Summary:

NtCallbackReturn(>) 1 NtUserGetImeInfoEx(>) 1 NtSetInformationObject(>) 3 NtUserMessageCall(>) 12
NtConnectPort(>) 1 NtUserGetProcessWindowStation(>) 1 NtUserSetWindowsHookEx(>) 3 NtQueryInformationProcess(>) 14
NtContinue(>) 1 NtUserPeekMessage(>) 1 NtQueryDefaultUILanguage(>) 4 NtUserCallOneParam(>) 14
NtCreateSemaphore(>) 1 NtUserSetWindowFNID(>) 1 NtCreateFile(>) 5 NtUserFindExistingCursorIcon(>) 14
NtDuplicateObject(>) 1 NtUserShowWindow(>) 1 NtFreeVirtualMemory(>) 5 NtQueryInformationToken(>) 15
NtFsControlFile(>) 1 NtUserUpdateInputContext(>) 1 NtQueryDefaultLocale(>) 5 NtDeviceIoControlFile(>) 16
NtGdiCreateBitmap(>) 1 NtAccessCheck(>) 2 NtReleaseMutant(>) 5 NtUserValidateHandleSecure(>) 16
NtGdiCreatePatternBrushInternal(>) 1 NtCreateEvent(>) 2 NtUserSetProp(>) 5 NtCreateSection(>) 17
NtGdiExtGetObjectW(>) 1 NtDuplicateToken(>) 2 NtWaitForSingleObject(>) 5 NtOpenFile(>) 17
NtGdiGetCharSet(>) 1 NtGdiCreateSolidBrush(>) 2 NtOpenProcessToken(>) 6 NtOpenSection(>) 19
NtGdiGetDCObject(>) 1 NtGdiHfontCreate(>) 2 NtQuerySection(>) 6 NtUserRegisterClassExWOW(>) 22
NtGdiInit(>) 1 NtOpenDirectoryObject(>) 2 NtCreateMutant(>) 7 NtQueryAttributesFile(>) 29
NtGdiQueryFontAssocInfo(>) 1 NtOpenThreadToken(>) 2 NtGdiCreateCompatibleDC(>) 7 NtMapViewOfSection(>) 34
NtGdiSelectBitmap(>) 1 NtQueryInformationFile(>) 2 NtUserCallNoParam(>) 7 NtQueryValueKey(>) 34
NtOpenEvent(>) 1 NtQueryVolumeInformationFile(>) 2 NtUserGetClassInfo(>) 7 NtUserRegisterWindowMessage(>) 35
NtOpenKeyedEvent(>) 1 NtReadFile(>) 2 NtCreateKey(>) 8 NtYieldExecution(>) 38
NtOpenMutant(>) 1 NtSetInformationThread(>) 2 NtQueryVirtualMemory(>) 8 NtFlushInstructionCache(>) 54
NtOpenSymbolicLinkObject(>) 1 NtUserGetDC(>) 2 NtRequestWaitReplyPort(>) 8 NtOpenKey(>) 61
NtQueryInstallUILanguage(>) 1 NtUserGetObjectInformation(>) 2 NtSetValueKey(>) 8 NtAllocateVirtualMemory(>) 68
NtQueryObject(>) 1 NtUserGetThreadDesktop(>) 2 NtUserCreateWindowEx(>) 8 NtQuerySystemInformation(>) 78
NtQuerySymbolicLinkObject(>) 1 NtUserGetThreadState(>) 2 NtOpenProcessTokenEx(>) 9 NtClose(>) 102
NtRegisterThreadTerminatePort(>) 1 NtUserSetWindowLong(>) 2 NtOpenThreadTokenEx(>) 9 NtProtectVirtualMemory(>) 105
NtSecureConnectPort(>) 1 NtUserSetWindowPos(>) 2 NtSetInformationProcess(>) 10 NtDelayExecution(>) 3932
NtTestAlert(>) 1 NtUserSystemParametersInfo(>) 2 NtUserGetWindowDC(>) 10
NtUserGetAtomName(>) 1 NtAddAtom(>) 3 NtGdiGetStockObject(>) 11
NtUserGetGUIThreadInfo(>) 1

Trace:

00001 860 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 860 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 860 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 860 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 860 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 860 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 860 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 860 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 860 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 860 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 860 NtClose (12, ... ) == 0x0 00015 860 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 860 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 860 NtClose (16, ... ) == 0x0 00021 860 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 860 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 860 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 860 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 860 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 860 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 860 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0 00029 860 NtClose (16, ... ) == 0x0 00030 860 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 860 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 860 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 860 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 860 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 464, 860, 57965, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ... {28, 56, reply, 0, 464, 860, 57965, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 464, 860, 57965, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ) == 0x0 00036 860 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 860 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 860 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 860 NtClose (16, ... ) == 0x0 00041 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 860 NtClose (16, ... ) == 0x0 00044 860 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 860 NtClose (16, ... ) == 0x0 00048 860 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 860 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 860 NtClose (16, ... ) == 0x0 00052 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 860 NtClose (16, ... ) == 0x0 00055 860 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 860 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 860 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 464, 860, 57966, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ... {24, 52, reply, 0, 464, 860, 57966, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 464, 860, 57966, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ) == 0x0 00060 860 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 464, 860, 57967, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ... {28, 56, reply, 0, 464, 860, 57967, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 464, 860, 57967, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ) == 0x0 00061 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "MSVBVM60.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00062 860 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00063 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\MSVBVM60.DLL"}, 1242544, ... ) }, 1242544, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00064 860 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00065 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSVBVM60.DLL"}, 1242544, ... ) }, 1242544, ... ) == 0x0 00066 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSVBVM60.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00067 860 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00068 860 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00069 860 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00070 860 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00071 860 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00072 860 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00073 860 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00074 860 NtClose (36, ... ) == 0x0 00075 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00076 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00077 860 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00078 860 NtClose (36, ... ) == 0x0 00079 860 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00080 860 NtClose (32, ... ) == 0x0 00081 860 NtClose (16, ... ) == 0x0 00082 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x73420000), 0x0, 1392640, ) == 0x0 00083 860 NtClose (28, ... ) == 0x0 00084 860 NtProtectVirtualMemory (-1, (0x73421000), 2792, 4, ... (0x73421000), 4096, 32, ) == 0x0 00085 860 NtProtectVirtualMemory (-1, (0x73421000), 4096, 32, ... (0x73421000), 4096, 4, ) == 0x0 00086 860 NtFlushInstructionCache (-1, 1933709312, 2792, ... ) == 0x0 00087 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "USER32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00088 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00089 860 NtClose (28, ... ) == 0x0 00090 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00091 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00092 860 NtClose (28, ... ) == 0x0 00093 860 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00094 860 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00095 860 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00096 860 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00097 860 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00098 860 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00099 860 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00100 860 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00101 860 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00102 860 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00103 860 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00104 860 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00105 860 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00106 860 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00107 860 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00108 860 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00109 860 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00110 860 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00111 860 NtProtectVirtualMemory (-1, (0x73421000), 2792, 4, ... (0x73421000), 4096, 32, ) == 0x0 00112 860 NtProtectVirtualMemory (-1, (0x73421000), 4096, 32, ... (0x73421000), 4096, 4, ) == 0x0 00113 860 NtFlushInstructionCache (-1, 1933709312, 2792, ... ) == 0x0 00114 860 NtProtectVirtualMemory (-1, (0x73421000), 2792, 4, ... (0x73421000), 4096, 32, ) == 0x0 00115 860 NtProtectVirtualMemory (-1, (0x73421000), 4096, 32, ... (0x73421000), 4096, 4, ) == 0x0 00116 860 NtFlushInstructionCache (-1, 1933709312, 2792, ... ) == 0x0 00117 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00118 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00119 860 NtClose (28, ... ) == 0x0 00120 860 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00121 860 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00122 860 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00123 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0 00124 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00125 860 NtClose (28, ... ) == 0x0 00126 860 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00127 860 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00128 860 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00129 860 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00130 860 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00131 860 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00132 860 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00133 860 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00134 860 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00135 860 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00136 860 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00137 860 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00138 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00139 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00140 860 NtClose (28, ... ) == 0x0 00141 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00142 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00143 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00144 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00145 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00146 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00147 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00148 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00149 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00150 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 28, ) }, ... 28, ) == 0x0 00151 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00152 860 NtClose (28, ... ) == 0x0 00153 860 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00154 860 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00155 860 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00156 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00157 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00158 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00159 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00160 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00161 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00162 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00163 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00164 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00165 860 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00166 860 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00167 860 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00168 860 NtProtectVirtualMemory (-1, (0x73421000), 2792, 4, ... (0x73421000), 4096, 32, ) == 0x0 00169 860 NtProtectVirtualMemory (-1, (0x73421000), 4096, 32, ... (0x73421000), 4096, 4, ) == 0x0 00170 860 NtFlushInstructionCache (-1, 1933709312, 2792, ... ) == 0x0 00171 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "OLEAUT32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00172 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00173 860 NtClose (28, ... ) == 0x0 00174 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00175 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00176 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00177 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00178 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00179 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00180 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00181 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00182 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00183 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00184 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00185 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00186 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00187 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00188 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00189 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00190 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00191 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00192 860 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00193 860 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00194 860 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00195 860 NtProtectVirtualMemory (-1, (0x73421000), 2792, 4, ... (0x73421000), 4096, 32, ) == 0x0 00196 860 NtProtectVirtualMemory (-1, (0x73421000), 4096, 32, ... (0x73421000), 4096, 4, ) == 0x0 00197 860 NtFlushInstructionCache (-1, 1933709312, 2792, ... ) == 0x0 00198 860 NtProtectVirtualMemory (-1, (0x401000), 272, 4, ... (0x401000), 4096, 32, ) == 0x0 00199 860 NtProtectVirtualMemory (-1, (0x401000), 4096, 32, ... (0x401000), 4096, 4, ) == 0x0 00200 860 NtFlushInstructionCache (-1, 4198400, 272, ... ) == 0x0 00201 860 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00202 860 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00203 860 NtReadFile (28, 0, 0, 0, 4, {148491, 0}, 0, ... {status=0x0, info=4}, (28, 0, 0, 0, 4, {148491, 0}, 0, ... {status=0x0, info=4}, "\206=s,", ) , ) == 0x0 00204 860 NtClose (28, ... ) == 0x0 00205 860 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00206 860 NtOpenProcessToken (-1, 0x8, ... 28, ) == 0x0 00207 860 NtQueryInformationToken (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00208 860 NtClose (28, ... ) == 0x0 00209 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0 00210 860 NtQueryValueKey (28, (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00211 860 NtClose (28, ... ) == 0x0 00212 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00213 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\USER32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00214 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00215 860 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242016, 2090320424, 1242052, 1242028} (24, {28, 56, new_msg, 0, 1242016, 2090320424, 1242052, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 464, 860, 57977, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ... {28, 56, reply, 0, 464, 860, 57977, 0} (24, {28, 56, new_msg, 0, 1242016, 2090320424, 1242052, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 464, 860, 57977, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ) == 0x0 00216 860 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 28, ) }, ... 28, ) == 0x0 00217 860 NtQueryValueKey (28, (28, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00218 860 NtClose (28, ... ) == 0x0 00219 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00220 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00221 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00222 860 NtClose (28, ... ) == 0x0 00223 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x410000), 0x0, 110592, ) == 0x0 00224 860 NtClose (16, ... ) == 0x0 00225 860 NtUnmapViewOfSection (-1, 0x410000, ... ) == 0x0 00226 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00227 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00228 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00229 860 NtClose (16, ... ) == 0x0 00230 860 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x410000), 0x0, 110592, ) == 0x0 00231 860 NtClose (28, ... ) == 0x0 00232 860 NtUnmapViewOfSection (-1, 0x410000, ... ) == 0x0 00233 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00234 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00235 860 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00236 860 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00237 860 NtClose (28, ... ) == 0x0 00238 860 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00239 860 NtClose (16, ... ) == 0x0 00240 860 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00241 860 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00242 860 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00243 860 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00244 860 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00245 860 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00246 860 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00247 860 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00248 860 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00249 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00251 860 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00252 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00253 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00254 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00255 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00256 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ADVAPI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00257 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00258 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00259 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OLEAUT32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00260 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSVBVM60.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00261 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00262 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00263 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 16, ) }, ... 16, ) == 0x0 00264 860 NtQueryValueKey (16, (16, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00265 860 NtClose (16, ... ) == 0x0 00266 860 NtMapViewOfSection (-2147482740, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x410000), 0x0, 1060864, ) == 0x0 00267 860 NtClose (-2147482740, ... ) == 0x0 00268 860 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 16, ) == 0x0 00269 860 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00270 860 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482740, ) == 0x0 00271 860 NtQueryInformationToken (-2147482740, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00272 860 NtQueryInformationToken (-2147482740, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00273 860 NtClose (-2147482740, ... ) == 0x0 00274 860 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00275 860 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00276 860 NtDuplicateObject (-1, 28, -1, 0x0, 0, 2, ... 