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.230] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.230] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.230] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.230] lstrlenA (lpString="\\Nichrome") returned 9 [0041.230] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.230] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" [0041.230] LocalFree (hMem=0x6519e0) returned 0x0 [0041.230] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned 42 [0041.230] lstrlenA (lpString="\\*.*") returned 4 [0041.230] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" [0041.230] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*" [0041.230] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.230] LocalFree (hMem=0x6519e0) returned 0x0 [0041.230] LocalFree (hMem=0x69aea8) returned 0x0 [0041.230] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.230] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.230] lstrlenA (lpString="\\Nichrome") returned 9 [0041.230] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.230] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" [0041.230] LocalFree (hMem=0x6519e0) returned 0x0 [0041.230] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned 42 [0041.230] lstrlenA (lpString="\\*.*") returned 4 [0041.230] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome" [0041.230] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*" [0041.230] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.231] LocalFree (hMem=0x6519e0) returned 0x0 [0041.231] LocalFree (hMem=0x69aea8) returned 0x0 [0041.231] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.231] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.231] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.231] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" [0041.231] LocalFree (hMem=0x6519e0) returned 0x0 [0041.231] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" [0041.231] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*" [0041.231] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.231] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.231] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.231] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" [0041.231] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome" [0041.231] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*" [0041.231] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.231] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.231] lstrcpyA (in: lpString1=0x66e410, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.231] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Nichrome" | out: lpString1="C:\\ProgramData\\Nichrome") returned="C:\\ProgramData\\Nichrome" [0041.231] lstrcpyA (in: lpString1=0x6708c8, lpString2="C:\\ProgramData\\Nichrome" | out: lpString1="C:\\ProgramData\\Nichrome") returned="C:\\ProgramData\\Nichrome" [0041.231] lstrcatA (in: lpString1="C:\\ProgramData\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Nichrome\\*.*") returned="C:\\ProgramData\\Nichrome\\*.*" [0041.231] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.231] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.231] lstrcpyA (in: lpString1=0x66e730, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.231] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Nichrome" | out: lpString1="C:\\ProgramData\\Nichrome") returned="C:\\ProgramData\\Nichrome" [0041.232] lstrcpyA (in: lpString1=0x6704d8, lpString2="C:\\ProgramData\\Nichrome" | out: lpString1="C:\\ProgramData\\Nichrome") returned="C:\\ProgramData\\Nichrome" [0041.232] lstrcatA (in: lpString1="C:\\ProgramData\\Nichrome", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Nichrome\\*.*") returned="C:\\ProgramData\\Nichrome\\*.*" [0041.232] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Nichrome\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.232] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.232] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.232] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.232] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.232] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.232] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x37, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.232] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.232] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.232] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.232] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" [0041.232] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" [0041.232] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*" [0041.232] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.232] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.232] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" [0041.233] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*" [0041.233] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.233] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.233] lstrcpyA (in: lpString1=0x679418, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" [0041.233] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*" [0041.233] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.233] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.233] lstrcpyA (in: lpString1=0x679628, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" [0041.233] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo" [0041.233] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*" [0041.233] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.233] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.233] lstrcpyA (in: lpString1=0x66ea50, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.233] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Comodo" | out: lpString1="C:\\ProgramData\\Comodo") returned="C:\\ProgramData\\Comodo" [0041.233] lstrcpyA (in: lpString1=0x6702e0, lpString2="C:\\ProgramData\\Comodo" | out: lpString1="C:\\ProgramData\\Comodo") returned="C:\\ProgramData\\Comodo" [0041.233] lstrcatA (in: lpString1="C:\\ProgramData\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Comodo\\*.*") returned="C:\\ProgramData\\Comodo\\*.*" [0041.233] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.233] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.233] lstrcpyA (in: lpString1=0x66db50, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.233] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Comodo" | out: lpString1="C:\\ProgramData\\Comodo") returned="C:\\ProgramData\\Comodo" [0041.233] lstrcpyA (in: lpString1=0x66fda0, lpString2="C:\\ProgramData\\Comodo" | out: lpString1="C:\\ProgramData\\Comodo") returned="C:\\ProgramData\\Comodo" [0041.233] lstrcatA (in: lpString1="C:\\ProgramData\\Comodo", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Comodo\\*.*") returned="C:\\ProgramData\\Comodo\\*.*" [0041.233] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Comodo\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.234] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.234] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.234] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.234] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.234] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.234] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x38, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.234] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.234] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.234] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.234] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" [0041.234] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" [0041.234] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*" [0041.234] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.234] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.234] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.234] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" [0041.234] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt" [0041.234] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*" [0041.234] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.235] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.235] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.235] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" [0041.235] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" [0041.235] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*" [0041.235] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.235] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.235] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.235] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" [0041.235] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt" [0041.235] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*" [0041.235] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.235] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.235] lstrcpyA (in: lpString1=0x66e910, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.235] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\RockMelt" | out: lpString1="C:\\ProgramData\\RockMelt") returned="C:\\ProgramData\\RockMelt" [0041.235] lstrcpyA (in: lpString1=0x670f58, lpString2="C:\\ProgramData\\RockMelt" | out: lpString1="C:\\ProgramData\\RockMelt") returned="C:\\ProgramData\\RockMelt" [0041.235] lstrcatA (in: lpString1="C:\\ProgramData\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\RockMelt\\*.*") returned="C:\\ProgramData\\RockMelt\\*.*" [0041.235] FindFirstFileA (in: lpFileName="C:\\ProgramData\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.235] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.235] lstrcpyA (in: lpString1=0x66e050, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.235] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\RockMelt" | out: lpString1="C:\\ProgramData\\RockMelt") returned="C:\\ProgramData\\RockMelt" [0041.235] lstrcpyA (in: lpString1=0x66fda0, lpString2="C:\\ProgramData\\RockMelt" | out: lpString1="C:\\ProgramData\\RockMelt") returned="C:\\ProgramData\\RockMelt" [0041.235] lstrcatA (in: lpString1="C:\\ProgramData\\RockMelt", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\RockMelt\\*.*") returned="C:\\ProgramData\\RockMelt\\*.*" [0041.236] FindFirstFileA (in: lpFileName="C:\\ProgramData\\RockMelt\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.236] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.236] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.236] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.236] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.236] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.236] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x39, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.236] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.236] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="K-Meleon") returned 0x0 [0041.236] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="K-Meleon") returned 0x0 [0041.236] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.236] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="K-Meleon") returned 0x0 [0041.237] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="K-Meleon") returned 0x0 [0041.237] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.237] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.237] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.237] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.237] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.237] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.237] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.238] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.238] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.238] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.238] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x3a, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.238] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="Epic") returned 0x0 [0041.238] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="Epic") returned 0x0 [0041.238] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.239] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.239] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.239] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.239] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.239] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.239] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.239] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.239] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.239] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.239] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x3b, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.239] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.239] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.239] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.240] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.240] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="Staff-FTP") returned 0x0 [0041.240] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="Staff-FTP") returned 0x0 [0041.240] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="Staff-FTP") returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.240] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.240] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.240] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.240] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.240] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.240] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x3c, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.240] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.240] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.240] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.240] lstrcpyA (in: lpString1=0x6790a8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.240] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Sites" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites" [0041.240] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites" [0041.240] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites\\*.*" [0041.240] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Sites\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.241] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.241] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.241] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Visicom Media" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media" [0041.241] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media" [0041.241] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media\\*.*" [0041.241] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Visicom Media\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.241] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.241] lstrcpyA (in: lpString1=0x66e050, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.241] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Sites" | out: lpString1="C:\\ProgramData\\Sites") returned="C:\\ProgramData\\Sites" [0041.241] lstrcpyA (in: lpString1=0x6702e0, lpString2="C:\\ProgramData\\Sites" | out: lpString1="C:\\ProgramData\\Sites") returned="C:\\ProgramData\\Sites" [0041.241] lstrcatA (in: lpString1="C:\\ProgramData\\Sites", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Sites\\*.*") returned="C:\\ProgramData\\Sites\\*.*" [0041.241] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Sites\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.241] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.241] lstrcpyA (in: lpString1=0x670f58, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.241] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Visicom Media" | out: lpString1="C:\\ProgramData\\Visicom Media") returned="C:\\ProgramData\\Visicom Media" [0041.241] lstrcpyA (in: lpString1=0x679208, lpString2="C:\\ProgramData\\Visicom Media" | out: lpString1="C:\\ProgramData\\Visicom Media") returned="C:\\ProgramData\\Visicom Media" [0041.241] lstrcatA (in: lpString1="C:\\ProgramData\\Visicom Media", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Visicom Media\\*.*") returned="C:\\ProgramData\\Visicom Media\\*.*" [0041.241] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Visicom Media\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.241] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.241] lstrcpyA (in: lpString1=0x6794c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.241] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Sites" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites" [0041.241] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites" [0041.242] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites\\*.*" [0041.242] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Sites\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.242] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.242] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.242] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Visicom Media" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media" [0041.242] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media" [0041.242] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media\\*.*" [0041.242] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Visicom Media\\*.*", lpFindFileData=0x19fd76 | out: lpFindFileData=0x19fd76) returned 0xffffffff [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.242] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.242] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.242] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.242] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.242] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.242] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x3d, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.242] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.243] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.243] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.243] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.243] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Global Downloader" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader" [0041.243] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader" [0041.243] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader\\*.*" [0041.243] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Global Downloader\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0041.243] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.243] lstrcpyA (in: lpString1=0x6798e8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.243] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Global Downloader" | out: lpString1="C:\\ProgramData\\Global Downloader") returned="C:\\ProgramData\\Global Downloader" [0041.243] lstrcpyA (in: lpString1=0x679af8, lpString2="C:\\ProgramData\\Global Downloader" | out: lpString1="C:\\ProgramData\\Global Downloader") returned="C:\\ProgramData\\Global Downloader" [0041.243] lstrcatA (in: lpString1="C:\\ProgramData\\Global Downloader", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Global Downloader\\*.*") returned="C:\\ProgramData\\Global Downloader\\*.*" [0041.243] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Global Downloader\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0041.243] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.243] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.243] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Global Downloader" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader" [0041.243] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader" [0041.243] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader\\*.*" [0041.243] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Global Downloader\\*.*", lpFindFileData=0x19fd5e | out: lpFindFileData=0x19fd5e) returned 0xffffffff [0041.243] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.243] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.243] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.244] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.244] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.244] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.244] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.244] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.244] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.244] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.244] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x3e, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.244] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.244] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.245] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="FreshFTP") returned 0x0 [0041.245] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="FreshFTP") returned 0x0 [0041.245] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="FreshFTP") returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.245] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.245] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.245] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.245] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe84 | out: pcbWritten=0x19fe84*=0x8) returned 0x0 [0041.245] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19feac*=0x0, cb=0x4, pcbWritten=0x19fe88 | out: pcbWritten=0x19fe88*=0x4) returned 0x0 [0041.245] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x3f, cb=0x2, pcbWritten=0x19fe84 | out: pcbWritten=0x19fe84*=0x2) returned 0x0 [0041.245] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x2, pcbWritten=0x19fe84 | out: pcbWritten=0x19fe84*=0x2) returned 0x0 [0041.245] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="BlazeFtp") returned 0x0 [0041.245] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="BlazeFtp") returned 0x0 [0041.245] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.245] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.245] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="BlazeFtp") returned 0x0 [0041.245] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="BlazeFtp") returned 0x0 [0041.246] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="BlazeFtp") returned 0x0 [0041.246] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.246] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.246] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.246] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\BlazeFtp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp" [0041.246] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp" [0041.246] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp\\*.*" [0041.246] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BlazeFtp\\*.*", lpFindFileData=0x19fd1e | out: lpFindFileData=0x19fd1e) returned 0xffffffff [0041.246] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.246] lstrcpyA (in: lpString1=0x66e050, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.246] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BlazeFtp" | out: lpString1="C:\\ProgramData\\BlazeFtp") returned="C:\\ProgramData\\BlazeFtp" [0041.246] lstrcpyA (in: lpString1=0x670f58, lpString2="C:\\ProgramData\\BlazeFtp" | out: lpString1="C:\\ProgramData\\BlazeFtp") returned="C:\\ProgramData\\BlazeFtp" [0041.246] lstrcatA (in: lpString1="C:\\ProgramData\\BlazeFtp", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BlazeFtp\\*.*") returned="C:\\ProgramData\\BlazeFtp\\*.*" [0041.246] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BlazeFtp\\*.*", lpFindFileData=0x19fd1e | out: lpFindFileData=0x19fd1e) returned 0xffffffff [0041.247] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.247] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.247] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\BlazeFtp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp" [0041.247] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp" [0041.247] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp\\*.*" [0041.247] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BlazeFtp\\*.*", lpFindFileData=0x19fd1e | out: lpFindFileData=0x19fd1e) returned 0xffffffff [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe90 | out: phkResult=0x19fe90*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe64 | out: phkResult=0x19fe64*=0x0) returned 0x2 [0041.247] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\FlashPeak\\BlazeFtp\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe38 | out: phkResult=0x19fe38*=0x0) returned 0x2 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.248] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19feb0*=0x10, cb=0x4, pcbWritten=0x19fe8c | out: pcbWritten=0x19fe8c*=0x4) returned 0x0 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.248] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.248] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.248] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.248] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.248] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x40, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.248] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.248] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="FTP++.Link\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.248] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="FTP++.Link\\shell\\open\\command", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.248] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="FTP++.Link\\shell\\open\\command", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.249] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.249] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.249] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.249] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.249] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.249] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x41, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.249] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.249] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="GoFTP") returned 0x0 [0041.249] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="GoFTP") returned 0x0 [0041.250] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="GoFTP") returned 0x0 [0041.250] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.250] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.250] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.279] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.279] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.279] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.279] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.280] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.280] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.280] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.280] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x42, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.280] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\60.0.3112.113\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{3D82C954-2957-418B-908F-FE78BF3A8BEB}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-0804-1033-1959-001824237067}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpSrch="3D-FTP") returned 0x0 [0041.280] StrStrIA (lpFirst="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpSrch="3D-FTP") returned 0x0 [0041.280] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.280] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.280] lstrcpyA (in: lpString1=0x66de70, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.281] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\3D-FTP" | out: lpString1="C:\\ProgramData\\3D-FTP") returned="C:\\ProgramData\\3D-FTP" [0041.281] lstrcpyA (in: lpString1=0x66ff98, lpString2="C:\\ProgramData\\3D-FTP" | out: lpString1="C:\\ProgramData\\3D-FTP") returned="C:\\ProgramData\\3D-FTP" [0041.281] lstrcatA (in: lpString1="C:\\ProgramData\\3D-FTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\3D-FTP\\*.*") returned="C:\\ProgramData\\3D-FTP\\*.*" [0041.281] FindFirstFileA (in: lpFileName="C:\\ProgramData\\3D-FTP\\*.*", lpFindFileData=0x19fd6a | out: lpFindFileData=0x19fd6a) returned 0xffffffff [0041.281] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.281] lstrcpyA (in: lpString1=0x670ac0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.281] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\SiteDesigner" | out: lpString1="C:\\ProgramData\\SiteDesigner") returned="C:\\ProgramData\\SiteDesigner" [0041.281] lstrcpyA (in: lpString1=0x670b68, lpString2="C:\\ProgramData\\SiteDesigner" | out: lpString1="C:\\ProgramData\\SiteDesigner") returned="C:\\ProgramData\\SiteDesigner" [0041.281] lstrcatA (in: lpString1="C:\\ProgramData\\SiteDesigner", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\SiteDesigner\\*.*") returned="C:\\ProgramData\\SiteDesigner\\*.*" [0041.281] FindFirstFileA (in: lpFileName="C:\\ProgramData\\SiteDesigner\\*.*", lpFindFileData=0x19fd6a | out: lpFindFileData=0x19fd6a) returned 0xffffffff [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.281] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.281] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.281] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.281] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x43, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.282] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Classes\\TypeLib\\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\\1.2\\0\\win32", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fea8 | out: phkResult=0x19fea8*=0x0) returned 0x2 [0041.282] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Classes\\TypeLib\\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\\1.2\\0\\win32", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe7c | out: phkResult=0x19fe7c*=0x0) returned 0x2 [0041.282] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Classes\\TypeLib\\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\\1.2\\0\\win32", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe50 | out: phkResult=0x19fe50*=0x0) returned 0x2 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.282] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.282] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x44, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.282] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.282] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.282] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.282] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.282] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\NetSarang" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang" [0041.283] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang" [0041.283] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang\\*.*" [0041.283] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\NetSarang\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.283] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.283] lstrcpyA (in: lpString1=0x6708c8, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.283] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\NetSarang" | out: lpString1="C:\\ProgramData\\NetSarang") returned="C:\\ProgramData\\NetSarang" [0041.283] lstrcpyA (in: lpString1=0x670ac0, lpString2="C:\\ProgramData\\NetSarang" | out: lpString1="C:\\ProgramData\\NetSarang") returned="C:\\ProgramData\\NetSarang" [0041.283] lstrcatA (in: lpString1="C:\\ProgramData\\NetSarang", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\NetSarang\\*.*") returned="C:\\ProgramData\\NetSarang\\*.*" [0041.283] FindFirstFileA (in: lpFileName="C:\\ProgramData\\NetSarang\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.283] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.283] lstrcpyA (in: lpString1=0x69aea8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.283] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\NetSarang" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang" [0041.283] lstrcpyA (in: lpString1=0x6519e0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang" [0041.283] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang\\*.*" [0041.283] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\NetSarang\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.283] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.283] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.283] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.285] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.285] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.285] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.285] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.285] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.285] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.285] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.285] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x45, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.286] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.286] CredEnumerateA (in: Filter="TERMSRV/*", Flags=0x0, Count=0x19fed0, Credential=0x19fed4 | out: Count=0x19fed0, Credential=0x19fed4) returned 0 [0041.288] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6519e0 [0041.288] SHGetFolderPathA (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x6519e0 | out: pszPath="C:\\Users\\Nd9E1FYi\\Documents") returned 0x0 [0041.290] lstrcpyA (in: lpString1=0x670628, lpString2="C:\\Users\\Nd9E1FYi\\Documents" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents") returned="C:\\Users\\Nd9E1FYi\\Documents" [0041.290] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\*.*" [0041.290] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\*.*", lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 0x690368 [0041.290] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.290] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="-CwCLZ8Bg3q.pptx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="-xd_Cr.docx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="0i25tov2wpXGSaM.xlsx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="1x8fWTou3kW_ 9PgoO.docx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="29Ose2uIxZJ.docx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="3nY63s1qd0w.pptx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="3W6484dEDjLw.docx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="4wnPwyV.xlsx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="5G6n9.pptx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="5ttJl9La5ZztQnQKvyC.xlsx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="6cZZOFJJYDx1I4.pptx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="8QefJoZR.xlsx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] StrStrIA (lpFirst="98rB9.pptx", lpSrch=".rdp") returned 0x0 [0041.290] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.290] lstrcmpiA (lpString1=".", lpString2="9cw7k6Glo2KXFZ") returned -1 [0041.290] lstrcmpiA (lpString1="..", lpString2="9cw7k6Glo2KXFZ") returned -1 [0041.291] lstrcpyA (in: lpString1=0x670040, lpString2="C:\\Users\\Nd9E1FYi\\Documents" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents") returned="C:\\Users\\Nd9E1FYi\\Documents" [0041.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.291] lstrcpyA (in: lpString1=0x69df08, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\", lpString2="9cw7k6Glo2KXFZ" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ") returned="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ" [0041.291] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ") returned="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ" [0041.291] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ\\*.*" [0041.291] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\9cw7k6Glo2KXFZ\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x690568 [0041.291] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.291] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] StrStrIA (lpFirst="AldhajAYySLx.pptx", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] StrStrIA (lpFirst="aPOy1Xf0g.rtf", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] StrStrIA (lpFirst="Fbp1wsZT.rtf", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] StrStrIA (lpFirst="TG67dv64wOlLa4.doc", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.291] StrStrIA (lpFirst="_VXY4s2-sZpvX4.odt", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0 [0041.291] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0041.291] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.291] StrStrIA (lpFirst="As6JX.pdf", lpSrch=".rdp") returned 0x0 [0041.291] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.291] StrStrIA (lpFirst="b9s7uAphtpb3ps0Y.xlsx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="Baom56hzfNquvdZJ-.odt", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="Bs7oD j2t.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="d2t-Qs44701AjY-.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="D8VzqR.xlsx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="desktop.ini", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="e-oekQfPIgKy_KStn_W.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="E8f07o-hZP26.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="f-KJF.docx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="Fi q8x.xlsx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="fT3Ta37A3g.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="gH6aEUzq2qcogQDuP8k.docx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="gHHXbv997 4Gjv.odp", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="gMA8.docx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="gObbjEuTDvx77eKmKhuv.docx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="H4 FU1Y0jY.xlsx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="hmxE.docx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="ibg3aNtf3j.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="iVjH8T6.pptx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="JTmdlkQ.xlsx", lpSrch=".rdp") returned 0x0 [0041.292] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.292] StrStrIA (lpFirst="Jv- xS0.docx", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.293] StrStrIA (lpFirst="keT7kbFuEs6MVeuYfQX.xlsx", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.293] StrStrIA (lpFirst="lI0J6nyIgMm.xlsx", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.293] StrStrIA (lpFirst="Mtf7gcjCUfhJsTJjN7RY.pptx", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.293] lstrcmpiA (lpString1=".", lpString2="My Music") returned -1 [0041.293] lstrcmpiA (lpString1="..", lpString2="My Music") returned -1 [0041.293] lstrcpyA (in: lpString1=0x66fda0, lpString2="C:\\Users\\Nd9E1FYi\\Documents" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents") returned="C:\\Users\\Nd9E1FYi\\Documents" [0041.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.293] lstrcpyA (in: lpString1=0x6792b8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\", lpString2="My Music" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music" [0041.293] lstrcpyA (in: lpString1=0x69df08, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music" [0041.293] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\*.*" [0041.293] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x6900a8 [0041.293] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.293] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.293] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.293] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.293] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.293] StrStrIA (lpFirst="C5LKRgdk7JvlB-8mj.m4a", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.293] StrStrIA (lpFirst="desktop.ini", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.293] StrStrIA (lpFirst="f7QALcET.m4a", lpSrch=".rdp") returned 0x0 [0041.293] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.294] StrStrIA (lpFirst="joS 7Mls-_Vh7j.wav", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.294] StrStrIA (lpFirst="kGs04Qtnx.m4a", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.294] StrStrIA (lpFirst="rrGBsz.wav", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.294] StrStrIA (lpFirst="VktbsgLQEUYr.wav", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.294] lstrcmpiA (lpString1=".", lpString2="wIOlFv1mOpiQYbt6l R") returned -1 [0041.294] lstrcmpiA (lpString1="..", lpString2="wIOlFv1mOpiQYbt6l R") returned -1 [0041.294] lstrcpyA (in: lpString1=0x679368, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music" [0041.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" [0041.294] lstrcpyA (in: lpString1=0x662c38, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" [0041.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\", lpString2="wIOlFv1mOpiQYbt6l R" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R" [0041.294] lstrcpyA (in: lpString1=0x662f58, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R" [0041.294] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R\\*.*" [0041.294] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\wIOlFv1mOpiQYbt6l R\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x6903a8 [0041.294] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.294] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.294] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.294] StrStrIA (lpFirst="f37Qz33YI0ww01uIAtl6.mp3", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.294] StrStrIA (lpFirst="FXyz08lRAArrJRHtzL.mp3", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.294] StrStrIA (lpFirst="McWiS0.mp3", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.294] StrStrIA (lpFirst="WbMOvu8_EgED4w1f.m4a", lpSrch=".rdp") returned 0x0 [0041.294] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.294] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0041.295] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.295] lstrcmpiA (lpString1=".", lpString2="zFtK-xWIIJj1") returned -1 [0041.295] lstrcmpiA (lpString1="..", lpString2="zFtK-xWIIJj1") returned -1 [0041.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music") returned 36 [0041.295] lstrlenA (lpString="\\") returned 1 [0041.295] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x679158 [0041.295] lstrcpyA (in: lpString1=0x679158, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music" [0041.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" [0041.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\") returned 37 [0041.295] lstrlenA (lpString="zFtK-xWIIJj1") returned 12 [0041.295] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x69dfc0 [0041.295] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\" [0041.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\", lpString2="zFtK-xWIIJj1" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" [0041.295] LocalFree (hMem=0x679158) returned 0x0 [0041.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned 49 [0041.295] lstrlenA (lpString="\\*.*") returned 4 [0041.295] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x69e080 [0041.295] lstrcpyA (in: lpString1=0x69e080, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" [0041.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\*.*" [0041.295] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x68fee8 [0041.295] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.295] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.295] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.295] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.295] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.295] lstrcmpiA (lpString1=".", lpString2="0EtDlBGs") returned -1 [0041.295] lstrcmpiA (lpString1="..", lpString2="0EtDlBGs") returned -1 [0041.295] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned 49 [0041.295] lstrlenA (lpString="\\") returned 1 [0041.295] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x69e140 [0041.295] lstrcpyA (in: lpString1=0x69e140, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" [0041.295] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.296] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned 50 [0041.296] lstrlenA (lpString="0EtDlBGs") returned 8 [0041.296] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662dc8 [0041.296] lstrcpyA (in: lpString1=0x662dc8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.296] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\", lpString2="0EtDlBGs" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" [0041.296] LocalFree (hMem=0x69e140) returned 0x0 [0041.296] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned 58 [0041.296] lstrlenA (lpString="\\*.*") returned 4 [0041.296] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x663728 [0041.296] lstrcpyA (in: lpString1=0x663728, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" [0041.296] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\*.*" [0041.296] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x6905e8 [0041.296] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.296] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.296] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.296] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.296] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.296] StrStrIA (lpFirst="0K1L9IncU.mp3", lpSrch=".rdp") returned 0x0 [0041.296] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.296] lstrcmpiA (lpString1=".", lpString2="2Y4Bx2NR") returned -1 [0041.296] lstrcmpiA (lpString1="..", lpString2="2Y4Bx2NR") returned -1 [0041.296] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned 58 [0041.296] lstrlenA (lpString="\\") returned 1 [0041.296] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663340 [0041.296] lstrcpyA (in: lpString1=0x663340, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" [0041.296] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" [0041.296] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned 59 [0041.296] lstrlenA (lpString="2Y4Bx2NR") returned 8 [0041.296] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fd28 [0041.296] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" [0041.296] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\", lpString2="2Y4Bx2NR" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR" [0041.296] LocalFree (hMem=0x663340) returned 0x0 [0041.296] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR") returned 67 [0041.296] lstrlenA (lpString="\\*.*") returned 4 [0041.296] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x6a0138 [0041.297] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR" [0041.297] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\*.*" [0041.297] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\*.*", lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0x690568 [0041.297] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.297] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.297] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.297] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.297] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.297] StrStrIA (lpFirst="FHaEINaeX.wav", lpSrch=".rdp") returned 0x0 [0041.297] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.297] lstrcmpiA (lpString1=".", lpString2="fVzHtq5") returned -1 [0041.297] lstrcmpiA (lpString1="..", lpString2="fVzHtq5") returned -1 [0041.297] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR") returned 67 [0041.297] lstrlenA (lpString="\\") returned 1 [0041.297] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x6a0068 [0041.297] lstrcpyA (in: lpString1=0x6a0068, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR" [0041.297] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\" [0041.297] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\") returned 68 [0041.297] lstrlenA (lpString="fVzHtq5") returned 7 [0041.297] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x69e140 [0041.297] lstrcpyA (in: lpString1=0x69e140, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\" [0041.297] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\", lpString2="fVzHtq5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5" [0041.297] LocalFree (hMem=0x6a0068) returned 0x0 [0041.297] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5") returned 75 [0041.297] lstrlenA (lpString="\\*.*") returned 4 [0041.297] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x6771d8 [0041.297] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5" [0041.297] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5\\*.*" [0041.297] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\2Y4Bx2NR\\fVzHtq5\\*.*", lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0x6904a8 [0041.298] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.298] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.298] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.298] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.298] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.298] StrStrIA (lpFirst="f2qI.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.298] StrStrIA (lpFirst="rjXtcOp3eLNM r1l4tq.wav", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0 [0041.298] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0041.298] LocalFree (hMem=0x6771d8) returned 0x0 [0041.298] LocalFree (hMem=0x69e140) returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.298] StrStrIA (lpFirst="IINi.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.298] StrStrIA (lpFirst="OqhqdJjVcIYzhBk.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.298] StrStrIA (lpFirst="TEQkHtnPB5oNh_uBM.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x690568, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0 [0041.298] FindClose (in: hFindFile=0x690568 | out: hFindFile=0x690568) returned 1 [0041.298] LocalFree (hMem=0x6a0138) returned 0x0 [0041.298] LocalFree (hMem=0x69fd28) returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.298] StrStrIA (lpFirst="EX mtzYf.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.298] StrStrIA (lpFirst="K_IPpKLr0m5dvVMC.m4a", lpSrch=".rdp") returned 0x0 [0041.298] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.298] lstrcmpiA (lpString1=".", lpString2="mk NhL8") returned -1 [0041.298] lstrcmpiA (lpString1="..", lpString2="mk NhL8") returned -1 [0041.298] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned 58 [0041.298] lstrlenA (lpString="\\") returned 1 [0041.298] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x662c38 [0041.298] lstrcpyA (in: lpString1=0x662c38, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs" [0041.298] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" [0041.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned 59 [0041.299] lstrlenA (lpString="mk NhL8") returned 7 [0041.299] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x69fdf8 [0041.299] lstrcpyA (in: lpString1=0x69fdf8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\" [0041.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\", lpString2="mk NhL8" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8" [0041.299] LocalFree (hMem=0x662c38) returned 0x0 [0041.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8") returned 66 [0041.299] lstrlenA (lpString="\\*.*") returned 4 [0041.299] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x69fec8 [0041.299] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8" [0041.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\*.*" [0041.299] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\*.*", lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0x6902e8 [0041.299] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.299] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.299] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.299] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.299] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.299] lstrcmpiA (lpString1=".", lpString2="IRtv3Ba") returned -1 [0041.299] lstrcmpiA (lpString1="..", lpString2="IRtv3Ba") returned -1 [0041.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8") returned 66 [0041.299] lstrlenA (lpString="\\") returned 1 [0041.299] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fd28 [0041.299] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8" [0041.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\" [0041.