36, ) == 0x0 00277 860 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00278 860 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00279 860 NtClose (-2147482740, ... ) == 0x0 00280 860 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00281 860 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00282 860 NtClose (-2147482740, ... ) == 0x0 00283 860 NtQueryDefaultLocale (0, -106645172, ... ) == 0x0 00284 860 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00285 860 NtUserCallNoParam (24, ... ) == 0x0 00286 860 NtGdiCreateCompatibleDC (0, ... 00287 860 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00286 860 NtGdiCreateCompatibleDC ... ) == 0xee0105b0 00288 860 NtGdiGetStockObject (0, ... ) == 0x1900010 00289 860 NtGdiGetStockObject (4, ... ) == 0x1900011 00290 860 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0x76050581 00291 860 NtGdiCreateSolidBrush (0, 0, ... 00292 860 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8519680, 4096, ) == 0x0 00291 860 NtGdiCreateSolidBrush ... ) == 0xa51003d2 00293 860 NtGdiGetStockObject (13, ... ) == 0x18a0021 00294 860 NtGdiCreateCompatibleDC (0, ... ) == 0x5201039b 00295 860 NtGdiSelectBitmap (1375798171, 1980040577, ... ) == 0x185000f 00296 860 NtUserGetThreadDesktop (860, 0, ... ) == 0x20 00297 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00298 860 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00299 860 NtClose (40, ... ) == 0x0 00300 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00301 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x816dc017 00302 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00303 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x816dc01c 00304 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00305 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x816dc01e 00306 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00307 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x816d8002 00308 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00309 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x816dc018 00310 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00311 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x816dc01a 00312 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00313 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x816dc01d 00314 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00315 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x816dc026 00316 860 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00317 860 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x816dc019 00318 860 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x816dc020 00319 860 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x816dc022 00320 860 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x816dc023 00321 860 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x816dc024 00322 860 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x816dc025 00323 860 NtCallbackReturn (0, 0, 0, ... 00324 860 NtGdiInit (... ) == 0x1 00325 860 NtGdiGetStockObject (18, ... ) == 0x290001c 00326 860 NtGdiGetStockObject (19, ... ) == 0x1b00019 00327 860 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00328 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00329 860 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00330 860 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00331 860 NtClose (40, ... ) == 0x0 00332 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00333 860 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00334 860 NtClose (40, ... ) == 0x0 00335 860 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00336 860 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00337 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00338 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00339 860 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 8585216, 65536, ) == 0x0 00340 860 NtAllocateVirtualMemory (-1, 8585216, 0, 4096, 4096, 4, ... 8585216, 4096, ) == 0x0 00341 860 NtAllocateVirtualMemory (-1, 8589312, 0, 8192, 4096, 4, ... 8589312, 8192, ) == 0x0 00342 860 NtAllocateVirtualMemory (-1, 8597504, 0, 4096, 4096, 4, ... 8597504, 4096, ) == 0x0 00343 860 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00344 860 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x840000), 0x0, 12288, ) == 0x0 00345 860 NtClose (44, ... ) == 0x0 00346 860 NtAllocateVirtualMemory (-1, 8601600, 0, 4096, 4096, 4, ... 8601600, 4096, ) == 0x0 00347 860 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00348 860 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00349 860 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00350 860 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00351 860 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00352 860 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00353 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4\135\263M\242\34v\12\275\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00354 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00355 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00356 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00357 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00358 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00359 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00360 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00361 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00362 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "\370\253XuB\237\251\351\34 \247\303\4P\375\304\33\1\231\12VB\302\252\12\330\20\322\214\216\237RV\334\311\370\311?/0z\7~+\354*\263\343\2455a\22E\337h\326\3451\273\257hy\356\350\22\12|\316:\252\301[a\0\216E\377\335~", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "\370\253XuB\237\251\351\34 \247\303\4P\375\304\33\1\231\12VB\302\252\12\330\20\322\214\216\237RV\334\311\370\311?/0z\7~+\354*\263\343\2455a\22E\337h\326\3451\273\257hy\356\350\22\12|\316:\252\301[a\0\216E\377\335~", 80, ... ) , 80, ... ) == 0x0 00363 860 NtClose (-2147482740, ... ) == 0x0 00353 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\261\312\365\5_\267\362kP\366\253\342UC6\342M\222[\20\353;\353+\20\16\275\200?\37r\334\23\341\304[\32\364\3\312\340I\314I}\273\231\347A\2164\35\253\3b4!\201o\206\311\211\31N]\36D\305V\324k'\252\262'\373.\322\320.\300\233\212\257\33\352\323}En|*4"\13i1\324\336!p\2444\265\244\327\177\356\243bI\243w\11\373\223\20395\336\354R\373\314\377\4(@~\4\270\204\374>\223\255-\276\21\223\334\25g~\305&SGz\270T\352\260^\244\11G\3777l.P\3146\214\376\374\246J,%\245\200P%\310\201\200\347\202\232\313U\324\276\253\351H\33\274}\256\23\234\311\310Ci:$h]\2\305;\7U\271\273d\340\23\375\315GG|\4\350\233\36\253\343\4\7\371y\317.\263\330X\206\352\254E\330H\360w\320X3\\17A\36Bz\270>\222\354o", ) \13i1\324\336!p\2444\265\244\327\177\356\243bI\243w\11\373\223\20395\336\354R\373\314\377\4(@~\4\270\204\374>\223\255-\276\21\223\334\25g~\305&SGz\270T\352\260^\244\11G\3777l.P\3146\214\376\374\246J,%\245\200P%\310\201\200\347\202\232\313U\324\276\253\351H\33\274}\256\23\234\311\310Ci:$h]\2\305;\7U\271\273d\340\23\375\315GG|\4\350\233\36\253\343\4\7\371y\317.\263\330X\206\352\254E\330H\360w\320X3\\17A\36Bz\270>\222\354o", ) == 0x0 00364 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00365 860 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00366 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00367 860 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00368 860 NtClose (48, ... ) == 0x0 00369 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00370 860 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00371 860 NtClose (48, ... ) == 0x0 00372 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00373 860 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00374 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00375 860 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00376 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00377 860 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00378 860 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00379 860 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00380 860 NtClose (48, ... ) == 0x0 00381 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00382 860 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00383 860 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00384 860 NtClose (48, ... ) == 0x0 00385 860 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00386 860 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00387 860 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00388 860 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00389 860 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00390 860 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00391 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00392 860 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 8716288, 65536, ) == 0x0 00393 860 NtAllocateVirtualMemory (-1, 8716288, 0, 4096, 4096, 4, ... 8716288, 4096, ) == 0x0 00394 860 NtAllocateVirtualMemory (-1, 8720384, 0, 8192, 4096, 4, ... 8720384, 8192, ) == 0x0 00395 860 NtAllocateVirtualMemory (-1, 0, 0, 4194304, 8192, 4, ... 8781824, 4194304, ) == 0x0 00396 860 NtAllocateVirtualMemory (-1, 8781824, 0, 65536, 4096, 4, ... 8781824, 65536, ) == 0x0 00397 860 NtCreateEvent (0x1f0003, 0x0, 0, 1, ... 52, ) == 0x0 00398 860 NtCreateMutant (0x1f0001, 0x0, 0, ... 56, ) == 0x0 00399 860 NtOpenProcessToken (-1, 0x8, ... 60, ) == 0x0 00400 860 NtQueryInformationToken (60, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00401 860 NtClose (60, ... ) == 0x0 00402 860 NtGdiGetStockObject (15, ... ) == 0x188000b 00403 860 NtGdiGetStockObject (7, ... ) == 0x1b00017 00404 860 NtGdiGetStockObject (6, ... ) == 0x1b00018 00405 860 NtGdiGetStockObject (8, ... ) == 0x1b00016 00406 860 NtGdiGetStockObject (2, ... ) == 0x1900012 00407 860 NtGdiGetStockObject (5, ... ) == 0x1900015 00408 860 NtUserGetDC (0, ... ) == 0x1010051 00409 860 NtGdiGetCharSet (16842833, ... ) == 0x4e4 00410 860 NtUserCallOneParam (16842833, 57, ... ) == 0x1 00411 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00412 860 NtAllocateVirtualMemory (-1, 0, 0, 262144, 8192, 4, ... 12976128, 262144, ) == 0x0 00413 860 NtAllocateVirtualMemory (-1, 12976128, 0, 4096, 4096, 4, ... 12976128, 4096, ) == 0x0 00414 860 NtAllocateVirtualMemory (-1, 12980224, 0, 8192, 4096, 4, ... 12980224, 8192, ) == 0x0 00415 860 NtTestAlert (... ) == 0x0 00416 860 NtContinue (1244464, 1, ... 00417 860 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x4015ae,}, 4, ... ) == 0x0 00418 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00419 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00420 860 NtQueryDefaultUILanguage (2090319928, ... 00421 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00422 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00423 860 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00424 860 NtClose (-2147482740, ... ) == 0x0 00425 860 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00426 860 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00427 860 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00428 860 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00429 860 NtClose (-2147481328, ... ) == 0x0 00430 860 NtClose (-2147482740, ... ) == 0x0 00420 860 NtQueryDefaultUILanguage ... ) == 0x0 00431 860 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00432 860 NtQueryDefaultLocale (1, 1243048, ... ) == 0x0 00433 860 NtGdiExtGetObjectW (25821217, 420, 1243552, ... ) == 0x164 00434 860 NtCreateSemaphore (0x1f0003, {24, 48, 0x82, 1244300, 0, (0x1f0003, {24, 48, 0x82, 1244300, 0, "U:?WORK?PACKED.EXE"}, 0, 2147483647, ... 60, ) }, 0, 2147483647, ... 60, ) == 0x0 00435 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\rpcss.dll"}, 1241848, ... ) }, 1241848, ... ) == 0x0 00436 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\rpcss.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00437 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 64, ... 68, ) == 0x0 00438 860 NtClose (64, ... ) == 0x0 00439 860 NtMapViewOfSection (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xca0000), 0x0, 401408, ) == 0x0 00440 860 NtClose (68, ... ) == 0x0 00441 860 NtUnmapViewOfSection (-1, 0xca0000, ... ) == 0x0 00442 860 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00443 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00444 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00445 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00446 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\333\372q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00447 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00448 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00449 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00450 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00451 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00452 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00453 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00454 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00455 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "\216wsV\24\341v\363\332\255\237j\361)\216\371\217d\33\255\225{\200\177\0\347\375\364\247\346\253\326hw,\314N\304=V\233\2478\257\213\312\353(\320!\37w\217z\244\341CM\5e\243UL\337\13'5\21:i\373j\30\231\230\177\371`\237\323", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "\216wsV\24\341v\363\332\255\237j\361)\216\371\217d\33\255\225{\200\177\0\347\375\364\247\346\253\326hw,\314N\304=V\233\2478\257\213\312\353(\320!\37w\217z\244\341CM\5e\243UL\337\13'5\21:i\373j\30\231\230\177\371`\237\323", 80, ... ) , 80, ... ) == 0x0 00456 860 NtClose (-2147482740, ... ) == 0x0 00446 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\375\210\204\230\10\316/F\17\221\246\331\203\277\310\279\232\341O\34\20\254{\222p\330\232\21@k#\207k\352\233#\204\343H\276\262P\244\245\370Qz\3\332\225f,_\341c\344\35\27\353\210\317\321\266\313\250Q\11\24d\212\211M\5\337\366\235\236eDx|\25\32\27\35\264\3559\12\311\251\361\242j\23\307(\312\227q\353\247&6\257\310\365\375\342X\227\14S\23|\31\217\215\313\321\247\242g\222\253\377\325\214 g\251\374\3145\250\27d\372M\u\16O\371\23\303\264|\221\275r\355\313;R\205fm\23\232\6\226z\237\213\314K'\276kF\322I~*\206\205\241\177 zf\361c\14WFl)\37R\140\272\311J\251\347F\306@Z\367\215d+\21<\302J\200,\355\356\3008\30\227\212b)G\334@\301"\264\222\261\332\36\346\6\360.\322U_\375\233z\267\253\362\346\267f\373\303\220\23\247\266z", ) \264\222\261\332\36\346\6\360.\322U_\375\233z\267\253\362\346\267f\373\303\220\23\247\266z", ) == 0x0 00457 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00458 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00459 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00460 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00461 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00462 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00463 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00464 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00465 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00466 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "'\321QY%2eb\2639\207\334\243\270\17\322'\347\33\3f]\203\315\362!\252w\223\203\24l^\30\21\304\272!\35\300\354\336\11!\224\200/.\343\245J\221^\210\12i\234\363\310\333\31\215v@\363V\330\277\227\15\337\304\236\230\36\326J\17(r", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "'\321QY%2eb\2639\207\334\243\270\17\322'\347\33\3f]\203\315\362!\252w\223\203\24l^\30\21\304\272!\35\300\354\336\11!\224\200/.\343\245J\221^\210\12i\234\363\310\333\31\215v@\363V\330\277\227\15\337\304\236\230\36\326J\17(r", 80, ... ) , 80, ... ) == 0x0 00467 860 NtClose (-2147482740, ... ) == 0x0 00457 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\221\25:\362\200Bu]\210\263\202\35d3\373\317\305\227^^C\375\214lN\357S\267\325+1\306\4\252\347\235)\213\327\201\272\12\1:?>\210\333\16\35\205\300\13;\273\360Y\340\226{n\313\323\21\332\333{\206\351\365+\275\364\335i\340\27\325\271\266\265\367\215\267}\16~\333\300\347X\237\350\203\274\366\7Ao\331}\307]\24\202g@\357\225g+eu\235\371NP}\243\2533\213\316\330\310\377\246\232\256\341\373\232\372\306\361\347\324\353e+y\16p\357\326`\303%\316\2502K;\251\370\216At\202\242\360\261c]\305\230\261\373>\272\230\345"!{l\246$\367\246\254OIu\350\22\305\3\273\343\223\243Z59\365\250\214\261\27\331\322\260g\7e\255w\101\315vU\6=\346\354\236Y\211\3049\343\1\14\327\316\326`\355b\3677\210=\34b*\210\200\177\276:\313N\5\374\26\373\375\306)\16\m\305", ) !{l\246$\367\246\254OIu\350\22\305\3\273\343\223\243Z59\365\250\214\261\27\331\322\260g\7e\255w\101\315vU\6=\346\354\236Y\211\3049\343\1\14\327\316\326`\355b\3677\210=\34b*\210\200\177\276:\313N\5\374\26\373\375\306)\16\m\305", ) == 0x0 00468 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q}7MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00469 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00470 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00471 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00472 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00473 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00474 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00475 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00476 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00477 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "\232\22\27\206\346\311\356\212Ie\361\260RS\220\305\31\313\23J\267\22?\355t\305\245g\22\376k\274<\307\241k[\274q7\203\23\207\256\323\320m\350$\332\314w,\261R\12\202\36\11n\315[3\216-l\324\205\220\304\4\202\257\257\32"\3\226\207D", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "\232\22\27\206\346\311\356\212Ie\361\260RS\220\305\31\313\23J\267\22?\355t\305\245g\22\376k\274<\307\241k[\274q7\203\23\207\256\323\320m\350$\332\314w,\261R\12\202\36\11n\315[3\216-l\324\205\220\304\4\202\257\257\32"\3\226\207D", 80, ... ) \3\226\207D", 80, ... ) == 0x0 00478 860 NtClose (-2147482740, ... ) == 0x0 00468 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\327P\276@\36fcU'\367\261O$\11\325\326\244?\364\302\330=X\310\23=\307\350\246\12\313\334\35\333\327\211\1j\333;\306\272\335ET%h\272\265\276n/\207\371\1W\313\12\370\224\372|\226N3 \1b\215\343\305\312\254)\363\320C\362\30L*H)\242\326Ch\255\27+\246 \2\235E\250\313\310\260\310+1.^\322J\337n\205\0\214~\14\25\332m(\341\10\312\236m\252]\3760\334u\310\341\240ep\313\273\264\350n\315oU\301U$5\264k'\200E\331\306Bw\366`\242\316\31Oo\310\5\252\257j\235S\3420\304\246\264F)\255\374\242K\7\23}\242\333$K\206\334:\260\322\351\325\7\215U\20;f\361!HL\247T\221\3C\27UI-\342)\351\375\210\12\256\211\0&u'\243\37\24\336\276;\324\340\361\322\325\340Kj\27\12\21g\243a+Z\215>\375\27\253\255=?t}", ) , ) == 0x0 00479 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q}7MiX\246Q}7MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00480 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00481 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00482 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00483 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00484 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00485 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00486 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00487 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00488 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "E\21\277\314j\347\16\1\241\363r\275\340\367\7\2646m\11\6V\25I"\0\201\3629\12T\222F\2W\272\303\0\260|\227w\207S\366\7_P\237M\316\230\253w^0\363P\221\343E.L\273\351\273\275\250\273\372\274d\252ff\344\264E\3158\366", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "E\21\277\314j\347\16\1\241\363r\275\340\367\7\2646m\11\6V\25I"\0\201\3629\12T\222F\2W\272\303\0\260|\227w\207S\366\7_P\237M\316\230\253w^0\363P\221\343E.L\273\351\273\275\250\273\372\274d\252ff\344\264E\3158\366", 80, ... ) \0\201\3629\12T\222F\2W\272\303\0\260|\227w\207S\366\7_P\237M\316\230\253w^0\363P\221\343E.L\273\351\273\275\250\273\372\274d\252ff\344\264E\3158\366", 80, ... ) == 0x0 00489 860 NtClose (-2147482740, ... ) == 0x0 00479 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\226\26\204\206&\16\347x>\177\3258\335\271S\226n\366\317?