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\") returned 67 [0041.299] lstrlenA (lpString="IRtv3Ba") returned 7 [0041.299] LocalAlloc (uFlags=0x40, uBytes=0xcb) returned 0x69e140 [0041.299] lstrcpyA (in: lpString1=0x69e140, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\" [0041.299] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\", lpString2="IRtv3Ba" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba" [0041.299] LocalFree (hMem=0x69fd28) returned 0x0 [0041.299] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba") returned 74 [0041.299] lstrlenA (lpString="\\*.*") returned 4 [0041.300] LocalAlloc (uFlags=0x40, uBytes=0xcf) returned 0x6771d8 [0041.300] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba" [0041.300] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba\\*.*" [0041.300] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\0EtDlBGs\\mk NhL8\\IRtv3Ba\\*.*", lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0x6905a8 [0041.300] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.300] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.300] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.300] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.300] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6905a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0 [0041.300] FindClose (in: hFindFile=0x6905a8 | out: hFindFile=0x6905a8) returned 1 [0041.300] LocalFree (hMem=0x6771d8) returned 0x0 [0041.300] LocalFree (hMem=0x69e140) returned 0x0 [0041.300] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6902e8, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0 [0041.300] FindClose (in: hFindFile=0x6902e8 | out: hFindFile=0x6902e8) returned 1 [0041.300] LocalFree (hMem=0x69fec8) returned 0x0 [0041.300] LocalFree (hMem=0x69fdf8) returned 0x0 [0041.300] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.300] FindNextFileA (in: hFindFile=0x6905e8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.300] FindClose (in: hFindFile=0x6905e8 | out: hFindFile=0x6905e8) returned 1 [0041.301] LocalFree (hMem=0x663728) returned 0x0 [0041.301] LocalFree (hMem=0x662dc8) returned 0x0 [0041.301] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.301] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.301] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.301] lstrcmpiA (lpString1=".", lpString2="j2VF") returned -1 [0041.301] lstrcmpiA (lpString1="..", lpString2="j2VF") returned -1 [0041.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned 49 [0041.301] lstrlenA (lpString="\\") returned 1 [0041.301] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x69e140 [0041.301] lstrcpyA (in: lpString1=0x69e140, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" [0041.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned 50 [0041.301] lstrlenA (lpString="j2VF") returned 4 [0041.301] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x6771d8 [0041.301] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\", lpString2="j2VF" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF" [0041.301] LocalFree (hMem=0x69e140) returned 0x0 [0041.301] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF") returned 54 [0041.301] lstrlenA (lpString="\\*.*") returned 4 [0041.301] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663980 [0041.301] lstrcpyA (in: lpString1=0x663980, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF" [0041.301] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF\\*.*" [0041.301] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\j2VF\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x690428 [0041.301] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.301] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.301] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.301] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.301] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.301] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.301] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.301] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.302] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.302] FindNextFileA (in: hFindFile=0x690428, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.302] FindClose (in: hFindFile=0x690428 | out: hFindFile=0x690428) returned 1 [0041.302] LocalFree (hMem=0x663980) returned 0x0 [0041.302] LocalFree (hMem=0x6771d8) returned 0x0 [0041.302] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.302] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.302] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.302] lstrcmpiA (lpString1=".", lpString2="WodKTR PLHb") returned -1 [0041.302] lstrcmpiA (lpString1="..", lpString2="WodKTR PLHb") returned -1 [0041.302] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned 49 [0041.302] lstrlenA (lpString="\\") returned 1 [0041.302] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x69e140 [0041.302] lstrcpyA (in: lpString1=0x69e140, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1" [0041.302] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.302] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned 50 [0041.302] lstrlenA (lpString="WodKTR PLHb") returned 11 [0041.302] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662dc8 [0041.302] lstrcpyA (in: lpString1=0x662dc8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\" [0041.302] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\", lpString2="WodKTR PLHb" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb" [0041.302] LocalFree (hMem=0x69e140) returned 0x0 [0041.302] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb") returned 61 [0041.302] lstrlenA (lpString="\\*.*") returned 4 [0041.302] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x69fd28 [0041.302] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb" [0041.302] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb\\*.*" [0041.302] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Music\\zFtK-xWIIJj1\\WodKTR PLHb\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x690528 [0041.302] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.302] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.302] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.303] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.303] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.303] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.303] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.303] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.303] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.303] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0041.303] LocalFree (hMem=0x69fd28) returned 0x0 [0041.303] LocalFree (hMem=0x662dc8) returned 0x0 [0041.303] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.303] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.303] LocalFree (hMem=0x69e080) returned 0x0 [0041.303] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.303] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.303] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0 [0041.303] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0041.303] LocalFree (hMem=0x69df08) returned 0x0 [0041.303] LocalFree (hMem=0x6792b8) returned 0x0 [0041.303] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.303] lstrcmpiA (lpString1=".", lpString2="My Pictures") returned -1 [0041.303] lstrcmpiA (lpString1="..", lpString2="My Pictures") returned -1 [0041.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.303] lstrlenA (lpString="\\") returned 1 [0041.303] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670f58 [0041.303] lstrcpyA (in: lpString1=0x670f58, lpString2="C:\\Users\\Nd9E1FYi\\Documents" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents") returned="C:\\Users\\Nd9E1FYi\\Documents" [0041.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.303] lstrlenA (lpString="My Pictures") returned 11 [0041.303] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x678f48 [0041.303] lstrcpyA (in: lpString1=0x678f48, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\" [0041.303] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\", lpString2="My Pictures" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" [0041.303] LocalFree (hMem=0x670f58) returned 0x0 [0041.303] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned 39 [0041.303] lstrlenA (lpString="\\*.*") returned 4 [0041.303] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x69df08 [0041.303] lstrcpyA (in: lpString1=0x69df08, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" [0041.304] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\*.*" [0041.304] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x690068 [0041.304] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.304] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.304] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.304] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.304] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.304] lstrcmpiA (lpString1=".", lpString2="3LhrNA23bcfoH9yaX0") returned -1 [0041.304] lstrcmpiA (lpString1="..", lpString2="3LhrNA23bcfoH9yaX0") returned -1 [0041.304] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned 39 [0041.304] lstrlenA (lpString="\\") returned 1 [0041.304] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69dfc0 [0041.304] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" [0041.304] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.304] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned 40 [0041.304] lstrlenA (lpString="3LhrNA23bcfoH9yaX0") returned 18 [0041.304] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x6638b8 [0041.304] lstrcpyA (in: lpString1=0x6638b8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.304] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\", lpString2="3LhrNA23bcfoH9yaX0" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0" [0041.304] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.304] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0") returned 58 [0041.304] lstrlenA (lpString="\\*.*") returned 4 [0041.304] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x6637f0 [0041.304] lstrcpyA (in: lpString1=0x6637f0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0" [0041.304] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\*.*" [0041.304] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x690328 [0041.304] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.304] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.305] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.305] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.305] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.305] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.305] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.305] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.305] lstrcmpiA (lpString1=".", lpString2="zT_l6JUgbwBNfHMKtH") returned -1 [0041.305] lstrcmpiA (lpString1="..", lpString2="zT_l6JUgbwBNfHMKtH") returned -1 [0041.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0") returned 58 [0041.305] lstrlenA (lpString="\\") returned 1 [0041.305] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x663980 [0041.305] lstrcpyA (in: lpString1=0x663980, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0" [0041.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\" [0041.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\") returned 59 [0041.305] lstrlenA (lpString="zT_l6JUgbwBNfHMKtH") returned 18 [0041.305] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x69dfc0 [0041.305] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\" [0041.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\", lpString2="zT_l6JUgbwBNfHMKtH" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH" [0041.305] LocalFree (hMem=0x663980) returned 0x0 [0041.305] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH") returned 77 [0041.305] lstrlenA (lpString="\\*.*") returned 4 [0041.305] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x69e098 [0041.305] lstrcpyA (in: lpString1=0x69e098, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH" [0041.305] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH\\*.*" [0041.305] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\3LhrNA23bcfoH9yaX0\\zT_l6JUgbwBNfHMKtH\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x6903a8 [0041.305] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.305] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.305] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.305] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.305] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.305] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.305] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.305] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0041.306] LocalFree (hMem=0x69e098) returned 0x0 [0041.306] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.306] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.306] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0041.306] LocalFree (hMem=0x6637f0) returned 0x0 [0041.306] LocalFree (hMem=0x6638b8) returned 0x0 [0041.306] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.306] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.306] lstrcmpiA (lpString1=".", lpString2="Camera Roll") returned -1 [0041.306] lstrcmpiA (lpString1="..", lpString2="Camera Roll") returned -1 [0041.306] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned 39 [0041.306] lstrlenA (lpString="\\") returned 1 [0041.306] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69dfc0 [0041.306] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" [0041.306] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.306] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned 40 [0041.306] lstrlenA (lpString="Camera Roll") returned 11 [0041.306] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x69e078 [0041.306] lstrcpyA (in: lpString1=0x69e078, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.306] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\", lpString2="Camera Roll" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll" [0041.306] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.306] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll") returned 51 [0041.306] lstrlenA (lpString="\\*.*") returned 4 [0041.306] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69e138 [0041.306] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll" [0041.306] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll\\*.*" [0041.306] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Camera Roll\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x6904a8 [0041.307] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.307] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.307] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.307] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.307] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.307] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.307] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0041.307] LocalFree (hMem=0x69e138) returned 0x0 [0041.307] LocalFree (hMem=0x69e078) returned 0x0 [0041.307] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.307] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.307] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.307] lstrcmpiA (lpString1=".", lpString2="NahBkWRFtXcNl5") returned -1 [0041.307] lstrcmpiA (lpString1="..", lpString2="NahBkWRFtXcNl5") returned -1 [0041.307] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned 39 [0041.307] lstrlenA (lpString="\\") returned 1 [0041.307] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69dfc0 [0041.307] lstrcpyA (in: lpString1=0x69dfc0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned 40 [0041.308] lstrlenA (lpString="NahBkWRFtXcNl5") returned 14 [0041.308] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x69e078 [0041.308] lstrcpyA (in: lpString1=0x69e078, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\", lpString2="NahBkWRFtXcNl5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" [0041.308] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned 54 [0041.308] lstrlenA (lpString="\\*.*") returned 4 [0041.308] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662f58 [0041.308] lstrcpyA (in: lpString1=0x662f58, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\*.*" [0041.308] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x6903a8 [0041.308] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.308] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.308] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.308] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.308] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.308] lstrcmpiA (lpString1=".", lpString2="99R_Q lVxE") returned -1 [0041.308] lstrcmpiA (lpString1="..", lpString2="99R_Q lVxE") returned -1 [0041.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned 54 [0041.308] lstrlenA (lpString="\\") returned 1 [0041.308] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69e138 [0041.308] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned 55 [0041.308] lstrlenA (lpString="99R_Q lVxE") returned 10 [0041.308] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x6a0138 [0041.308] lstrcpyA (in: lpString1=0x6a0138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\", lpString2="99R_Q lVxE" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE" [0041.308] LocalFree (hMem=0x69e138) returned 0x0 [0041.308] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE") returned 65 [0041.308] lstrlenA (lpString="\\*.*") returned 4 [0041.308] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x69fd28 [0041.308] lstrcpyA (in: lpString1=0x69fd28, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE" [0041.308] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE\\*.*" [0041.308] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\99R_Q lVxE\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x690328 [0041.309] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.309] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.309] FindNextFileA (in: hFindFile=0x690328, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.309] FindClose (in: hFindFile=0x690328 | out: hFindFile=0x690328) returned 1 [0041.309] LocalFree (hMem=0x69fd28) returned 0x0 [0041.309] LocalFree (hMem=0x6a0138) returned 0x0 [0041.309] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.309] lstrcmpiA (lpString1=".", lpString2="gZwhK4jMV2Oxn") returned -1 [0041.309] lstrcmpiA (lpString1="..", lpString2="gZwhK4jMV2Oxn") returned -1 [0041.309] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned 54 [0041.309] lstrlenA (lpString="\\") returned 1 [0041.309] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69e138 [0041.309] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" [0041.309] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.309] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned 55 [0041.309] lstrlenA (lpString="gZwhK4jMV2Oxn") returned 13 [0041.309] LocalAlloc (uFlags=0x40, uBytes=0xc5) returned 0x69fec8 [0041.309] lstrcpyA (in: lpString1=0x69fec8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.309] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\", lpString2="gZwhK4jMV2Oxn" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn" [0041.310] LocalFree (hMem=0x69e138) returned 0x0 [0041.310] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn") returned 68 [0041.310] lstrlenA (lpString="\\*.*") returned 4 [0041.310] LocalAlloc (uFlags=0x40, uBytes=0xc9) returned 0x69e138 [0041.310] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn" [0041.310] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn\\*.*" [0041.310] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\gZwhK4jMV2Oxn\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x690528 [0041.310] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.310] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.310] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.310] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.310] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.310] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.310] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.310] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.310] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0041.310] LocalFree (hMem=0x69e138) returned 0x0 [0041.310] LocalFree (hMem=0x69fec8) returned 0x0 [0041.310] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.310] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.310] lstrcmpiA (lpString1=".", lpString2="x2aQ28LgrL0iIUBOHa08") returned -1 [0041.310] lstrcmpiA (lpString1="..", lpString2="x2aQ28LgrL0iIUBOHa08") returned -1 [0041.310] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned 54 [0041.310] lstrlenA (lpString="\\") returned 1 [0041.310] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x69e138 [0041.310] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5" [0041.310] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.310] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned 55 [0041.310] lstrlenA (lpString="x2aQ28LgrL0iIUBOHa08") returned 20 [0041.310] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x6771d8 [0041.310] lstrcpyA (in: lpString1=0x6771d8, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\" [0041.310] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\", lpString2="x2aQ28LgrL0iIUBOHa08" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08" [0041.311] LocalFree (hMem=0x69e138) returned 0x0 [0041.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08") returned 75 [0041.311] lstrlenA (lpString="\\*.*") returned 4 [0041.311] LocalAlloc (uFlags=0x40, uBytes=0xd0) returned 0x69e138 [0041.311] lstrcpyA (in: lpString1=0x69e138, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08" [0041.311] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\*.*") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\*.*" [0041.311] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\*.*", lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0x6900a8 [0041.311] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.311] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.311] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.311] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.311] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.311] lstrcmpiA (lpString1=".", lpString2="Ch3lX8QwjGsJyypU5g") returned -1 [0041.311] lstrcmpiA (lpString1="..", lpString2="Ch3lX8QwjGsJyypU5g") returned -1 [0041.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08") returned 75 [0041.311] lstrlenA (lpString="\\") returned 1 [0041.311] LocalAlloc (uFlags=0x40, uBytes=0xcd) returned 0x6772b0 [0041.311] lstrcpyA (in: lpString1=0x6772b0, lpString2="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08" [0041.311] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08", lpString2="\\" | out: lpString1="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\") returned="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\" [0041.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\") returned 76 [0041.311] lstrlenA (lpString="Ch3lX8QwjGsJyypU5g") returned 18 [0041.311] LocalAlloc (uFlags=0x40, uBytes=0xdf) returned 0x677388 [0041.311] LocalFree (hMem=0x6772b0) returned 0x0 [0041.311] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g") returned 94 [0041.311] lstrlenA (lpString="\\*.*") returned 4 [0041.311] LocalAlloc (uFlags=0x40, uBytes=0xe3) returned 0x6743a0 [0041.311] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g\\*.*", lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0x68ff68 [0041.311] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.311] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.312] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.312] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.312] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.312] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 1 [0041.312] lstrcmpiA (lpString1=".", lpString2="zLrmim F rDj") returned -1 [0041.312] lstrcmpiA (lpString1="..", lpString2="zLrmim F rDj") returned -1 [0041.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g") returned 94 [0041.312] lstrlenA (lpString="\\") returned 1 [0041.312] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x677470 [0041.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g\\") returned 95 [0041.312] lstrlenA (lpString="zLrmim F rDj") returned 12 [0041.312] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x677558 [0041.312] LocalFree (hMem=0x677470) returned 0x0 [0041.312] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g\\zLrmim F rDj") returned 107 [0041.312] lstrlenA (lpString="\\*.*") returned 4 [0041.312] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x677650 [0041.312] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\NahBkWRFtXcNl5\\x2aQ28LgrL0iIUBOHa08\\Ch3lX8QwjGsJyypU5g\\zLrmim F rDj\\*.*", lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0x6904a8 [0041.312] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.312] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.312] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.312] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.312] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.312] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.312] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 1 [0041.312] FindNextFileA (in: hFindFile=0x6904a8, lpFindFileData=0x19f66a | out: lpFindFileData=0x19f66a) returned 0 [0041.312] FindClose (in: hFindFile=0x6904a8 | out: hFindFile=0x6904a8) returned 1 [0041.312] LocalFree (hMem=0x677650) returned 0x0 [0041.312] LocalFree (hMem=0x677558) returned 0x0 [0041.312] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19f7d6 | out: lpFindFileData=0x19f7d6) returned 0 [0041.312] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.312] LocalFree (hMem=0x6743a0) returned 0x0 [0041.313] LocalFree (hMem=0x677388) returned 0x0 [0041.313] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.313] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.313] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 1 [0041.313] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19f942 | out: lpFindFileData=0x19f942) returned 0 [0041.313] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0041.313] LocalFree (hMem=0x69e138) returned 0x0 [0041.313] LocalFree (hMem=0x6771d8) returned 0x0 [0041.313] FindNextFileA (in: hFindFile=0x6903a8, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.313] FindClose (in: hFindFile=0x6903a8 | out: hFindFile=0x6903a8) returned 1 [0041.313] LocalFree (hMem=0x662f58) returned 0x0 [0041.313] LocalFree (hMem=0x69e078) returned 0x0 [0041.313] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.313] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.313] lstrcmpiA (lpString1=".", lpString2="Saved Pictures") returned -1 [0041.313] lstrcmpiA (lpString1="..", lpString2="Saved Pictures") returned -1 [0041.