\215e\213\14$\347h\261R\334\33\2\316\352\265\265\322\245\271) \366<\325\7\312P\374F\7%\177t\371!@\245U,\331\177\210Q2\326\207\371#\37\34\317\323\33N\255\1\266\306G\332L0\320s\301\307\342\261\6i\275\220\14\321#U\11\262g\203$.\247\37\3428-\13|\3128A\262\362,\331m\325\246\362\1u\310\245\168\343\254\272\27\222\321\34\3265\272p\332\254\32\12\316zB\355C#JV\355yz\320\307UR\332\241E\244D(\253\270\\372\312Z Uu9\326 \325\5\240\6\237_\374\326\323\216\306M\336\355\305\245\365\352z\20\3731\326A]\364R\336\230m\266\256\21(6\6\260\0\3719\362\273\271\0\223\31\235\11\252BG\301\316\207\377\203b,\322@n\242", ) \215e\213\14$\347h\261R\334\33\2\316\352\265\265\322\245\271) \366<\325\7\312P\374F\7%\177t\371!@\245U,\331\177\210Q2\326\207\371#\37\34\317\323\33N\255\1\266\306G\332L0\320s\301\307\342\261\6i\275\220\14\321#U\11\262g\203$.\247\37\3428-\13|\3128A\262\362,\331m\325\246\362\1u\310\245\168\343\254\272\27\222\321\34\3265\272p\332\254\32\12\316zB\355C#JV\355yz\320\307UR\332\241E\244D(\253\270\\372\312Z Uu9\326 \325\5\240\6\237_\374\326\323\216\306M\336\355\305\245\365\352z\20\3731\326A]\364R\336\230m\266\256\21(6\6\260\0\3719\362\273\271\0\223\31\235\11\252BG\301\316\207\377\203b,\322@n\242", ) == 0x0 00490 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00491 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00492 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00493 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00494 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00495 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00496 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00497 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00498 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00499 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "\221\14\307\30&\10\340/\256n\265\201!\271\27\33\362\372zK\203I7\302 \227\23\247\253'\373\233\320\371\25op\267\362\237\267\235\271K\35\353\12E\305a\252"S\363\354\207(\32\335\336\353\201\10cl\326L\24Y;\263\337\250\3\27\241\17\343\370;", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "\221\14\307\30&\10\340/\256n\265\201!\271\27\33\362\372zK\203I7\302 \227\23\247\253'\373\233\320\371\25op\267\362\237\267\235\271K\35\353\12E\305a\252"S\363\354\207(\32\335\336\353\201\10cl\326L\24Y;\263\337\250\3\27\241\17\343\370;", 80, ... ) S\363\354\207(\32\335\336\353\201\10cl\326L\24Y;\263\337\250\3\27\241\17\343\370;", 80, ... ) == 0x0 00500 860 NtClose (-2147482740, ... ) == 0x0 00490 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\p\205Q?\N\233\2126\3;l}TS\2214\333\226YR\14\225\14\337f\314SN\26\232\217\12\251\364\276\20\252;\305\312\332\11\256\356I\311\210\N$\322J\27\10\27\202/1Eh\274\331\30\361\20 \230\213bL\225\341l\220)<\351\34;\233\222q\24TM&\260\260D\1^U%L\205\362\20yX1\375\7"y\317\264\1\266;s\330\364\366{k\231\371T\352\330tj\210\224^d\357:^\3277\265H|l\356\337\261\315@\226\260\252\373\207CV\263\331\221S\243\15\2331o\23\340\270/\376\35\362A\345gm\346x\236E\5\227\255\213\315\5\364\307c\313gF\300\266\0nQ8\237\360\333\261\214\225p\316\365\337\267y\272b($\340\316\10A\366\16/\2\332\314\17\347\327\310\224\233\26\27\345\222\4(\246}\345\34\201Pb\235\375p\263i\333w\3213\254t\251F\224\1\350\364\237\32", ) y\317\264\1\266;s\330\364\366{k\231\371T\352\330tj\210\224^d\357:^\3277\265H|l\356\337\261\315@\226\260\252\373\207CV\263\331\221S\243\15\2331o\23\340\270/\376\35\362A\345gm\346x\236E\5\227\255\213\315\5\364\307c\313gF\300\266\0nQ8\237\360\333\261\214\225p\316\365\337\267y\272b($\340\316\10A\366\16/\2\332\314\17\347\327\310\224\233\26\27\345\222\4(\246}\345\34\201Pb\235\375p\263i\333w\3213\254t\251F\224\1\350\364\237\32", ) == 0x0 00501 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00502 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00503 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00504 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00505 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00506 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00507 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00508 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00509 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00510 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "`\263\335\232\212\2451\213q\316K\31\37\274\350~\263\1\255\201}\363\20\276\232(\212\2759\373j\260Vq~\317\7\346\326V\2075`\35\2524?\271\257\240\375\25#\277\337\207\255\22\222\333\376\334\1\326\362\360&\313\31jD\234\313\21\251\13$\254\265\3", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "`\263\335\232\212\2451\213q\316K\31\37\274\350~\263\1\255\201}\363\20\276\232(\212\2759\373j\260Vq~\317\7\346\326V\2075`\35\2524?\271\257\240\375\25#\277\337\207\255\22\222\333\376\334\1\326\362\360&\313\31jD\234\313\21\251\13$\254\265\3", 80, ... ) , 80, ... ) == 0x0 00511 860 NtClose (-2147482740, ... ) == 0x0 00501 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "f.\2569*Wx6i\375\324\2544\354\231\213_\223Tm\213:3\323k\324W\12\274\30\357{\255\3770o\302}\10\367E\220.\252K"\222\27b\203\16N\222g`$a\323c\274\335\3\10\201\31L\330\303I^\314u\226\225n\334\225\277\17q\330\3415ay\213\237\256T\224\305\346Z\326\356\273*\334`7\221\305-e\343O\375q\33c\310\300q \0\322Y3/"u.-\300\275\365\2246pX\214hD\230\22\351\307\3554\\2673\357\266A\364\216\377\325\364/\315q\7\342PMp\2763~\215\244\372\327\207z\352\270\360~\333G.1k\315\265\335J2>G\361\11\217\222\273Z\367(FWk\357A\214\37\36A", ) \222\27b\203\16N\222g`$a\323c\274\335\3\10\201\31L\330\303I^\314u\226\225n\334\225\277\17q\330\3415ay\213\237\256T\224\305\346Z\326\356\273*\334`7\221\305-e\343O\375q\33c\310\300q \0\322Y3/ ... {status=0x0, info=256}, "f.\2569*Wx6i\375\324\2544\354\231\213_\223Tm\213:3\323k\324W\12\274\30\357{\255\3770o\302}\10\367E\220.\252K"\222\27b\203\16N\222g`$a\323c\274\335\3\10\201\31L\330\303I^\314u\226\225n\334\225\277\17q\330\3415ay\213\237\256T\224\305\346Z\326\356\273*\334`7\221\305-e\343O\375q\33c\310\300q \0\322Y3/"u.-\300\275\365\2246pX\214hD\230\22\351\307\3554\\2673\357\266A\364\216\377\325\364/\315q\7\342PMp\2763~\215\244\372\327\207z\352\270\360~\333G.1k\315\265\335J2>G\361\11\217\222\273Z\367(FWk\357A\214\37\36A", ) , ) == 0x0 00512 860 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\336iF\323\16\236\4-\303\217\273y\10\14\375\14MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q}7MiX\246Q[\301q\237\203\262+\212\206\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00513 860 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00514 860 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00515 860 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00516 860 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00517 860 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00518 860 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00519 860 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00520 860 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00521 860 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "7\205\2134{q\345O+5C\274\232\311\310\330\212\256\16\323E"#4\351X^D\232\300Y\3777U\2703A\213\353\314\\32U{*D\264\274\206\300\220K\315U\304n\21fCkYhM\304Z\232\372\246p\301\337W)\36Sd\270N\244\222", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "7\205\2134{q\345O+5C\274\232\311\310\330\212\256\16\323E"#4\351X^D\232\300Y\3777U\2703A\213\353\314\\32U{*D\264\274\206\300\220K\315U\304n\21fCkYhM\304Z\232\372\246p\301\337W)\36Sd\270N\244\222", 80, ... ) #4\351X^D\232\300Y\3777U\2703A\213\353\314\\32U{*D\264\274\206\300\220K\315U\304n\21fCkYhM\304Z\232\372\246p\301\337W)\36Sd\270N\244\222", 80, ... ) == 0x0 00522 860 NtClose (-2147482740, ... ) == 0x0 00512 860 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\366s\244\220\326\324\321\340\300\300\364\13\235\10\26\245\207\3541\34\2\364\317\13\270&\240\250\335\0tt\11\364\254\235\305\264\24~\240O\307\206\375\302\256h\30J\243B\252\307\30S\353\2\257\337\33\256\37\1<\6\221\223\200/\240h>M\327q\254\306\13>X\320Z\237\20\246Uu\236I{!\251gC^\222\266\326\1\214^}\364\310\303\12\367\22\321\314\210\226Uk\15h\200\252\241c]\1\210\345q\373\31p\202,\375\11\2B\1"Xi\223\13^5\356J\372%|\222\300w\261\3756\2566\357\360\247\375\234\346\372)|M\207\252Z\151\251nCd0\113'\267\6x\236\320T\7\321\21\52\210\250\222\347\206\320\237r"K\215\352\262\307\10\256\273\376&R~\274(\364\72\24\313\276\226\260"\261\26\243\333\217\357\306\222A\201\23\3065W\224.\265I{\323\326>j\217\237\23\60O\304\322\4"", ) Xi\223\13^5\356J\372%|\222\300w\261\3756\2566\357\360\247\375\234\346\372)|M\207\252Z\151\251nCd0\113'\267\6x\236\320T\7\321\21\52\210\250\222\347\206\320\237r ... {status=0x0, info=256}, "\366s\244\220\326\324\321\340\300\300\364\13\235\10\26\245\207\3541\34\2\364\317\13\270&\240\250\335\0tt\11\364\254\235\305\264\24~\240O\307\206\375\302\256h\30J\243B\252\307\30S\353\2\257\337\33\256\37\1<\6\221\223\200/\240h>M\327q\254\306\13>X\320Z\237\20\246Uu\236I{!\251gC^\222\266\326\1\214^}\364\310\303\12\367\22\321\314\210\226Uk\15h\200\252\241c]\1\210\345q\373\31p\202,\375\11\2B\1"Xi\223\13^5\356J\372%|\222\300w\261\3756\2566\357\360\247\375\234\346\372)|M\207\252Z\151\251nCd0\113'\267\6x\236\320T\7\321\21\52\210\250\222\347\206\320\237r"K\215\352\262\307\10\256\273\376&R~\274(\364\72\24\313\276\226\260"\261\26\243\333\217\357\306\222A\201\23\3065W\224.\265I{\323\326>j\217\237\23\60O\304\322\4"", ) \261\26\243\333\217\357\306\222A\201\23\3065W\224.\265I{\323\326>j\217\237\23\60O\304\322\4"", ) == 0x0 00523 860 NtAllocateVirtualMemory (-1, 1339392, 0, 16384, 4096, 4, ... 1339392, 16384, ) == 0x0 00524 860 NtUserRegisterClassExWOW (1243456, 1243524, 1243540, 1243556, 0, 384, 0, ... ) == 0x816dc038 00525 860 NtUserGetAtomName (49208, 1242784, ... ) == 0x15 00526 860 NtUserCreateWindowEx (0, 49208, 49208, (0, 49208, 49208, "OleMainThreadWndName", -2013265920, -2147483648, -2147483648, -2147483648, -2147483648, -3, 0, 2001600512, 0, 1073742848, 0, ... , -2013265920, -2147483648, -2147483648, -2147483648, -2147483648, -3, 0, 2001600512, 0, 1073742848, 0, ... 00527 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1240256, ... ) }, 1240256, ... ) == 0x0 00528 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0 00529 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 68, ... 64, ) == 0x0 00530 860 NtClose (68, ... ) == 0x0 00531 860 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xca0000), 0x0, 221184, ) == 0x0 00532 860 NtClose (64, ... ) == 0x0 00533 860 NtUnmapViewOfSection (-1, 0xca0000, ... ) == 0x0 00534 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1240564, ... ) }, 1240564, ... ) == 0x0 00535 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00536 860 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 68, ) == 0x0 00537 860 NtQuerySection (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00538 860 NtClose (64, ... ) == 0x0 00539 860 NtMapViewOfSection (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 229376, ) == 0x0 00540 860 NtClose (68, ... ) == 0x0 00541 860 NtProtectVirtualMemory (-1, (0x5ad71000), 1300, 4, ... (0x5ad71000), 4096, 32, ) == 0x0 00542 860 NtProtectVirtualMemory (-1, (0x5ad71000), 4096, 32, ... (0x5ad71000), 4096, 4, ) == 0x0 00543 860 NtFlushInstructionCache (-1, 1524043776, 1300, ... ) == 0x0 00544 860 NtProtectVirtualMemory (-1, (0x5ad71000), 1300, 4, ... (0x5ad71000), 4096, 32, ) == 0x0 00545 860 NtProtectVirtualMemory (-1, (0x5ad71000), 4096, 32, ... (0x5ad71000), 4096, 4, ) == 0x0 00546 860 NtFlushInstructionCache (-1, 1524043776, 1300, ... ) == 0x0 00547 860 NtProtectVirtualMemory (-1, (0x5ad71000), 1300, 4, ... (0x5ad71000), 4096, 32, ) == 0x0 00548 860 NtProtectVirtualMemory (-1, (0x5ad71000), 4096, 32, ... (0x5ad71000), 4096, 4, ) == 0x0 00549 860 NtFlushInstructionCache (-1, 1524043776, 1300, ... ) == 0x0 00550 860 NtProtectVirtualMemory (-1, (0x5ad71000), 1300, 4, ... (0x5ad71000), 4096, 32, ) == 0x0 00551 860 NtProtectVirtualMemory (-1, (0x5ad71000), 4096, 32, ... (0x5ad71000), 4096, 4, ) == 0x0 00552 860 NtFlushInstructionCache (-1, 1524043776, 1300, ... ) == 0x0 00553 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uxtheme.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00554 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00555 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00556 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00557 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 68, ) == 0x0 00558 860 NtQueryInformationToken (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00559 860 NtClose (68, ... ) == 0x0 00560 860 NtOpenKey (0x2001f, {24, 0, 0x640, 0, 0, (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 68, ) }, ... 68, ) == 0x0 00561 860 NtOpenKey (0x1, {24, 68, 0x40, 0, 0, (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 64, ) }, ... 64, ) == 0x0 00562 860 NtQueryValueKey (64, (64, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00563 860 NtClose (64, ... ) == 0x0 00564 860 NtClose (68, ... ) == 0x0 00565 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00566 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 68, ) == 0x0 00567 860 NtQueryInformationToken (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00568 860 NtClose (68, ... ) == 0x0 00569 860 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 68, ) }, ... 68, ) == 0x0 00570 860 NtOpenKey (0x1, {24, 68, 0x40, 0, 0, (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00571 860 NtQueryValueKey (64, (64, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00572 860 NtClose (64, ... ) == 0x0 00573 860 NtClose (68, ... ) == 0x0 00574 860 NtUserGetProcessWindowStation (... ) == 0x1c 00575 860 NtUserGetObjectInformation (28, 2, 1242352, 64, 1242348, ... ) == 0x1 00576 860 NtUserGetGUIThreadInfo (860, 1242372, ... ) == 0x1 00577 860 NtConnectPort ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1242216, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1242216, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0 00578 860 NtRequestWaitReplyPort (68, {32, 56, new_msg, 0, 0, 0, 0, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57981, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ... {32, 56, reply, 0, 464, 860, 57981, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57981, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ) == 0x0 00579 860 NtRequestWaitReplyPort (68, {32, 56, new_msg, 0, 0, 0, 0, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57982, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ... {32, 56, reply, 0, 464, 860, 57982, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57982, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ) == 0x0 00580 860 NtUserCallNoParam (29, ... 00581 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1239612, ... ) }, 1239612, ... ) == 0x0 00580 860 NtUserCallNoParam ... ) == 0x0 00582 860 NtUserSystemParametersInfo (41, 0, 1524240760, 0, ... ) == 0x1 00583 860 NtGdiHfontCreate (1241740, 356, 0, 0, 1332888, ... ) == 0x340a04e1 00584 860 NtGdiHfontCreate (1241740, 356, 0, 0, 1332880, ... ) == 0x520a0634 00585 860 NtRequestWaitReplyPort (68, {32, 56, new_msg, 0, 0, 0, 0, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57983, 0} "\0\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ... {32, 56, reply, 0, 464, 860, 57983, 0} (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 464, 860, 57983, 0} "\0\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ) ) == 0x0 00586 860 NtMapViewOfSection (64, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xca0000), {0, 0}, 327680, ) == 0x0 00587 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00588 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00589 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00590 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00591 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00592 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00593 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00594 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00595 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00596 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00597 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00598 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00599 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00600 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00601 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00602 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00603 860 NtAllocateVirtualMemory (-1, 8605696, 0, 4096, 4096, 4, ... 8605696, 4096, ) == 0x0 00604 860 NtUserGetWindowDC (0, ... ) == 0x1010052 00605 860 NtGdiCreatePatternBrushInternal (59048383, 0, 0, ... ) == 0x72100798 00606 860 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00607 860 NtUserCallNoParam (29, ... 00608 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1239052, ... ) }, 1239052, ... ) == 0x0 00607 860 NtUserCallNoParam ... ) == 0x0 00609 860 NtUserCallNoParam (29, ... 00610 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1239048, ... ) }, 1239048, ... ) == 0x0 00609 860 NtUserCallNoParam ... ) == 0x0 00611 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSCTF.dll"}, 1240260, ... ) }, 1240260, ... ) == 0x0 00612 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSCTF.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00613 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 72, ... 76, ) == 0x0 00614 860 NtClose (72, ... ) == 0x0 00615 860 NtMapViewOfSection (76, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xcf0000), 0x0, 294912, ) == 0x0 00616 860 NtClose (76, ... ) == 0x0 00617 860 NtUnmapViewOfSection (-1, 0xcf0000, ... ) == 0x0 00618 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSCTF.dll"}, 1240568, ... ) }, 1240568, ... ) == 0x0 00619 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\MSCTF.dll"}, 5, 96, ... 76, {status=0x0, info=1}, ) }, 5, 96, ... 76, {status=0x0, info=1}, ) == 0x0 00620 860 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 76, ... 72, ) == 0x0 00621 860 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00622 860 NtClose (76, ... ) == 0x0 00623 860 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x74720000), 0x0, 307200, ) == 0x0 00624 860 NtClose (72, ... ) == 0x0 00625 860 NtProtectVirtualMemory (-1, (0x74721000), 928, 4, ... (0x74721000), 4096, 32, ) == 0x0 00626 860 NtProtectVirtualMemory (-1, (0x74721000), 4096, 32, ... (0x74721000), 4096, 4, ) == 0x0 00627 860 NtFlushInstructionCache (-1, 1953632256, 928, ... ) == 0x0 00628 860 NtProtectVirtualMemory (-1, (0x74721000), 928, 4, ... (0x74721000), 4096, 32, ) == 0x0 00629 860 NtProtectVirtualMemory (-1, (0x74721000), 4096, 32, ... (0x74721000), 4096, 4, ) == 0x0 00630 860 NtFlushInstructionCache (-1, 1953632256, 928, ... ) == 0x0 00631 860 NtProtectVirtualMemory (-1, (0x74721000), 928, 4, ... (0x74721000), 4096, 32, ) == 0x0 00632 860 NtProtectVirtualMemory (-1, (0x74721000), 4096, 32, ... (0x74721000), 4096, 4, ) == 0x0 00633 860 NtFlushInstructionCache (-1, 1953632256, 928, ... ) == 0x0 00634 860 NtProtectVirtualMemory (-1, (0x74721000), 928, 4, ... (0x74721000), 4096, 32, ) == 0x0 00635 860 NtProtectVirtualMemory (-1, (0x74721000), 4096, 32, ... (0x74721000), 4096, 4, ) == 0x0 00636 860 NtFlushInstructionCache (-1, 1953632256, 928, ... ) == 0x0 00637 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSCTF.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00638 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ntdll.dll"}, 1237924, ... ) }, 1237924, ... ) == 0x0 00639 860 NtQueryInformationProcess (-1, Wow64, 4, ... {process info, class 26, size 4}, 0x0, ) == 0x0 00640 860 NtUserCallOneParam (0, 40, ... ) == 0x4090409 00641 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.Private", ... ) , ... ) == 0xc0a1 00642 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.SetFocus", ... ) , ... ) == 0xc0a2 00643 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.ThreadTerminate", ... ) , ... ) == 0xc0a3 00644 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.ThreadItemChange", ... ) , ... ) == 0xc0a4 00645 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.LangBarModal", ... ) , ... ) == 0xc0a5 00646 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.RpcSendReceive", ... ) , ... ) == 0xc0a6 00647 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.ThreadMarshal", ... ) , ... ) == 0xc0a7 00648 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.CheckThreadInputIdel", ... ) , ... ) == 0xc0a8 00649 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.StubCleanUp", ... ) , ... ) == 0xc0a9 00650 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.ShowFloating", ... ) , ... ) == 0xc0aa 00651 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.LBUpdate", ... ) , ... ) == 0xc0ab 00652 860 NtUserRegisterWindowMessage ( ("MSUIM.Msg.MuiMgrDirtyUpdate", ... ) , ... ) == 0xc0ac 00653 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\imm32.dll"}, 1237932, ... ) }, 1237932, ... ) == 0x0 00654 860 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 3998, 1240324, 0, 0} (24, {24, 52, new_msg, 0, 3998, 1240324, 0, 0} "\0\0\0\0\5\4\3\0\0\0\0\0\1\0\0\0\\3\0\0\0\0\0\0" ... {24, 52, reply, 0, 464, 860, 57984, 0} "\0\0\0\0\5\4\3\0\0\0\0\0\1\0\0\0\\3\0\0\0\0\0\0" ) ... {24, 52, reply, 0, 464, 860, 57984, 0} (24, {24, 52, new_msg, 0, 3998, 1240324, 0, 0} "\0\0\0\0\5\4\3\0\0\0\0\0\1\0\0\0\\3\0\0\0\0\0\0" ... {24, 52, reply, 0, 464, 860, 57984, 0} "\0\0\0\0\5\4\3\0\0\0\0\0\1\0\0\0\\3\0\0\0\0\0\0" ) ) == 0x0 00655 860 NtUserGetThreadDesktop (860, 0, ... ) == 0x20 00656 860 NtUserGetObjectInformation (32, 2, 1318544, 520, 1240232, ... ) == 0x1 00657 860 NtOpenProcessToken (-1, 0x8, ... 72, ) == 0x0 00658 860 NtQueryInformationToken (72, User, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00659 860 NtQueryInformationToken (72, User, 36, ... {token info, class 1, size 36}, 36, ) == 0x0 00660 860 NtClose (72, ... ) == 0x0 00661 860 NtCreateSection (0xf0007, {24, 48, 0x80, 0, 0, (0xf0007, {24, 48, 0x80, 0, 0, "CiceroSharedMemDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, {3240, 0}, 4, 134217728, 0, ... 72, ) }, {3240, 0}, 4, 134217728, 0, ... 72, ) == STATUS_OBJECT_NAME_EXISTS 00662 860 NtMapViewOfSection (72, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 4, ... (0xcf0000), {0, 0}, 4096, ) == 0x0 00663 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\CTF\Compatibility\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00664 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\CTF\SystemShared\"}, ... 76, ) }, ... 76, ) == 0x0 00665 860 NtQueryValueKey (76, (76, "CUAS", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (76, "CUAS", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00666 860 NtClose (76, ... ) == 0x0 00667 860 NtUserFindExistingCursorIcon (1239764, 1239780, 1239828, ... ) == 0x10011 00668 860 NtUserRegisterClassExWOW (1240036, 1240132, 1240116, 1240104, 0, 386, 0, ... ) == 0x816dc0ad 00669 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.LBES.MutexDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 76, ) }, 0, ... 76, ) == STATUS_OBJECT_NAME_EXISTS 00670 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.Compart.MutexDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 80, ) }, 0, ... 80, ) == STATUS_OBJECT_NAME_EXISTS 00671 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.Asm.MutexDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 84, ) }, 0, ... 84, ) == STATUS_OBJECT_NAME_EXISTS 00672 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.Layouts.MutexDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 88, ) }, 0, ... 88, ) == STATUS_OBJECT_NAME_EXISTS 00673 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.TMD.MutexDefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 92, ) }, 0, ... 92, ) == STATUS_OBJECT_NAME_EXISTS 00674 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00675 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 96, ) == 0x0 00676 860 NtQueryInformationToken (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00677 860 NtClose (96, ... ) == 0x0 00678 860 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 96, ) }, ... 96, ) == 0x0 00679 860 NtSetInformationObject (96, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0 00680 860 NtOpenKey (0x20019, {24, 96, 0x40, 0, 0, (0x20019, {24, 96, 0x40, 0, 0, "Keyboard Layout\Toggle"}, ... 100, ) }, ... 100, ) == 0x0 00681 860 NtQueryValueKey (100, (100, "Language Hotkey", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00682 860 NtQueryValueKey (100, (100, "Hotkey", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00683 860 NtQueryValueKey (100, (100, "Layout Hotkey", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00684 860 NtClose (100, ... ) == 0x0 00685 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\KERNEL32.dll"}, 1237752, ... ) }, 1237752, ... ) == 0x0 00686 860 NtQueryDefaultUILanguage (1240312, ... 00687 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00688 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00689 860 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00690 860 NtClose (-2147482740, ... ) == 0x0 00691 860 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00692 860 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00693 860 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00694 860 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00695 860 NtClose (-2147481328, ... ) == 0x0 00696 860 NtClose (-2147482740, ... ) == 0x0 00686 860 NtQueryDefaultUILanguage ... ) == 0x0 00697 860 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\CTF\"}, ... 100, ) }, ... 100, ) == 0x0 00698 860 NtQueryValueKey (100, (100, "EnableAnchorContext", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00699 860 NtClose (100, ... ) == 0x0 00700 860 NtCreateMutant (0x1f0001, {24, 48, 0x80, 0, 0, (0x1f0001, {24, 48, 0x80, 0, 0, "CTF.TimListCache.FMPDefaultS-1-5-21-1292428093-1383384898-725345543-1003MUTEX.DefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, 0, ... 100, ) }, 0, ... 100, ) == STATUS_OBJECT_NAME_EXISTS 00701 860 NtOpenSection (0xf001f, {24, 48, 0x0, 0, 0, (0xf001f, {24, 48, 0x0, 0, 0, "CTF.TimListCache.FMPDefaultS-1-5-21-1292428093-1383384898-725345543-1003SFM.DefaultS-1-5-21-1292428093-1383384898-725345543-1003"}, ... 104, ) }, ... 104, ) == 0x0 00702 860 NtMapViewOfSection (104, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 4, ... (0xd00000), {0, 0}, 262144, ) == 0x0 00703 860 NtWaitForSingleObject (100, 0, {-50000000, -1}, ... ) == 0x0 00704 860 NtReleaseMutant (100, ... 0x0, ) == 0x0 00705 860 NtWaitForSingleObject (100, 0, {-50000000, -1}, ... ) == 0x0 00706 860 NtReleaseMutant (100, ... 0x0, ) == 0x0 00707 860 NtWaitForSingleObject (100, 0, {-50000000, -1}, ... ) == 0x0 00708 860 NtReleaseMutant (100, ... 0x0, ) == 0x0 00709 860 NtUserSetWindowsHookEx (1953628160, 1241756, 860, 2, 1953694283, 2, ... ) == 0x601df 00710 860 NtUserSetWindowsHookEx (1953628160, 1241756, 860, 7, 1953693577, 2, ... ) == 0x18022f 00711 860 NtUserMessageCall (0xa0102, WM_NCCREATE, 0x0, 0x12f64c, 0, 670, 0, ... ) == 0x1 00712 860 NtUserMessageCall (0xa0102, WM_NCCALCSIZE, 0x0, 0x12f674, 0, 670, 0, ... ) == 0x0 00713 860 NtUserSetProp (655618, 43288, -1, ... ) == 0x1 00526 860 NtUserCreateWindowEx ... ) == 0xa0102 00714 860 NtUserRegisterWindowMessage ( ("ObjectLink", ... ) , ... ) == 0xc002 00715 860 NtAddAtom ( ("O\0l\0e\0D\0r\0o\0p\0T\0a\0r\0g\0e\0t\0I\0n\0t\0e\0r\0f\0a\0c\0e\0", 44, 1244228, ... ) , 44, 1244228, ... ) == 0x0 00716 860 NtAddAtom ( ("O\0l\0e\0D\0r\0o\0p\0T\0a\0r\0g\0e\0t\0M\0a\0r\0s\0h\0a\0l\0H\0w\0n\0d\0", 48, 1244228, ... ) , 48, 1244228, ... ) == 0x0 00717 860 NtUserRegisterWindowMessage ( ("OM_POST_WM_COMMAND", ... ) , ... ) == 0xc093 00718 860 NtUserRegisterWindowMessage ( ("OLE_MESSAHE", ... ) , ... ) == 0xc094 00719 860 NtUserRegisterWindowMessage ( ("Link", ... ) , ... ) == 0xc18d 00720 860 NtUserRegisterWindowMessage ( ("Rich Text Format", ... ) , ... ) == 0xc0d2 00721 860 NtUserGetClassInfo (1933705216, 1243964, 1243908, 1243956, 1, ... ) == 0x0 00722 860 NtUserRegisterClassExWOW (1243796, 1243892, 1243876, 1243864, 0, 386, 0, ... ) == 0x816dc15e 00723 860 NtUserGetClassInfo (1933705216, 1243964, 1243908, 1243956, 1, ... ) == 0x0 00724 860 NtUserRegisterClassExWOW (1243796, 1243892, 1243876, 1243864, 0, 386, 0, ... ) == 0x816dc15f 00725 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00726 860 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 13893632, 65536, ) == 0x0 00727 860 NtAllocateVirtualMemory (-1, 13893632, 0, 4096, 4096, 4, ... 13893632, 4096, ) == 0x0 00728 860 NtAllocateVirtualMemory (-1, 13897728, 0, 8192, 4096, 4, ... 13897728, 8192, ) == 0x0 00729 860 NtAllocateVirtualMemory (-1, 12988416, 0, 4096, 4096, 4, ... 12988416, 4096, ) == 0x0 00730 860 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00731 860 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00732 860 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 13959168, 65536, ) == 0x0 00733 860 NtAllocateVirtualMemory (-1, 13959168, 0, 4096, 4096, 4, ... 