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures") returned 39 [0041.313] lstrlenA (lpString="\\") returned 1 [0041.313] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x69dfc0 [0041.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\") returned 40 [0041.313] lstrlenA (lpString="Saved Pictures") returned 14 [0041.313] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x69e078 [0041.313] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.313] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Saved Pictures") returned 54 [0041.313] lstrlenA (lpString="\\*.*") returned 4 [0041.313] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x663728 [0041.313] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Pictures\\Saved Pictures\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x68ff68 [0041.314] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.314] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.314] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.314] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.314] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.314] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.314] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.314] LocalFree (hMem=0x663728) returned 0x0 [0041.314] LocalFree (hMem=0x69e078) returned 0x0 [0041.314] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.314] FindNextFileA (in: hFindFile=0x690068, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0 [0041.314] FindClose (in: hFindFile=0x690068 | out: hFindFile=0x690068) returned 1 [0041.314] LocalFree (hMem=0x69df08) returned 0x0 [0041.314] LocalFree (hMem=0x678f48) returned 0x0 [0041.314] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.314] lstrcmpiA (lpString1=".", lpString2="My Videos") returned -1 [0041.314] lstrcmpiA (lpString1="..", lpString2="My Videos") returned -1 [0041.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.314] lstrlenA (lpString="\\") returned 1 [0041.314] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x6702e0 [0041.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.314] lstrlenA (lpString="My Videos") returned 9 [0041.314] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x6798e8 [0041.314] LocalFree (hMem=0x6702e0) returned 0x0 [0041.314] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos") returned 37 [0041.314] lstrlenA (lpString="\\*.*") returned 4 [0041.314] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x69df08 [0041.315] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x68fee8 [0041.315] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.315] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.315] lstrcmpiA (lpString1=".", lpString2="p3qO-2hXsJ") returned -1 [0041.315] lstrcmpiA (lpString1="..", lpString2="p3qO-2hXsJ") returned -1 [0041.315] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos") returned 37 [0041.315] lstrlenA (lpString="\\") returned 1 [0041.315] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x678e98 [0041.315] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\") returned 38 [0041.315] lstrlenA (lpString="p3qO-2hXsJ") returned 10 [0041.315] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x69dfc0 [0041.315] LocalFree (hMem=0x678e98) returned 0x0 [0041.315] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\p3qO-2hXsJ") returned 48 [0041.315] lstrlenA (lpString="\\*.*") returned 4 [0041.315] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x69e080 [0041.315] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\p3qO-2hXsJ\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x690528 [0041.315] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.315] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.315] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.315] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.315] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] FindNextFileA (in: hFindFile=0x690528, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.316] FindClose (in: hFindFile=0x690528 | out: hFindFile=0x690528) returned 1 [0041.316] LocalFree (hMem=0x69e080) returned 0x0 [0041.316] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.316] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.316] lstrcmpiA (lpString1=".", lpString2="p9fnBVzB i") returned -1 [0041.316] lstrcmpiA (lpString1="..", lpString2="p9fnBVzB i") returned -1 [0041.316] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos") returned 37 [0041.316] lstrlenA (lpString="\\") returned 1 [0041.316] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679838 [0041.316] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\") returned 38 [0041.316] lstrlenA (lpString="p9fnBVzB i") returned 10 [0041.316] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x69dfc0 [0041.316] LocalFree (hMem=0x679838) returned 0x0 [0041.316] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\p9fnBVzB i") returned 48 [0041.316] lstrlenA (lpString="\\*.*") returned 4 [0041.316] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x69e080 [0041.316] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\p9fnBVzB i\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x690168 [0041.316] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.316] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.316] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.317] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x690168, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.317] FindClose (in: hFindFile=0x690168 | out: hFindFile=0x690168) returned 1 [0041.317] LocalFree (hMem=0x69e080) returned 0x0 [0041.317] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.317] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.317] lstrcmpiA (lpString1=".", lpString2="PdbyMOH54BS") returned -1 [0041.317] lstrcmpiA (lpString1="..", lpString2="PdbyMOH54BS") returned -1 [0041.317] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos") returned 37 [0041.317] lstrlenA (lpString="\\") returned 1 [0041.317] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679628 [0041.317] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\") returned 38 [0041.317] lstrlenA (lpString="PdbyMOH54BS") returned 11 [0041.317] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x69dfc0 [0041.317] LocalFree (hMem=0x679628) returned 0x0 [0041.317] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\PdbyMOH54BS") returned 49 [0041.317] lstrlenA (lpString="\\*.*") returned 4 [0041.317] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x69e080 [0041.317] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\My Videos\\PdbyMOH54BS\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x68ff68 [0041.317] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.317] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.317] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.317] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.317] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0 [0041.318] FindClose (in: hFindFile=0x68ff68 | out: hFindFile=0x68ff68) returned 1 [0041.318] LocalFree (hMem=0x69e080) returned 0x0 [0041.318] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.318] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x68fee8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0 [0041.318] FindClose (in: hFindFile=0x68fee8 | out: hFindFile=0x68fee8) returned 1 [0041.318] LocalFree (hMem=0x69df08) returned 0x0 [0041.318] LocalFree (hMem=0x6798e8) returned 0x0 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.318] lstrcmpiA (lpString1=".", lpString2="Outlook Files") returned -1 [0041.318] lstrcmpiA (lpString1="..", lpString2="Outlook Files") returned -1 [0041.318] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.318] lstrlenA (lpString="\\") returned 1 [0041.318] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670ac0 [0041.318] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.318] lstrlenA (lpString="Outlook Files") returned 13 [0041.318] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x69df08 [0041.318] LocalFree (hMem=0x670ac0) returned 0x0 [0041.318] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\Outlook Files") returned 41 [0041.318] lstrlenA (lpString="\\*.*") returned 4 [0041.318] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69dfc0 [0041.318] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\Outlook Files\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x6900a8 [0041.322] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.322] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.322] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.322] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.322] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.322] FindNextFileA (in: hFindFile=0x6900a8, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0 [0041.322] FindClose (in: hFindFile=0x6900a8 | out: hFindFile=0x6900a8) returned 1 [0041.323] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.323] LocalFree (hMem=0x69df08) returned 0x0 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] FindNextFileA (in: hFindFile=0x690368, lpFindFileData=0x19fd86 | out: lpFindFileData=0x19fd86) returned 1 [0041.323] lstrcmpiA (lpString1=".", lpString2="vj4FFV6gt") returned -1 [0041.323] lstrcmpiA (lpString1="..", lpString2="vj4FFV6gt") returned -1 [0041.323] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.323] lstrlenA (lpString="\\") returned 1 [0041.323] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66fda0 [0041.323] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.323] lstrlenA (lpString="vj4FFV6gt") returned 9 [0041.323] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x678f48 [0041.323] LocalFree (hMem=0x66fda0) returned 0x0 [0041.323] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt") returned 37 [0041.323] lstrlenA (lpString="\\*.*") returned 4 [0041.323] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x69df08 [0041.323] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt\\*.*", lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 0x68ff68 [0041.323] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.323] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.323] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.323] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.324] FindNextFileA (in: hFindFile=0x68ff68, lpFindFileData=0x19fc1a | out: lpFindFileData=0x19fc1a) returned 1 [0041.324] lstrcmpiA (lpString1=".", lpString2="G2ZmW0M01") returned -1 [0041.324] lstrcmpiA (lpString1="..", lpString2="G2ZmW0M01") returned -1 [0041.324] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt") returned 37 [0041.324] lstrlenA (lpString="\\") returned 1 [0041.324] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6790a8 [0041.324] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt\\") returned 38 [0041.324] lstrlenA (lpString="G2ZmW0M01") returned 9 [0041.324] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69dfc0 [0041.324] LocalFree (hMem=0x6790a8) returned 0x0 [0041.324] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt\\G2ZmW0M01") returned 47 [0041.324] lstrlenA (lpString="\\*.*") returned 4 [0041.324] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x69e078 [0041.324] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\Documents\\vj4FFV6gt\\G2ZmW0M01\\*.*", lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 0x690228 [0041.324] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.324] FindNextFileA (in: hFindFile=0x690228, lpFindFileData=0x19faae | out: lpFindFileData=0x19faae) returned 1 [0041.324] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.324] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.325] LocalFree (hMem=0x69e078) returned 0x0 [0041.325] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.325] LocalFree (hMem=0x69df08) returned 0x0 [0041.325] LocalFree (hMem=0x678f48) returned 0x0 [0041.325] lstrcmpiA (lpString1=".", lpString2="xdHAOC-TYon 4NTK") returned -1 [0041.325] lstrcmpiA (lpString1="..", lpString2="xdHAOC-TYon 4NTK") returned -1 [0041.325] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.325] lstrlenA (lpString="\\") returned 1 [0041.325] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670388 [0041.325] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.325] lstrlenA (lpString="xdHAOC-TYon 4NTK") returned 16 [0041.325] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x69df08 [0041.325] LocalFree (hMem=0x670388) returned 0x0 [0041.325] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK") returned 44 [0041.325] lstrlenA (lpString="\\*.*") returned 4 [0041.325] LocalAlloc (uFlags=0x40, uBytes=0xb1) returned 0x69dfc0 [0041.326] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.326] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.326] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.326] lstrcmpiA (lpString1=".", lpString2="pTmXTP") returned -1 [0041.326] lstrcmpiA (lpString1="..", lpString2="pTmXTP") returned -1 [0041.326] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK") returned 44 [0041.326] lstrlenA (lpString="\\") returned 1 [0041.326] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69e080 [0041.326] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\") returned 45 [0041.326] lstrlenA (lpString="pTmXTP") returned 6 [0041.326] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x69e138 [0041.326] LocalFree (hMem=0x69e080) returned 0x0 [0041.326] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP") returned 51 [0041.327] lstrlenA (lpString="\\*.*") returned 4 [0041.327] LocalAlloc (uFlags=0x40, uBytes=0xb8) returned 0x6771d8 [0041.327] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.327] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.327] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.327] lstrcmpiA (lpString1=".", lpString2="GqYOOhybpWUIPJ") returned -1 [0041.327] lstrcmpiA (lpString1="..", lpString2="GqYOOhybpWUIPJ") returned -1 [0041.327] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP") returned 51 [0041.327] lstrlenA (lpString="\\") returned 1 [0041.327] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x677298 [0041.327] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\") returned 52 [0041.327] lstrlenA (lpString="GqYOOhybpWUIPJ") returned 14 [0041.327] LocalAlloc (uFlags=0x40, uBytes=0xc3) returned 0x69fd28 [0041.327] LocalFree (hMem=0x677298) returned 0x0 [0041.327] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\GqYOOhybpWUIPJ") returned 66 [0041.327] lstrlenA (lpString="\\*.*") returned 4 [0041.327] LocalAlloc (uFlags=0x40, uBytes=0xc7) returned 0x69fdf8 [0041.327] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.327] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.327] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.327] LocalFree (hMem=0x69fdf8) returned 0x0 [0041.327] LocalFree (hMem=0x69fd28) returned 0x0 [0041.327] lstrcmpiA (lpString1=".", lpString2="pRXOEWQoq26hMCu") returned -1 [0041.327] lstrcmpiA (lpString1="..", lpString2="pRXOEWQoq26hMCu") returned -1 [0041.327] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP") returned 51 [0041.327] lstrlenA (lpString="\\") returned 1 [0041.327] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x677298 [0041.327] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\") returned 52 [0041.327] lstrlenA (lpString="pRXOEWQoq26hMCu") returned 15 [0041.328] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x69fdf8 [0041.328] LocalFree (hMem=0x677298) returned 0x0 [0041.328] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\pRXOEWQoq26hMCu") returned 67 [0041.328] lstrlenA (lpString="\\*.*") returned 4 [0041.328] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x6a0068 [0041.328] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.328] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.328] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.328] LocalFree (hMem=0x6a0068) returned 0x0 [0041.328] LocalFree (hMem=0x69fdf8) returned 0x0 [0041.328] lstrcmpiA (lpString1=".", lpString2="qDBzLpHv2") returned -1 [0041.328] lstrcmpiA (lpString1="..", lpString2="qDBzLpHv2") returned -1 [0041.328] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP") returned 51 [0041.328] lstrlenA (lpString="\\") returned 1 [0041.328] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x677298 [0041.328] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\") returned 52 [0041.328] lstrlenA (lpString="qDBzLpHv2") returned 9 [0041.328] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x662dc8 [0041.328] LocalFree (hMem=0x677298) returned 0x0 [0041.328] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\xdHAOC-TYon 4NTK\\pTmXTP\\qDBzLpHv2") returned 61 [0041.328] lstrlenA (lpString="\\*.*") returned 4 [0041.328] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x6a0068 [0041.328] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.328] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.328] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.328] LocalFree (hMem=0x6a0068) returned 0x0 [0041.328] LocalFree (hMem=0x662dc8) returned 0x0 [0041.328] LocalFree (hMem=0x6771d8) returned 0x0 [0041.328] LocalFree (hMem=0x69e138) returned 0x0 [0041.329] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.329] LocalFree (hMem=0x69df08) returned 0x0 [0041.329] lstrcmpiA (lpString1=".", lpString2="XhQotE 6WqMD6") returned -1 [0041.329] lstrcmpiA (lpString1="..", lpString2="XhQotE 6WqMD6") returned -1 [0041.329] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents") returned 27 [0041.329] lstrlenA (lpString="\\") returned 1 [0041.329] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670f58 [0041.329] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\") returned 28 [0041.329] lstrlenA (lpString="XhQotE 6WqMD6") returned 13 [0041.329] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x69df08 [0041.329] LocalFree (hMem=0x670f58) returned 0x0 [0041.329] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\Documents\\XhQotE 6WqMD6") returned 41 [0041.329] lstrlenA (lpString="\\*.*") returned 4 [0041.329] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69dfc0 [0041.329] lstrcmpiA (lpString1=".", lpString2=".") returned 0 [0041.329] lstrcmpiA (lpString1=".", lpString2="..") returned -1 [0041.329] lstrcmpiA (lpString1="..", lpString2="..") returned 0 [0041.329] LocalFree (hMem=0x69dfc0) returned 0x0 [0041.329] LocalFree (hMem=0x69df08) returned 0x0 [0041.329] LocalFree (hMem=0x670628) returned 0x0 [0041.329] LocalFree (hMem=0x6519e0) returned 0x0 [0041.329] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.329] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.329] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.329] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.330] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.330] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x8) returned 0x0 [0041.330] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x0, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.330] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x46, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.330] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x0, cb=0x2, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x2) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.330] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x10, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.330] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.331] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.331] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.331] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.331] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.331] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.331] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x47, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.331] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.331] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\FTPServers", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.331] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\FTPServers", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe28 | out: phkResult=0x19fe28*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.331] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Robo-FTP 3.7\\Scripts", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe28 | out: phkResult=0x19fe28*=0x0) returned 0x2 [0041.331] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.331] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.331] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.332] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.332] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.332] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.332] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.332] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.332] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe78 | out: pcbWritten=0x19fe78*=0x8) returned 0x0 [0041.332] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fea0*=0x0, cb=0x4, pcbWritten=0x19fe7c | out: pcbWritten=0x19fe7c*=0x4) returned 0x0 [0041.332] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19feb4*=0x48, cb=0x2, pcbWritten=0x19fe78 | out: pcbWritten=0x19fe78*=0x2) returned 0x0 [0041.332] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19feb8*=0x0, cb=0x2, pcbWritten=0x19fe78 | out: pcbWritten=0x19fe78*=0x2) returned 0x0 [0041.333] CertOpenSystemStoreA (hProv=0x0, szSubsystemProtocol="MY") returned 0x6623c0 [0041.339] CertEnumCertificatesInStore (hCertStore=0x6623c0, pPrevCertContext=0x0) returned 0x0 [0041.339] CertCloseStore (hCertStore=0x6623c0, dwFlags=0x0) returned 1 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.339] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fea4*=0x10, cb=0x4, pcbWritten=0x19fe80 | out: pcbWritten=0x19fe80*=0x4) returned 0x0 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.339] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.339] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x49, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.340] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\LinasFTP\\Site Manager", phkResult=0x19fed0 | out: phkResult=0x19fed0*=0x0) returned 0x2 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.340] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.340] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x4a, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.340] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.340] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.340] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.340] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.340] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.340] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x651b08 [0041.341] LocalFree (hMem=0x69e030) returned 0x0 [0041.341] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Cyberduck") returned 43 [0041.341] lstrlenA (lpString="\\*.*") returned 4 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69e030 [0041.341] LocalFree (hMem=0x69e030) returned 0x0 [0041.341] LocalFree (hMem=0x651b08) returned 0x0 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.341] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.341] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.341] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x670628 [0041.341] LocalFree (hMem=0x69e030) returned 0x0 [0041.341] lstrlenA (lpString="C:\\ProgramData\\Cyberduck") returned 24 [0041.341] lstrlenA (lpString="\\*.*") returned 4 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670b68 [0041.341] LocalFree (hMem=0x670b68) returned 0x0 [0041.341] LocalFree (hMem=0x670628) returned 0x0 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.341] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.341] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.341] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.341] LocalFree (hMem=0x69e030) returned 0x0 [0041.341] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Cyberduck") returned 41 [0041.341] lstrlenA (lpString="\\*.*") returned 4 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69e030 [0041.341] LocalFree (hMem=0x69e030) returned 0x0 [0041.341] LocalFree (hMem=0x651b08) returned 0x0 [0041.341] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.341] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.342] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x651b08 [0041.342] LocalFree (hMem=0x69e030) returned 0x0 [0041.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Cyberduck") returned 43 [0041.342] lstrlenA (lpString="\\*.*") returned 4 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69e030 [0041.342] LocalFree (hMem=0x69e030) returned 0x0 [0041.342] LocalFree (hMem=0x651b08) returned 0x0 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.342] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.342] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.342] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fda0 [0041.342] LocalFree (hMem=0x69e030) returned 0x0 [0041.342] lstrlenA (lpString="C:\\ProgramData\\Cyberduck") returned 24 [0041.342] lstrlenA (lpString="\\*.*") returned 4 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x670a18 [0041.342] LocalFree (hMem=0x670a18) returned 0x0 [0041.342] LocalFree (hMem=0x66fda0) returned 0x0 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.342] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.342] lstrlenA (lpString="\\Cyberduck") returned 10 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.342] LocalFree (hMem=0x69e030) returned 0x0 [0041.342] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Cyberduck") returned 41 [0041.342] lstrlenA (lpString="\\*.*") returned 4 [0041.342] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69e030 [0041.342] LocalFree (hMem=0x69e030) returned 0x0 [0041.342] LocalFree (hMem=0x651b08) returned 0x0 [0041.342] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.343] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x4b, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.343] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\SimonTatham\\PuTTY\\Sessions", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.343] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\SimonTatham\\PuTTY\\Sessions", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.343] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.343] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.343] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.344] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.344] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.344] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.344] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.344] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x4c, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.344] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.344] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.344] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.344] lstrlenA (lpString="\\Notepad++") returned 10 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x651b08 [0041.344] LocalFree (hMem=0x69e030) returned 0x0 [0041.344] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Notepad++") returned 43 [0041.344] lstrlenA (lpString="\\*.*") returned 4 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0xb0) returned 0x69e030 [0041.344] LocalFree (hMem=0x69e030) returned 0x0 [0041.344] LocalFree (hMem=0x651b08) returned 0x0 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.344] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.344] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.344] lstrlenA (lpString="\\Notepad++") returned 10 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x6708c8 [0041.344] LocalFree (hMem=0x69e030) returned 0x0 [0041.344] lstrlenA (lpString="C:\\ProgramData\\Notepad++") returned 24 [0041.344] lstrlenA (lpString="\\*.*") returned 4 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0x9d) returned 0x66fda0 [0041.344] LocalFree (hMem=0x66fda0) returned 0x0 [0041.344] LocalFree (hMem=0x6708c8) returned 0x0 [0041.344] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.344] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.345] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.345] lstrlenA (lpString="\\Notepad++") returned 10 [0041.345] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.345] LocalFree (hMem=0x69e030) returned 0x0 [0041.345] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Notepad++") returned 41 [0041.345] lstrlenA (lpString="\\*.*") returned 4 [0041.345] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69e030 [0041.345] LocalFree (hMem=0x69e030) returned 0x0 [0041.345] LocalFree (hMem=0x651b08) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.345] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.345] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.345] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.345] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.345] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.345] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x4d, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.345] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.345] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\CoffeeCup Software", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.345] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\CoffeeCup Software", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.346] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.346] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.346] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.346] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.346] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.346] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x4e, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.346] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.346] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FTPShell") returned 0x0 [0041.346] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FTPShell") returned 0x0 [0041.347] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FTPShell") returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.347] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.347] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.347] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.347] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.347] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.347] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x4f, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.347] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.347] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\MAS-Soft\\FTPInfo\\Setup", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.347] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\MAS-Soft\\FTPInfo\\Setup", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.348] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\MAS-Soft\\FTPInfo\\Setup", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.348] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.348] lstrlenA (lpString="\\FTPInfo") returned 8 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.348] LocalFree (hMem=0x69e030) returned 0x0 [0041.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\FTPInfo") returned 41 [0041.348] lstrlenA (lpString="\\*.*") returned 4 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x69e030 [0041.348] LocalFree (hMem=0x69e030) returned 0x0 [0041.348] LocalFree (hMem=0x651b08) returned 0x0 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.348] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.348] lstrlenA (lpString="C:\\ProgramData") returned 14 [0041.348] lstrlenA (lpString="\\FTPInfo") returned 8 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dbf0 [0041.348] LocalFree (hMem=0x69e030) returned 0x0 [0041.348] lstrlenA (lpString="C:\\ProgramData\\FTPInfo") returned 22 [0041.348] lstrlenA (lpString="\\*.*") returned 4 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x66fda0 [0041.348] LocalFree (hMem=0x66fda0) returned 0x0 [0041.348] LocalFree (hMem=0x66dbf0) returned 0x0 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.348] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.348] lstrlenA (lpString="\\FTPInfo") returned 8 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x678de8 [0041.348] LocalFree (hMem=0x69e030) returned 0x0 [0041.348] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local\\FTPInfo") returned 39 [0041.348] lstrlenA (lpString="\\*.*") returned 4 [0041.348] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x651b08 [0041.348] LocalFree (hMem=0x651b08) returned 0x0 [0041.348] LocalFree (hMem=0x678de8) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.349] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.349] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.349] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.349] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.349] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.349] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x50, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.349] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.349] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="NexusFile") returned 0x0 [0041.349] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="NexusFile") returned 0x0 [0041.350] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="NexusFile") returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.350] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.350] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.350] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.350] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.350] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.350] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x51, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.350] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.350] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FastStone Browser") returned 0x0 [0041.350] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FastStone Browser") returned 0x0 [0041.351] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FastStone Browser") returned 0x0 [0041.351] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.351] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.351] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.351] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.351] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.352] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.352] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.352] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.352] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.352] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.352] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x52, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.352] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.352] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.352] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.352] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.352] lstrlenA (lpString="\\MapleStudio\\ChromePlus") returned 23 [0041.352] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x663b10 [0041.352] lstrcpyA (in: lpString1=0x663b10, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.352] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" [0041.352] LocalFree (hMem=0x69e030) returned 0x0 [0041.352] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned 56 [0041.352] lstrlenA (lpString="\\*.*") returned 4 [0041.352] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x663728 [0041.352] lstrcpyA (in: lpString1=0x663728, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" [0041.352] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*" [0041.352] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.352] LocalFree (hMem=0x663728) returned 0x0 [0041.352] LocalFree (hMem=0x663b10) returned 0x0 [0041.352] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.352] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.352] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 33 [0041.353] lstrlenA (lpString="\\MapleStudio\\ChromePlus") returned 23 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x662c38 [0041.353] lstrcpyA (in: lpString1=0x662c38, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" [0041.353] LocalFree (hMem=0x69e030) returned 0x0 [0041.353] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned 56 [0041.353] lstrlenA (lpString="\\*.*") returned 4 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0xbd) returned 0x6631b0 [0041.353] lstrcpyA (in: lpString1=0x6631b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus" [0041.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*" [0041.353] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.353] LocalFree (hMem=0x6631b0) returned 0x0 [0041.353] LocalFree (hMem=0x662c38) returned 0x0 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.353] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.353] lstrlenA (lpString="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 31 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x651b08 [0041.353] lstrcpyA (in: lpString1=0x651b08, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" [0041.353] LocalFree (hMem=0x69e030) returned 0x0 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x6631b0 [0041.353] lstrcpyA (in: lpString1=0x6631b0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" [0041.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*" [0041.353] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.353] LocalFree (hMem=0x6631b0) returned 0x0 [0041.353] LocalFree (hMem=0x651b08) returned 0x0 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.353] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.353] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x651b08 [0041.353] lstrcpyA (in: lpString1=0x651b08, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.353] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" [0041.353] LocalFree (hMem=0x69e030) returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0xbb) returned 0x662f58 [0041.354] lstrcpyA (in: lpString1=0x662f58, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus" [0041.354] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*" [0041.354] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.354] LocalFree (hMem=0x662f58) returned 0x0 [0041.354] LocalFree (hMem=0x651b08) returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.354] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x679208 [0041.354] lstrcpyA (in: lpString1=0x679208, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.354] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus") returned="C:\\ProgramData\\MapleStudio\\ChromePlus" [0041.354] LocalFree (hMem=0x69e030) returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.354] lstrcpyA (in: lpString1=0x651b08, lpString2="C:\\ProgramData\\MapleStudio\\ChromePlus" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus") returned="C:\\ProgramData\\MapleStudio\\ChromePlus" [0041.354] lstrcatA (in: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*") returned="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*" [0041.354] FindFirstFileA (in: lpFileName="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.354] LocalFree (hMem=0x651b08) returned 0x0 [0041.354] LocalFree (hMem=0x679208) returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x69e030 [0041.354] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x69e030 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x678f48 [0041.354] lstrcpyA (in: lpString1=0x678f48, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.354] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\MapleStudio\\ChromePlus" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus") returned="C:\\ProgramData\\MapleStudio\\ChromePlus" [0041.354] LocalFree (hMem=0x69e030) returned 0x0 [0041.354] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x651b08 [0041.354] lstrcpyA (in: lpString1=0x651b08, lpString2="C:\\ProgramData\\MapleStudio\\ChromePlus" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus") returned="C:\\ProgramData\\MapleStudio\\ChromePlus" [0041.354] lstrcatA (in: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*") returned="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*" [0041.354] FindFirstFileA (in: lpFileName="C:\\ProgramData\\MapleStudio\\ChromePlus\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.354] LocalFree (hMem=0x651b08) returned 0x0 [0041.354] LocalFree (hMem=0x678f48) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.355] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.355] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.355] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.355] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.355] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.355] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x53, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.355] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.355] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Nico Mak Computing\\WinZip\\FTP", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.365] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Nico Mak Computing\\WinZip\\FTP", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.365] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Nico Mak Computing\\WinZip\\mru\\jobs", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.365] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Nico Mak Computing\\WinZip\\mru\\jobs", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.366] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.366] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.366] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.366] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.366] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.366] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x54, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.366] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.366] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.366] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.366] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x677578 [0041.366] lstrcpyA (in: lpString1=0x677578, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.366] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" [0041.366] LocalFree (hMem=0x6773e8) returned 0x0 [0041.366] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x6773e8 [0041.366] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" [0041.366] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*" [0041.366] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.366] LocalFree (hMem=0x6773e8) returned 0x0 [0041.366] LocalFree (hMem=0x677578) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.367] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x677578 [0041.367] lstrcpyA (in: lpString1=0x677578, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" [0041.367] LocalFree (hMem=0x6773e8) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x6773e8 [0041.367] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*" [0041.367] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.367] LocalFree (hMem=0x6773e8) returned 0x0 [0041.367] LocalFree (hMem=0x677578) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.367] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x6794c8 [0041.367] lstrcpyA (in: lpString1=0x6794c8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" [0041.367] LocalFree (hMem=0x6773e8) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6773e8 [0041.367] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*" [0041.367] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.367] LocalFree (hMem=0x6773e8) returned 0x0 [0041.367] LocalFree (hMem=0x6794c8) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.367] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xa7) returned 0x679a48 [0041.367] lstrcpyA (in: lpString1=0x679a48, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" [0041.367] LocalFree (hMem=0x6773e8) returned 0x0 [0041.367] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x6773e8 [0041.367] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex" [0041.367] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*" [0041.368] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.368] LocalFree (hMem=0x6773e8) returned 0x0 [0041.368] LocalFree (hMem=0x679a48) returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.368] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66ddd0 [0041.368] lstrcpyA (in: lpString1=0x66ddd0, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.368] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Yandex" | out: lpString1="C:\\ProgramData\\Yandex") returned="C:\\ProgramData\\Yandex" [0041.368] LocalFree (hMem=0x6773e8) returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6708c8 [0041.368] lstrcpyA (in: lpString1=0x6708c8, lpString2="C:\\ProgramData\\Yandex" | out: lpString1="C:\\ProgramData\\Yandex") returned="C:\\ProgramData\\Yandex" [0041.368] lstrcatA (in: lpString1="C:\\ProgramData\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Yandex\\*.*") returned="C:\\ProgramData\\Yandex\\*.*" [0041.368] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.368] LocalFree (hMem=0x6708c8) returned 0x0 [0041.368] LocalFree (hMem=0x66ddd0) returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.368] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x66e230 [0041.368] lstrcpyA (in: lpString1=0x66e230, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.368] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Yandex" | out: lpString1="C:\\ProgramData\\Yandex") returned="C:\\ProgramData\\Yandex" [0041.368] LocalFree (hMem=0x6773e8) returned 0x0 [0041.368] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6708c8 [0041.368] lstrcpyA (in: lpString1=0x6708c8, lpString2="C:\\ProgramData\\Yandex" | out: lpString1="C:\\ProgramData\\Yandex") returned="C:\\ProgramData\\Yandex" [0041.368] lstrcatA (in: lpString1="C:\\ProgramData\\Yandex", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Yandex\\*.*") returned="C:\\ProgramData\\Yandex\\*.*" [0041.368] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Yandex\\*.*", lpFindFileData=0x19fd5a | out: lpFindFileData=0x19fd5a) returned 0xffffffff [0041.368] LocalFree (hMem=0x6708c8) returned 0x0 [0041.368] LocalFree (hMem=0x66e230) returned 0x0 [0041.368] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.368] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.368] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.369] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.369] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.369] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.369] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.369] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.369] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.369] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.369] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x55, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.369] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.369] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="My FTP") returned 0x0 [0041.369] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="My FTP") returned 0x0 [0041.370] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="My FTP") returned 0x0 [0041.370] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="My FTP") returned 0x0 [0041.370] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="My FTP") returned 0x0 [0041.370] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="My FTP") returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.370] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.370] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.370] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.370] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.370] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.370] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x56, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.370] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.370] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.371] MsiGetComponentPathA (in: szProduct="{74FF1730-B1F2-4D88-926B-1568FAE61DB7}", szComponent="{74FF1730-B1F2-4D88-926B-1568FAE61DB7}", lpPathBuf=0x6773e8, pcchBuf=0x19fecc | out: lpPathBuf="", pcchBuf=0x19fecc) returned 0xffffffff [0041.379] LocalFree (hMem=0x6773e8) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.380] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.380] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.380] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.380] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.380] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.380] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x57, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.380] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.380] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.380] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.380] LocalAlloc (uFlags=0x40, uBytes=0xb5) returned 0x677868 [0041.380] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.380] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\INSoftware\\NovaFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP" [0041.380] LocalFree (hMem=0x6773e8) returned 0x0 [0041.380] LocalAlloc (uFlags=0x40, uBytes=0xb9) returned 0x6634d0 [0041.380] lstrcpyA (in: lpString1=0x6634d0, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP" [0041.380] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP\\*.*" [0041.380] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\INSoftware\\NovaFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.381] LocalFree (hMem=0x6634d0) returned 0x0 [0041.381] LocalFree (hMem=0x677868) returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.381] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x679998 [0041.381] lstrcpyA (in: lpString1=0x679998, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.381] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\INSoftware\\NovaFTP" | out: lpString1="C:\\ProgramData\\INSoftware\\NovaFTP") returned="C:\\ProgramData\\INSoftware\\NovaFTP" [0041.381] LocalFree (hMem=0x6773e8) returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x679af8 [0041.381] lstrcpyA (in: lpString1=0x679af8, lpString2="C:\\ProgramData\\INSoftware\\NovaFTP" | out: lpString1="C:\\ProgramData\\INSoftware\\NovaFTP") returned="C:\\ProgramData\\INSoftware\\NovaFTP" [0041.381] lstrcatA (in: lpString1="C:\\ProgramData\\INSoftware\\NovaFTP", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\INSoftware\\NovaFTP\\*.*") returned="C:\\ProgramData\\INSoftware\\NovaFTP\\*.*" [0041.381] FindFirstFileA (in: lpFileName="C:\\ProgramData\\INSoftware\\NovaFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.381] LocalFree (hMem=0x679af8) returned 0x0 [0041.381] LocalFree (hMem=0x679998) returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.381] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0xb3) returned 0x677868 [0041.381] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.381] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\INSoftware\\NovaFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP" [0041.381] LocalFree (hMem=0x6773e8) returned 0x0 [0041.381] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x6773e8 [0041.381] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP" [0041.381] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP\\*.*" [0041.381] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\INSoftware\\NovaFTP\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.381] LocalFree (hMem=0x6773e8) returned 0x0 [0041.381] LocalFree (hMem=0x677868) returned 0x0 [0041.381] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.382] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x59, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.382] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0041.382] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0041.382] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.382] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.382] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.383] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.383] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.383] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.383] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x58, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.383] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe98 | out: phkResult=0x19fe98*=0x0) returned 0x2 [0041.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe6c | out: phkResult=0x19fe6c*=0x0) returned 0x2 [0041.383] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Mail", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe40 | out: phkResult=0x19fe40*=0x0) returned 0x2 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.383] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.383] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.383] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.384] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.384] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.384] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.384] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5a, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.384] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0041.384] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RimArts\\B2\\Settings", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x0) returned 0x2 [0041.384] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.385] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.385] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.385] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.385] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.385] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.385] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.385] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.385] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.385] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.385] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5b, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.385] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.385] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.385] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Poco Systems Inc", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.385] LocalFree (hMem=0x6773e8) returned 0x0 [0041.385] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.385] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Poco Systems Inc", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.385] LocalFree (hMem=0x6773e8) returned 0x0 [0041.385] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.385] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.385] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x677868 [0041.385] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.385] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\Pocomail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail" [0041.385] LocalFree (hMem=0x6773e8) returned 0x0 [0041.385] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x6773e8 [0041.385] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail" [0041.385] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail\\*.*" [0041.385] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\Pocomail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.386] LocalFree (hMem=0x6773e8) returned 0x0 [0041.386] LocalFree (hMem=0x677868) returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.386] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66e050 [0041.386] lstrcpyA (in: lpString1=0x66e050, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.386] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\Pocomail" | out: lpString1="C:\\ProgramData\\Pocomail") returned="C:\\ProgramData\\Pocomail" [0041.386] LocalFree (hMem=0x6773e8) returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x670970 [0041.386] lstrcpyA (in: lpString1=0x670970, lpString2="C:\\ProgramData\\Pocomail" | out: lpString1="C:\\ProgramData\\Pocomail") returned="C:\\ProgramData\\Pocomail" [0041.386] lstrcatA (in: lpString1="C:\\ProgramData\\Pocomail", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\Pocomail\\*.*") returned="C:\\ProgramData\\Pocomail\\*.*" [0041.386] FindFirstFileA (in: lpFileName="C:\\ProgramData\\Pocomail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.386] LocalFree (hMem=0x670970) returned 0x0 [0041.386] LocalFree (hMem=0x66e050) returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.386] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x677868 [0041.386] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.386] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\Pocomail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail" [0041.386] LocalFree (hMem=0x6773e8) returned 0x0 [0041.386] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x6773e8 [0041.386] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail" [0041.386] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail\\*.*" [0041.386] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\Pocomail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.386] LocalFree (hMem=0x6773e8) returned 0x0 [0041.386] LocalFree (hMem=0x677868) returned 0x0 [0041.386] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.386] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.386] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.387] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.387] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.387] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.387] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5c, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.387] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.387] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\IncrediMail", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.387] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\IncrediMail", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.387] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.387] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.387] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.388] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.388] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.388] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5d, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.388] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.388] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x677868 [0041.388] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.388] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" [0041.388] LocalFree (hMem=0x6773e8) returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x6773e8 [0041.388] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" [0041.388] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*" [0041.388] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.388] LocalFree (hMem=0x6773e8) returned 0x0 [0041.388] LocalFree (hMem=0x677868) returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.388] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dc90 [0041.388] lstrcpyA (in: lpString1=0x66dc90, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.388] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BatMail" | out: lpString1="C:\\ProgramData\\BatMail") returned="C:\\ProgramData\\BatMail" [0041.388] LocalFree (hMem=0x6773e8) returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670778 [0041.388] lstrcpyA (in: lpString1=0x670778, lpString2="C:\\ProgramData\\BatMail" | out: lpString1="C:\\ProgramData\\BatMail") returned="C:\\ProgramData\\BatMail" [0041.388] lstrcatA (in: lpString1="C:\\ProgramData\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BatMail\\*.*") returned="C:\\ProgramData\\BatMail\\*.*" [0041.388] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.388] LocalFree (hMem=0x670778) returned 0x0 [0041.388] LocalFree (hMem=0x66dc90) returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.388] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.388] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x679208 [0041.388] lstrcpyA (in: lpString1=0x679208, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.388] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" [0041.388] LocalFree (hMem=0x6773e8) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x6773e8 [0041.389] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" [0041.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*" [0041.389] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.389] LocalFree (hMem=0x6773e8) returned 0x0 [0041.389] LocalFree (hMem=0x679208) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.389] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x677868 [0041.389] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" [0041.389] LocalFree (hMem=0x6773e8) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x6773e8 [0041.389] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail" [0041.389] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*" [0041.389] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.389] LocalFree (hMem=0x6773e8) returned 0x0 [0041.389] LocalFree (hMem=0x677868) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.389] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0x97) returned 0x66dd30 [0041.389] lstrcpyA (in: lpString1=0x66dd30, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.389] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\BatMail" | out: lpString1="C:\\ProgramData\\BatMail") returned="C:\\ProgramData\\BatMail" [0041.389] LocalFree (hMem=0x6773e8) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0x9b) returned 0x670628 [0041.389] lstrcpyA (in: lpString1=0x670628, lpString2="C:\\ProgramData\\BatMail" | out: lpString1="C:\\ProgramData\\BatMail") returned="C:\\ProgramData\\BatMail" [0041.389] lstrcatA (in: lpString1="C:\\ProgramData\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\BatMail\\*.*") returned="C:\\ProgramData\\BatMail\\*.*" [0041.389] FindFirstFileA (in: lpFileName="C:\\ProgramData\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.389] LocalFree (hMem=0x670628) returned 0x0 [0041.389] LocalFree (hMem=0x66dd30) returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.389] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.389] LocalAlloc (uFlags=0x40, uBytes=0xa8) returned 0x679578 [0041.389] lstrcpyA (in: lpString1=0x679578, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.390] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" [0041.390] LocalFree (hMem=0x6773e8) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0xac) returned 0x6773e8 [0041.390] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail" [0041.390] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*" [0041.390] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\BatMail\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.390] LocalFree (hMem=0x6773e8) returned 0x0 [0041.390] LocalFree (hMem=0x679578) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.390] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x677868 [0041.390] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.390] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" [0041.390] LocalFree (hMem=0x6773e8) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x6773e8 [0041.390] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" [0041.390] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*" [0041.390] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.390] LocalFree (hMem=0x6773e8) returned 0x0 [0041.390] LocalFree (hMem=0x677868) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.390] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66dd30 [0041.390] lstrcpyA (in: lpString1=0x66dd30, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.390] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\The Bat!" | out: lpString1="C:\\ProgramData\\The Bat!") returned="C:\\ProgramData\\The Bat!" [0041.390] LocalFree (hMem=0x6773e8) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x670ac0 [0041.390] lstrcpyA (in: lpString1=0x670ac0, lpString2="C:\\ProgramData\\The Bat!" | out: lpString1="C:\\ProgramData\\The Bat!") returned="C:\\ProgramData\\The Bat!" [0041.390] lstrcatA (in: lpString1="C:\\ProgramData\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\The Bat!\\*.*") returned="C:\\ProgramData\\The Bat!\\*.*" [0041.390] FindFirstFileA (in: lpFileName="C:\\ProgramData\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.390] LocalFree (hMem=0x670ac0) returned 0x0 [0041.390] LocalFree (hMem=0x66dd30) returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.390] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.390] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x677868 [0041.391] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.391] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" [0041.391] LocalFree (hMem=0x6773e8) returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x6773e8 [0041.391] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" [0041.391] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*" [0041.391] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.391] LocalFree (hMem=0x6773e8) returned 0x0 [0041.391] LocalFree (hMem=0x677868) returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.391] SHGetFolderPathA (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0xab) returned 0x677868 [0041.391] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming" [0041.391] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming", lpString2="\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" [0041.391] LocalFree (hMem=0x6773e8) returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0xaf) returned 0x6773e8 [0041.391] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!" [0041.391] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*" [0041.391] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Roaming\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.391] LocalFree (hMem=0x6773e8) returned 0x0 [0041.391] LocalFree (hMem=0x677868) returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.391] SHGetFolderPathA (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\ProgramData") returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0x98) returned 0x66ea50 [0041.391] lstrcpyA (in: lpString1=0x66ea50, lpString2="C:\\ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData" [0041.391] lstrcatA (in: lpString1="C:\\ProgramData", lpString2="\\The Bat!" | out: lpString1="C:\\ProgramData\\The Bat!") returned="C:\\ProgramData\\The Bat!" [0041.391] LocalFree (hMem=0x6773e8) returned 0x0 [0041.391] LocalAlloc (uFlags=0x40, uBytes=0x9c) returned 0x6700e8 [0041.391] lstrcpyA (in: lpString1=0x6700e8, lpString2="C:\\ProgramData\\The Bat!" | out: lpString1="C:\\ProgramData\\The Bat!") returned="C:\\ProgramData\\The Bat!" [0041.391] lstrcatA (in: lpString1="C:\\ProgramData\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\ProgramData\\The Bat!\\*.*") returned="C:\\ProgramData\\The Bat!\\*.*" [0041.391] FindFirstFileA (in: lpFileName="C:\\ProgramData\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.393] LocalFree (hMem=0x6700e8) returned 0x0 [0041.393] LocalFree (hMem=0x66ea50) returned 0x0 [0041.393] LocalAlloc (uFlags=0x40, uBytes=0x185) returned 0x6773e8 [0041.393] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6773e8 | out: pszPath="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned 0x0 [0041.393] LocalAlloc (uFlags=0x40, uBytes=0xa9) returned 0x677868 [0041.394] lstrcpyA (in: lpString1=0x677868, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local" [0041.394] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local", lpString2="\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" [0041.394] LocalFree (hMem=0x6773e8) returned 0x0 [0041.394] LocalAlloc (uFlags=0x40, uBytes=0xad) returned 0x6773e8 [0041.394] lstrcpyA (in: lpString1=0x6773e8, lpString2="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!" [0041.394] lstrcatA (in: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!", lpString2="\\*.*" | out: lpString1="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*") returned="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*" [0041.394] FindFirstFileA (in: lpFileName="C:\\Users\\Nd9E1FYi\\AppData\\Local\\The Bat!\\*.*", lpFindFileData=0x19fd3a | out: lpFindFileData=0x19fd3a) returned 0xffffffff [0041.394] LocalFree (hMem=0x6773e8) returned 0x0 [0041.394] LocalFree (hMem=0x677868) returned 0x0 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.394] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe60 | out: phkResult=0x19fe60*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe34 | out: phkResult=0x19fe34*=0x0) returned 0x2 [0041.395] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\RIT\\The Bat!\\Users depot", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe08 | out: phkResult=0x19fe08*=0x0) returned 0x2 [0041.395] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.395] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.395] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.395] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.395] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.395] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.396] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.396] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.396] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x8) returned 0x0 [0041.396] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec8*=0x0, cb=0x4, pcbWritten=0x19fea4 | out: pcbWritten=0x19fea4*=0x4) returned 0x0 [0041.396] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fedc*=0x5e, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.396] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fee0*=0x0, cb=0x2, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x2) returned 0x0 [0041.396] PStoreCreateInstance () returned 0x80004001 [0041.396] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.396] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x6773e8 [0041.396] lstrcpyA (in: lpString1=0x6773e8, lpString2="\\" | out: lpString1="\\") returned="\\" [0041.396] lstrcatA (in: lpString1="\\", lpString2="Software\\Microsoft\\Internet Account Manager\\Accounts" | out: lpString1="\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned="\\Software\\Microsoft\\Internet Account Manager\\Accounts" [0041.396] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Identities", phkResult=0x19fec4 | out: phkResult=0x19fec4*=0x0) returned 0x2 [0041.396] LocalFree (hMem=0x6773e8) returned 0x0 [0041.396] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x19feac | out: phkResult=0x19feac*=0x34c) returned 0x0 [0041.396] RegQueryValueExA (in: hKey=0x34c, lpValueName="Outlook", lpReserved=0x0, lpType=0x19fea4, lpData=0x0, lpcbData=0x19fea8*=0x19fe98 | out: lpType=0x19fea4*=0x0, lpData=0x0, lpcbData=0x19fea8*=0x0) returned 0x2 [0041.396] RegCloseKey (hKey=0x34c) returned 0x0 [0041.396] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20219, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x34c) returned 0x0 [0041.396] RegQueryValueExA (in: hKey=0x34c, lpValueName="Outlook", lpReserved=0x0, lpType=0x19fe78, lpData=0x0, lpcbData=0x19fe7c*=0x19fe54 | out: lpType=0x19fe78*=0x0, lpData=0x0, lpcbData=0x19fe7c*=0x0) returned 0x2 [0041.396] RegCloseKey (hKey=0x34c) returned 0x0 [0041.396] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fe54 | out: phkResult=0x19fe54*=0x34c) returned 0x0 [0041.397] RegQueryValueExA (in: hKey=0x34c, lpValueName="Outlook", lpReserved=0x0, lpType=0x19fe4c, lpData=0x0, lpcbData=0x19fe50*=0x19fe28 | out: lpType=0x19fe4c*=0x1, lpData=0x0, lpcbData=0x19fe50*=0x36) returned 0x0 [0041.397] LocalAlloc (uFlags=0x40, uBytes=0xb7) returned 0x6773e8 [0041.397] RegQueryValueExA (in: hKey=0x34c, lpValueName="Outlook", lpReserved=0x0, lpType=0x0, lpData=0x6773e8, lpcbData=0x19fe50*=0x36 | out: lpType=0x0, lpData=0x6773e8*=0x53, lpcbData=0x19fe50*=0x36) returned 0x0 [0041.397] RegCloseKey (hKey=0x34c) returned 0x0 [0041.397] LocalAlloc (uFlags=0x40, uBytes=0xbf) returned 0x663b10 [0041.397] lstrcpyA (in: lpString1=0x663b10, lpString2="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager" | out: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager") returned="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager" [0041.397] lstrcatA (in: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager", lpString2="\\Accounts" | out: lpString1="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts") returned="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts" [0041.397] LocalFree (hMem=0x6773e8) returned 0x0 [0041.397] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0x19fec8 | out: phkResult=0x19fec8*=0x0) returned 0x2 [0041.397] LocalFree (hMem=0x663b10) returned 0x0 [0041.397] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0x19fecc | out: phkResult=0x19fecc*=0x0) returned 0x2 [0041.397] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", phkResult=0x19fec8 | out: phkResult=0x19fec8*=0x0) returned 0x2 [0041.397] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", phkResult=0x19fec8 | out: phkResult=0x19fec8*=0x0) returned 0x2 [0041.397] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.397] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.397] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fecc*=0x10, cb=0x4, pcbWritten=0x19fea8 | out: pcbWritten=0x19fea8*=0x4) returned 0x0 [0041.397] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.397] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.397] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.398] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.398] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.398] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x8) returned 0x0 [0041.398] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc0*=0x0, cb=0x4, pcbWritten=0x19fd9c | out: pcbWritten=0x19fd9c*=0x4) returned 0x0 [0041.398] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd4*=0x5f, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0041.398] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdd8*=0x0, cb=0x2, pcbWritten=0x19fd98 | out: pcbWritten=0x19fd98*=0x2) returned 0x0 [0041.398] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0041.398] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0041.398] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a0230 [0041.398] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x34c) returned 0x0 [0041.398] RegEnumKeyExA (in: hKey=0x34c, dwIndex=0x0, lpName=0x6a0230, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0041.398] lstrlenA (lpString="Software\\Mozilla") returned 16 [0041.398] lstrlenA (lpString="\\") returned 1 [0041.398] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66e050 [0041.398] lstrcpyA (in: lpString1=0x66e050, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0041.398] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0041.398] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0041.398] lstrlenA (lpString="Firefox") returned 7 [0041.398] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fda0 [0041.398] lstrcpyA (in: lpString1=0x66fda0, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0041.398] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0041.398] LocalFree (hMem=0x66e050) returned 0x0 [0041.398] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0041.398] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a0ab8 [0041.398] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x348) returned 0x0 [0041.398] RegEnumKeyExA (in: hKey=0x348, dwIndex=0x0, lpName=0x6a0ab8, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0041.399] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0041.399] lstrlenA (lpString="\\") returned 1 [0041.399] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x6708c8 [0041.399] lstrcpyA (in: lpString1=0x6708c8, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0041.399] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0041.399] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0041.399] lstrlenA (lpString="TaskBarIDs") returned 10 [0041.399] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x679788 [0041.399] lstrcpyA (in: lpString1=0x679788, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0041.399] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0041.399] LocalFree (hMem=0x6708c8) returned 0x0 [0041.399] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0041.399] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a1340 [0041.399] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x350) returned 0x0 [0041.399] RegEnumKeyExA (in: hKey=0x350, dwIndex=0x0, lpName=0x6a1340, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.399] RegCloseKey (hKey=0x350) returned 0x0 [0041.399] LocalFree (hMem=0x6a1340) returned 0x0 [0041.399] LocalFree (hMem=0x679788) returned 0x0 [0041.399] RegEnumKeyExA (in: hKey=0x348, dwIndex=0x1, lpName=0x6a0ab8, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.399] RegCloseKey (hKey=0x348) returned 0x0 [0041.399] LocalFree (hMem=0x6a0ab8) returned 0x0 [0041.399] LocalFree (hMem=0x66fda0) returned 0x0 [0041.399] RegEnumKeyExA (in: hKey=0x34c, dwIndex=0x1, lpName=0x6a0230, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.399] RegCloseKey (hKey=0x34c) returned 0x0 [0041.399] LocalFree (hMem=0x6a0230) returned 0x0 [0041.399] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0041.399] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a0230 [0041.399] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0041.399] LocalFree (hMem=0x6a0230) returned 0x0 [0041.399] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0041.399] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x19fddf | out: lpBuffer="C:\\Users\\Nd9E1FYi\\Desktop") returned 0x19 [0041.399] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0041.399] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a0230 [0041.399] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x34c) returned 0x0 [0041.400] RegEnumKeyExA (in: hKey=0x34c, dwIndex=0x0, lpName=0x6a0230, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0041.400] lstrlenA (lpString="Software\\Mozilla") returned 16 [0041.400] lstrlenA (lpString="\\") returned 1 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x66e050 [0041.400] lstrcpyA (in: lpString1=0x66e050, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0041.400] lstrcatA (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0041.400] lstrlenA (lpString="Software\\Mozilla\\") returned 17 [0041.400] lstrlenA (lpString="Firefox") returned 7 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0x99) returned 0x66fda0 [0041.400] lstrcpyA (in: lpString1=0x66fda0, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0041.400] lstrcatA (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0041.400] LocalFree (hMem=0x66e050) returned 0x0 [0041.400] StrStrIA (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a0ab8 [0041.400] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox", phkResult=0x19fd88 | out: phkResult=0x19fd88*=0x348) returned 0x0 [0041.400] RegEnumKeyExA (in: hKey=0x348, dwIndex=0x0, lpName=0x6a0ab8, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0041.400] lstrlenA (lpString="Software\\Mozilla\\Firefox") returned 24 [0041.400] lstrlenA (lpString="\\") returned 1 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x670628 [0041.400] lstrcpyA (in: lpString1=0x670628, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0041.400] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0041.400] lstrlenA (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0041.400] lstrlenA (lpString="TaskBarIDs") returned 10 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x679af8 [0041.400] lstrcpyA (in: lpString1=0x679af8, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0041.400] lstrcatA (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0041.400] LocalFree (hMem=0x670628) returned 0x0 [0041.400] StrStrIA (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0041.400] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x6a1340 [0041.400] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", phkResult=0x19fd54 | out: phkResult=0x19fd54*=0x350) returned 0x0 [0041.400] RegEnumKeyExA (in: hKey=0x350, dwIndex=0x0, lpName=0x6a1340, lpcchName=0x19fd4c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x19fd4c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.400] RegCloseKey (hKey=0x350) returned 0x0 [0041.400] LocalFree (hMem=0x6a1340) returned 0x0 [0041.400] LocalFree (hMem=0x679af8) returned 0x0 [0041.400] RegEnumKeyExA (in: hKey=0x348, dwIndex=0x1, lpName=0x6a0ab8, lpcchName=0x19fd80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x19fd80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.401] RegCloseKey (hKey=0x348) returned 0x0 [0041.401] LocalFree (hMem=0x6a0ab8) returned 0x0 [0041.401] LocalFree (hMem=0x66fda0) returned 0x0 [0041.401] RegEnumKeyExA (in: hKey=0x34c, dwIndex=0x1, lpName=0x6a0230, lpcchName=0x19fdb4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x19fdb4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0041.401] RegCloseKey (hKey=0x34c) returned 0x0 [0041.401] LocalFree (hMem=0x6a0230) returned 0x0 [0041.401] StrStrIA (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0041.401] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla", phkResult=0x19fdbc | out: phkResult=0x19fdbc*=0x0) returned 0x2 [0041.401] LocalFree (hMem=0x6a0230) returned 0x0 [0041.401] SetCurrentDirectoryA (lpPathName="C:\\Users\\Nd9E1FYi\\Desktop" (normalized: "c:\\users\\nd9e1fyi\\desktop")) returned 1 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.401] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fdc4*=0x10, cb=0x4, pcbWritten=0x19fda0 | out: pcbWritten=0x19fda0*=0x4) returned 0x0 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.401] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.401] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x1 | out: plibNewPosition=0x1) returned 0x0 [0041.401] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x4117a2*=0x2, cb=0x8, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x8) returned 0x0 [0041.401] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec0*=0x0, cb=0x4, pcbWritten=0x19fe9c | out: pcbWritten=0x19fe9c*=0x4) returned 0x0 [0041.401] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed4*=0x60, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.401] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fed8*=0x0, cb=0x2, pcbWritten=0x19fe98 | out: pcbWritten=0x19fe98*=0x2) returned 0x0 [0041.401] StrStrIA (lpFirst="Google ChromeGoogle Chrome", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{3c3aafc8-d898-43ec-998f-965ffdae065a}Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{3D82C954-2957-418B-908F-FE78BF3A8BEB}Adobe Flash Player 25 NPAPI", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{582EA838-9199-3518-A05C-DB09462F68EC}Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{68306422-7C57-373F-8860-D26CE4BA2A15}Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}Microsoft Visual C++ 2005 Redistributable", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{9BE518E6-ECC6-35A9-88E4-87755C07200F}Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{AC76BA86-0804-1033-1959-001824237067}Adobe Refresh Manager", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}Adobe Acrobat Reader DC", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{B175520C-86A2-35A7-8619-86DC379688B9}Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{e52a6842-b0ac-476e-b48f-378a97a67346}Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{e6e75766-da0f-4ba2-9788-6ea593ce702d}Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{f325f05b-f963-4640-a43b-c8a494cdda0f}Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpSrch="FastTrack") returned 0x0 [0041.402] StrStrIA (lpFirst="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpSrch="FastTrack") returned 0x0 [0041.402] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.402] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x148, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.402] ISequentialStream:RemoteWrite (in: This=0x65fed0, pv=0x19fec4*=0x10, cb=0x4, pcbWritten=0x19fea0 | out: pcbWritten=0x19fea0*=0x4) returned 0x0 [0041.402] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x2 | out: plibNewPosition=0x2) returned 0x0 [0041.402] IStream:RemoteSeek (in: This=0x65fed0, dlibMove=0x140, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0041.403] IStream:SetSize (This=0x65fed0, libNewSize=0x140) returned 0x0 [0041.403] IUnknown:Release (This=0x65fed0) returned 0x0 [0041.403] NetUserEnum (in: servername=0x0, level=0x3, filter=0x2, bufptr=0x19ff74, prefmaxlen=0xffffffff, entriesread=0x19ff64, totalentries=0x19ff6c, resume_handle=0x19ff68 | out: bufptr=0x19ff74*=([0]=0x6a19a0*(usri3_name="Administrator", usri3_password=0x0, usri3_password_age=0x0, usri3_priv=0x2, usri3_home_dir="", usri3_comment="Built-in account for administering the computer/domain", usri3_flags=0x10203, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x0, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x6a597f, usri3_bad_pw_count=0x0, usri3_num_logons=0x0, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f4, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [1]=0x6a1a14*(usri3_name="DefaultAccount", usri3_password=0x0, usri3_password_age=0x0, usri3_priv=0x0, usri3_home_dir="", usri3_comment="A user account managed by the system.", usri3_flags=0x10223, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x0, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x6a58c7, usri3_bad_pw_count=0x0, usri3_num_logons=0x0, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f7, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [2]=0x6a1a88*(usri3_name="Guest", usri3_password=0x0, usri3_password_age=0x0, usri3_priv=0x0, usri3_home_dir="", usri3_comment="Built-in account for guest access to the computer/domain", usri3_flags=0x10263, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x0, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x6a582f, usri3_bad_pw_count=0x0, usri3_num_logons=0x0, usri3_logon_server="\\\\*", usri3_country_code=0x0, usri3_code_page=0x0, usri3_user_id=0x1f5, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0), [3]=0x6a1afc*(usri3_name="Nd9E1FYi", usri3_password=0x0, usri3_password_age=0xd229c5, usri3_priv=0x2, usri3_home_dir="", usri3_comment="", usri3_flags=0x10201, usri3_script_path="", usri3_auth_flags=0x0, usri3_full_name="", usri3_usr_comment="", usri3_parms="", usri3_workstations="", usri3_last_logon=0x5b5f2294, usri3_last_logoff=0x0, usri3_acct_expires=0xffffffff, usri3_max_storage=0xffffffff, usri3_units_per_week=0xa8, usri3_logon_hours=0x6a5783, usri3_bad_pw_count=0x0, usri3_num_logons=0x32, usri3_logon_server="\\\\*", usri3_country_code=0x1, usri3_code_page=0x4e4, usri3_user_id=0x3e8, usri3_primary_group_id=0x201, usri3_profile="", usri3_home_dir_drive="", usri3_password_expired=0x0)), entriesread=0x19ff64*=0x4, totalentries=0x19ff6c, resume_handle=0x19ff68) returned 0x0 [0041.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0041.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x66ece8, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0041.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0041.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Administrator", cchWideChar=-1, lpMultiByteStr=0x661988, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Administrator", lpUsedDefaultChar=0x0) returned 14 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x66ed78, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefaultAccount", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefaultAccount", cchWideChar=-1, lpMultiByteStr=0x6a1790, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefaultAccount", lpUsedDefaultChar=0x0) returned 15 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x66f168, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Guest", cchWideChar=-1, lpMultiByteStr=0x66efb8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Guest", lpUsedDefaultChar=0x0) returned 6 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=-1, lpMultiByteStr=0x66ee08, cbMultiByte=1, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Nd9E1FYi", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0041.509] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Nd9E1FYi", cchWideChar=-1, lpMultiByteStr=0x6a1048, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Nd9E1FYi", lpUsedDefaultChar=0x0) returned 9 [0041.509] NetApiBufferFree (Buffer=0x6a19a0) returned 0x0 [0041.509] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x1d, HighPart=0)) returned 1 [0041.510] GetCurrentProcess () returned 0xffffffff [0041.510] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.510] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.510] CloseHandle (hObject=0x348) returned 1 [0041.510] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x7, HighPart=0)) returned 1 [0041.510] GetCurrentProcess () returned 0xffffffff [0041.510] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.510] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.510] CloseHandle (hObject=0x348) returned 1 [0041.510] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x17, HighPart=0)) returned 1 [0041.511] GetCurrentProcess () returned 0xffffffff [0041.511] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.511] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.511] CloseHandle (hObject=0x348) returned 1 [0041.511] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x2, HighPart=0)) returned 1 [0041.511] GetCurrentProcess () returned 0xffffffff [0041.511] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.511] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.511] CloseHandle (hObject=0x348) returned 1 [0041.511] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x11, HighPart=0)) returned 1 [0041.512] GetCurrentProcess () returned 0xffffffff [0041.512] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.512] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.512] CloseHandle (hObject=0x348) returned 1 [0041.512] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x12, HighPart=0)) returned 1 [0041.512] GetCurrentProcess () returned 0xffffffff [0041.512] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.512] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.512] CloseHandle (hObject=0x348) returned 1 [0041.513] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x5, HighPart=0)) returned 1 [0041.513] GetCurrentProcess () returned 0xffffffff [0041.513] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.513] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.513] CloseHandle (hObject=0x348) returned 1 [0041.513] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x3, HighPart=0)) returned 1 [0041.514] GetCurrentProcess () returned 0xffffffff [0041.514] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.514] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.514] CloseHandle (hObject=0x348) returned 1 [0041.514] lstrcmpiA (lpString1="Nd9E1FYi", lpString2="Nd9E1FYi") returned 0 [0041.514] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x1d, HighPart=0)) returned 1 [0041.514] GetCurrentProcess () returned 0xffffffff [0041.514] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.514] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.514] CloseHandle (hObject=0x348) returned 1 [0041.514] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x7, HighPart=0)) returned 1 [0041.515] GetCurrentProcess () returned 0xffffffff [0041.515] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.515] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.515] CloseHandle (hObject=0x348) returned 1 [0041.515] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x17, HighPart=0)) returned 1 [0041.515] GetCurrentProcess () returned 0xffffffff [0041.515] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.515] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.515] CloseHandle (hObject=0x348) returned 1 [0041.515] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x2, HighPart=0)) returned 1 [0041.516] GetCurrentProcess () returned 0xffffffff [0041.516] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.516] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.516] CloseHandle (hObject=0x348) returned 1 [0041.516] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x11, HighPart=0)) returned 1 [0041.519] GetCurrentProcess () returned 0xffffffff [0041.519] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.519] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.519] CloseHandle (hObject=0x348) returned 1 [0041.519] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x12, HighPart=0)) returned 1 [0041.519] GetCurrentProcess () returned 0xffffffff [0041.519] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.519] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.519] CloseHandle (hObject=0x348) returned 1 [0041.519] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x5, HighPart=0)) returned 1 [0041.520] GetCurrentProcess () returned 0xffffffff [0041.520] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.520] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.520] CloseHandle (hObject=0x348) returned 1 [0041.520] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x3, HighPart=0)) returned 1 [0041.520] GetCurrentProcess () returned 0xffffffff [0041.520] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0041.520] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.520] CloseHandle (hObject=0x348) returned 1 [0041.520] lstrcmpiA (lpString1="Nd9E1FYi", lpString2="Guest") returned 1 [0041.520] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="Guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.527] lstrlenA (lpString="Guest") returned 5 [0041.527] lstrcpyA (in: lpString1=0x66f318, lpString2="Guest" | out: lpString1="Guest") returned="Guest" [0041.527] lstrlenA (lpString="Guest") returned 5 [0041.527] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="Guest", cchSrc=5, lpDestStr=0x66f318, cchDest=5 | out: lpDestStr="guest") returned 5 [0041.527] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.528] LocalFree (hMem=0x66f318) returned 0x0 [0041.528] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123456", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.529] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="password", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.530] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="phpbb", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.532] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwerty", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.535] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.536] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jesus", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.537] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="12345678", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.538] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.540] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="abc123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.542] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="letmein", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.543] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="test", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.545] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="love", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.546] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.547] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="password1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.548] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hello", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.551] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="monkey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.553] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dragon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.554] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="trustno1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.555] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="111111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.557] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.558] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1234567", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.559] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="shadow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.561] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123456789", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.562] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="christ", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.563] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sunshine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.565] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="master", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.567] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="computer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.568] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="princess", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.569] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="tigger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.570] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="football", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.581] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.583] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jesus1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.584] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.585] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="whatever", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.587] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="freedom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.601] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="killer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.603] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asdf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.604] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="soccer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.606] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="superman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.614] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michael", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.615] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cheese", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.617] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="internet", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.618] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joshua", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.619] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckyou", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.622] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blessed", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.623] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="baseball", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.624] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="starwars", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.626] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="000000", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.628] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="purple", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.629] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jordan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.631] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="faith", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.632] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="summer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.634] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ashley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.635] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="buster", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.637] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="heaven", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.638] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pepper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.639] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="7777777", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.641] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hunter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.642] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="lovely", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.643] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="andrew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.645] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thomas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.650] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angels", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.651] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="charlie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.652] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="daniel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.654] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.655] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jennifer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.656] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="single", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.657] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hannah", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.658] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qazwsx", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.663] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="happy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.665] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matrix", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.666] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pass", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.667] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="aaaaaa", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.668] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="654321", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.670] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="amanda", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.671] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nothing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.673] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ginger", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.674] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mother", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.676] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="snoopy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.677] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jessica", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.678] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="welcome", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.679] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="pokemon", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.681] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.682] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="11111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.684] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mustang", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.685] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="helpme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.686] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="justin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.687] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jasmine", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.689] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="orange", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.690] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="testing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.693] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="apple", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.695] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="michelle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.696] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peace", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.697] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="secret", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.705] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.706] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="grace", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.708] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="william", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.709] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou2", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.710] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nicole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.722] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="666666", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.723] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="muffin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.724] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="gateway", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.726] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckyou1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.727] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asshole", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.732] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hahaha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.733] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="poop", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.735] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blessing", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.736] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blahblah", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.786] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="myspace1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.788] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="matthew", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.789] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="canada", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.792] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="silver", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.795] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="robert", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.818] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="forever", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.819] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asdfgh", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.820] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rachel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.821] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rainbow", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.823] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="guitar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.824] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peanut", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.825] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="batman", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.826] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cookie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.833] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bailey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.835] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="soccer1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.836] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mickey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.837] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="biteme", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.839] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hello1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.841] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="eminem", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.842] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dakota", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.844] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="samantha", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.845] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="compaq", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.897] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="diamond", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.899] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="taylor", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.900] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="forum", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.901] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="john316", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.913] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="richard", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.914] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blink182", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.916] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="peaches", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.917] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cool", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.918] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="flower", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.920] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.921] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="banana", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.923] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="james", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.924] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="asdfasdf", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.925] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="victory", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.927] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="london", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.928] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123qwe", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.929] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123321", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.930] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="startrek", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.932] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="george", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.933] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="winner", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.934] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maggie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.936] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="trinity", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.937] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="online", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.938] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="123abc", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.940] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chicken", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.941] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="junior", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.942] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chris", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.944] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="passw0rd", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.945] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="austin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.946] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sparky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.947] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="admin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.949] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="merlin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.950] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="google", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.951] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="friends", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.954] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hope", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.955] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="shalom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.957] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nintendo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.958] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="looking", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.966] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="harley", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.967] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="smokey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.968] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="7777", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.969] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="joseph", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.971] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="lucky", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.972] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="digital", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.981] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="a", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.983] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="thunder", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.984] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="spirit", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.985] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bandit", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.988] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="enter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.989] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="anthony", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.990] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="corvette", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.991] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hockey", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.993] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="power", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0041.999] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="benjamin", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.000] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="iloveyou!", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.001] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1q2w3e", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.002] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="viper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.004] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="genesis", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.010] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="knight", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.012] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwerty1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.013] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="creative", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.014] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="foobar", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.016] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="adidas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.017] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="rotimi", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.018] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="slayer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.020] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="wisdom", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.021] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="praise", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.022] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="zxcvbnm", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.040] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="samuel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.041] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mike", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.042] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dallas", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.045] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="green", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.048] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="testtest", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.049] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maverick", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.050] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="onelove", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.052] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="david", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.053] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="mylove", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.054] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="church", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.078] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="friend", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.079] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="god", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.081] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="destiny", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.082] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="none", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.086] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="microsoft", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.087] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="222222", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.088] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="bubbles", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.089] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="11111111", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.095] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cocacola", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.096] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jordan23", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.097] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="ilovegod", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.099] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="football1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.100] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="loving", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.101] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="nathan", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.103] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="emmanuel", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.104] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="scooby", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.105] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="fuckoff", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.106] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="sammy", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.108] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="maxwell", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.109] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jason", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.110] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="john", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.112] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="1q2w3e4r", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.113] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="baby", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.114] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="red123", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.115] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="blabla", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.117] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="prince", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.118] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="qwert", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.119] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="chelsea", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.121] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="55555", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.122] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="angel1", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.123] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hardcore", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.125] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="dexter", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.126] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="saved", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.129] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="112233", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.130] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="hallo", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.132] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="jasper", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.133] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="danielle", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.144] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="kitten", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.145] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="cassie", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.147] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="stella", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.148] LogonUserA (in: lpszUsername="Guest", lpszDomain=0x0, lpszPassword="prayer", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.170] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x1d, HighPart=0)) returned 1 [0042.170] GetCurrentProcess () returned 0xffffffff [0042.170] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.170] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.170] CloseHandle (hObject=0x348) returned 1 [0042.171] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x7, HighPart=0)) returned 1 [0042.171] GetCurrentProcess () returned 0xffffffff [0042.171] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.171] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.171] CloseHandle (hObject=0x348) returned 1 [0042.171] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x17, HighPart=0)) returned 1 [0042.172] GetCurrentProcess () returned 0xffffffff [0042.172] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.172] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.172] CloseHandle (hObject=0x348) returned 1 [0042.172] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x2, HighPart=0)) returned 1 [0042.174] GetCurrentProcess () returned 0xffffffff [0042.174] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.174] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.174] CloseHandle (hObject=0x348) returned 1 [0042.174] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x11, HighPart=0)) returned 1 [0042.174] GetCurrentProcess () returned 0xffffffff [0042.174] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.174] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.174] CloseHandle (hObject=0x348) returned 1 [0042.174] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x12, HighPart=0)) returned 1 [0042.175] GetCurrentProcess () returned 0xffffffff [0042.175] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.175] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.175] CloseHandle (hObject=0x348) returned 1 [0042.175] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x5, HighPart=0)) returned 1 [0042.175] GetCurrentProcess () returned 0xffffffff [0042.175] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.176] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.176] CloseHandle (hObject=0x348) returned 1 [0042.176] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x3, HighPart=0)) returned 1 [0042.176] GetCurrentProcess () returned 0xffffffff [0042.176] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.176] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.176] CloseHandle (hObject=0x348) returned 1 [0042.176] lstrcmpiA (lpString1="Nd9E1FYi", lpString2="DefaultAccount") returned 1 [0042.176] LogonUserA (in: lpszUsername="DefaultAccount", lpszDomain=0x0, lpszPassword="DefaultAccount", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.178] lstrlenA (lpString="DefaultAccount") returned 14 [0042.178] lstrcpyA (in: lpString1=0x6a1638, lpString2="DefaultAccount" | out: lpString1="DefaultAccount") returned="DefaultAccount" [0042.178] lstrlenA (lpString="DefaultAccount") returned 14 [0042.178] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="DefaultAccount", cchSrc=14, lpDestStr=0x6a1638, cchDest=14 | out: lpDestStr="defaultaccount") returned 14 [0042.178] LogonUserA (in: lpszUsername="DefaultAccount", lpszDomain=0x0, lpszPassword="defaultaccount", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.664] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x1d, HighPart=0)) returned 1 [0042.668] GetCurrentProcess () returned 0xffffffff [0042.668] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.668] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.668] CloseHandle (hObject=0x348) returned 1 [0042.668] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeTcbPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x7, HighPart=0)) returned 1 [0042.669] GetCurrentProcess () returned 0xffffffff [0042.669] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.669] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.669] CloseHandle (hObject=0x348) returned 1 [0042.669] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeChangeNotifyPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x17, HighPart=0)) returned 1 [0042.669] GetCurrentProcess () returned 0xffffffff [0042.670] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.670] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.670] CloseHandle (hObject=0x348) returned 1 [0042.670] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeCreateTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x2, HighPart=0)) returned 1 [0042.670] GetCurrentProcess () returned 0xffffffff [0042.670] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.670] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.670] CloseHandle (hObject=0x348) returned 1 [0042.670] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeBackupPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x11, HighPart=0)) returned 1 [0042.671] GetCurrentProcess () returned 0xffffffff [0042.671] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.671] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.671] CloseHandle (hObject=0x348) returned 1 [0042.671] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeRestorePrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x12, HighPart=0)) returned 1 [0042.671] GetCurrentProcess () returned 0xffffffff [0042.671] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.671] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.671] CloseHandle (hObject=0x348) returned 1 [0042.671] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeIncreaseQuotaPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x5, HighPart=0)) returned 1 [0042.672] GetCurrentProcess () returned 0xffffffff [0042.672] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.672] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.672] CloseHandle (hObject=0x348) returned 1 [0042.672] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeAssignPrimaryTokenPrivilege", lpLuid=0x19ff20 | out: lpLuid=0x19ff20*(LowPart=0x3, HighPart=0)) returned 1 [0042.672] GetCurrentProcess () returned 0xffffffff [0042.672] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ff1c | out: TokenHandle=0x19ff1c*=0x348) returned 1 [0042.672] AdjustTokenPrivileges (in: TokenHandle=0x348, DisableAllPrivileges=0, NewState=0x19ff0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.672] CloseHandle (hObject=0x348) returned 1 [0042.672] lstrcmpiA (lpString1="Nd9E1FYi", lpString2="Administrator") returned 1 [0042.673] LogonUserA (in: lpszUsername="Administrator", lpszDomain=0x0, lpszPassword="Administrator", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0042.698] lstrlenA (lpString="Administrator") returned 13 [0042.699] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x6a1470 [0042.699] lstrcpyA (in: lpString1=0x6a1470, lpString2="Administrator" | out: lpString1="Administrator") returned="Administrator" [0042.699] lstrlenA (lpString="Administrator") returned 13 [0042.699] LCMapStringA (in: Locale=0x400, dwMapFlags=0x100, lpSrcStr="Administrator", cchSrc=13, lpDestStr=0x6a1470, cchDest=13 | out: lpDestStr="administrator") returned 13 [0042.699] LogonUserA (in: lpszUsername="Administrator", lpszDomain=0x0, lpszPassword="administrator", dwLogonType=0x2, dwLogonProvider=0x0, phToken=0x19ff74 | out: phToken=0x19ff74*=0x0) returned 0 [0043.182] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0x844 Thread: id = 3 os_tid = 0xca8 Thread: id = 4 os_tid = 0xdfc Thread: id = 5 os_tid = 0xdf0 Thread: id = 6 os_tid = 0xa64 Thread: id = 7 os_tid = 0xf98 Thread: id = 8 os_tid = 0xfe0 Thread: id = 9 os_tid = 0xc14 Thread: id = 10 os_tid = 0xe98