13959168, 4096, ) == 0x0 00734 860 NtAllocateVirtualMemory (-1, 13959168, 0, 8192, 4096, 4, ... 13959168, 8192, ) == 0x0 00735 860 NtAllocateVirtualMemory (-1, 13959168, 0, 12288, 4096, 4, ... 13959168, 12288, ) == 0x0 00736 860 NtAllocateVirtualMemory (-1, 13959168, 0, 16384, 4096, 4, ... 13959168, 16384, ) == 0x0 00737 860 NtAllocateVirtualMemory (-1, 13959168, 0, 20480, 4096, 4, ... 13959168, 20480, ) == 0x0 00738 860 NtAllocateVirtualMemory (-1, 13959168, 0, 24576, 4096, 4, ... 13959168, 24576, ) == 0x0 00739 860 NtProtectVirtualMemory (-1, (0xd50000), 24576, 32, ... (0xd50000), 24576, 4, ) == 0x0 00740 860 NtFlushInstructionCache (-1, 13959168, 24576, ... ) == 0x0 00741 860 NtAddAtom ( ("V\0B\0D\0i\0s\0a\0b\0l\0e\0d\0", 20, 1244284, ... ) , 20, 1244284, ... ) == 0x0 00742 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.cfg"}, 1242332, ... ) }, 1242332, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00743 860 NtUserGetClassInfo (1933705216, 1244540, 1244848, 1244536, 1, ... ) == 0x0 00744 860 NtUserFindExistingCursorIcon (1244152, 1244168, 1244216, ... ) == 0x0 00745 860 NtUserRegisterClassExWOW (1244424, 1244520, 1244504, 1244492, 0, 386, 0, ... ) == 0x816dc100 00746 860 NtUserCreateWindowEx (-2147483520, 1244680, 1243444, 0x0, -2146893824, -2147483648, -2147483648, 0, 0, 0, 0, 1933705216, 0, 1073742848, 0, ... 00747 860 NtUserMessageCall (0x90114, WM_NCCREATE, 0x0, 0x12f898, 0, 670, 1, ... ) == 0x1 00748 860 NtUserSetWindowFNID (1573108, 681, ... ) == 0x1 00749 860 NtAllocateVirtualMemory (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0 00750 860 NtUserSetWindowLong (1573108, 0, 1355784, 0, ... ) == 0x0 00751 860 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\IMM"}, ... 108, ) }, ... 108, ) == 0x0 00752 860 NtQueryValueKey (108, (108, "Ime File", Partial, 144, ... TitleIdx=0, Type=1, Data="m\0s\0c\0t\0f\0i\0m\0e\0.\0i\0m\0e\0\0\0"}, 38, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (108, "Ime File", Partial, 144, ... TitleIdx=0, Type=1, Data="m\0s\0c\0t\0f\0i\0m\0e\0.\0i\0m\0e\0\0\0"}, 38, ) }, 38, ) == 0x0 00753 860 NtClose (108, ... ) == 0x0 00754 860 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 108, ) }, ... 108, ) == 0x0 00755 860 NtMapViewOfSection (108, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 32768, ) == 0x0 00756 860 NtClose (108, ... ) == 0x0 00757 860 NtProtectVirtualMemory (-1, (0x77c01000), 304, 4, ... (0x77c01000), 4096, 32, ) == 0x0 00758 860 NtProtectVirtualMemory (-1, (0x77c01000), 4096, 32, ... (0x77c01000), 4096, 4, ) == 0x0 00759 860 NtFlushInstructionCache (-1, 2009075712, 304, ... ) == 0x0 00760 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\version.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00761 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00762 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00763 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239660, ... ) }, 1239660, ... ) == 0x0 00764 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 5, 96, ... 108, {status=0x0, info=1}, ) }, 5, 96, ... 108, {status=0x0, info=1}, ) == 0x0 00765 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 108, ... 112, ) == 0x0 00766 860 NtClose (108, ... ) == 0x0 00767 860 NtMapViewOfSection (112, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xd60000), 0x0, 180224, ) == 0x0 00768 860 NtClose (112, ... ) == 0x0 00769 860 NtUnmapViewOfSection (-1, 0xd60000, ... ) == 0x0 00770 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239256, ... ) }, 1239256, ... ) == 0x0 00771 860 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1240000, (0x80100080, {24, 0, 0x40, 0, 1240000, "\??\C:\WINDOWS\system32\msctfime.ime"}, 0x0, 0, 5, 1, 96, 0, 0, ... 112, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 112, {status=0x0, info=1}, ) == 0x0 00772 860 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 112, ... 108, ) == 0x0 00773 860 NtClose (112, ... ) == 0x0 00774 860 NtMapViewOfSection (108, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xd60000), {0, 0}, 180224, ) == 0x0 00775 860 NtClose (108, ... ) == 0x0 00776 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00777 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00778 860 NtQueryDefaultLocale (1, 1240620, ... ) == 0x0 00779 860 NtQueryVirtualMemory (-1, 0xd60000, Basic, 28, ... {BaseAddress=0xd60000,AllocationBase=0xd60000,AllocationProtect=0x2,RegionSize=0x2c000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00780 860 NtQueryVirtualMemory (-1, 0xd60000, Basic, 28, ... {BaseAddress=0xd60000,AllocationBase=0xd60000,AllocationProtect=0x2,RegionSize=0x2c000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00781 860 NtUnmapViewOfSection (-1, 0xd60000, ... ) == 0x0 00782 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00783 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00784 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239652, ... ) }, 1239652, ... ) == 0x0 00785 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 5, 96, ... 108, {status=0x0, info=1}, ) }, 5, 96, ... 108, {status=0x0, info=1}, ) == 0x0 00786 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 108, ... 112, ) == 0x0 00787 860 NtClose (108, ... ) == 0x0 00788 860 NtMapViewOfSection (112, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xd60000), 0x0, 180224, ) == 0x0 00789 860 NtClose (112, ... ) == 0x0 00790 860 NtUnmapViewOfSection (-1, 0xd60000, ... ) == 0x0 00791 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239248, ... ) }, 1239248, ... ) == 0x0 00792 860 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1239992, (0x80100080, {24, 0, 0x40, 0, 1239992, "\??\C:\WINDOWS\system32\msctfime.ime"}, 0x0, 0, 5, 1, 96, 0, 0, ... 112, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 112, {status=0x0, info=1}, ) == 0x0 00793 860 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 112, ... 108, ) == 0x0 00794 860 NtClose (112, ... ) == 0x0 00795 860 NtMapViewOfSection (108, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xd60000), {0, 0}, 180224, ) == 0x0 00796 860 NtClose (108, ... ) == 0x0 00797 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00798 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00799 860 NtQueryDefaultLocale (1, 1240612, ... ) == 0x0 00800 860 NtQueryVirtualMemory (-1, 0xd60000, Basic, 28, ... {BaseAddress=0xd60000,AllocationBase=0xd60000,AllocationProtect=0x2,RegionSize=0x2c000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00801 860 NtUnmapViewOfSection (-1, 0xd60000, ... ) == 0x0 00802 860 NtSetInformationThread (-2, ZeroTlsCell, {ZeroTlsCell=0x8,}, 4, ... ) == 0x0 00803 860 NtUnmapViewOfSection (-1, 0x77c00000, ... ) == 0x0 00804 860 NtOpenMutant (0x120001, {24, 48, 0x0, 0, 0, (0x120001, {24, 48, 0x0, 0, 0, "ShimCacheMutex"}, ... 108, ) }, ... 108, ) == 0x0 00805 860 NtWaitForSingleObject (108, 0, {-1000000, -1}, ... ) == 0x0 00806 860 NtOpenSection (0x2, {24, 48, 0x0, 0, 0, (0x2, {24, 48, 0x0, 0, 0, "ShimSharedMemory"}, ... 112, ) }, ... 112, ) == 0x0 00807 860 NtMapViewOfSection (112, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 4, ... (0xd60000), {0, 0}, 57344, ) == 0x0 00808 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00809 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 116, ) == 0x0 00810 860 NtQueryInformationToken (116, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00811 860 NtClose (116, ... ) == 0x0 00812 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00813 860 NtReleaseMutant (108, ... 0x0, ) == 0x0 00814 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239632, ... ) }, 1239632, ... ) == 0x0 00815 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 5, 96, ... 116, {status=0x0, info=1}, ) }, 5, 96, ... 116, {status=0x0, info=1}, ) == 0x0 00816 860 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 116, ... 120, ) == 0x0 00817 860 NtClose (116, ... ) == 0x0 00818 860 NtMapViewOfSection (120, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xd70000), 0x0, 180224, ) == 0x0 00819 860 NtClose (120, ... ) == 0x0 00820 860 NtUnmapViewOfSection (-1, 0xd70000, ... ) == 0x0 00821 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239940, ... ) }, 1239940, ... ) == 0x0 00822 860 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 5, 96, ... 120, {status=0x0, info=1}, ) }, 5, 96, ... 120, {status=0x0, info=1}, ) == 0x0 00823 860 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 120, ... 116, ) == 0x0 00824 860 NtQuerySection (116, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00825 860 NtClose (120, ... ) == 0x0 00826 860 NtMapViewOfSection (116, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x755c0000), 0x0, 188416, ) == 0x0 00827 860 NtClose (116, ... ) == 0x0 00828 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00829 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00830 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00831 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00832 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00833 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00834 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00835 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00836 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00837 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00838 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00839 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00840 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00841 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00842 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00843 860 NtProtectVirtualMemory (-1, (0x755c1000), 860, 4, ... (0x755c1000), 4096, 32, ) == 0x0 00844 860 NtProtectVirtualMemory (-1, (0x755c1000), 4096, 32, ... (0x755c1000), 4096, 4, ) == 0x0 00845 860 NtFlushInstructionCache (-1, 1968967680, 860, ... ) == 0x0 00846 860 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msctfime.ime"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00847 860 NtUserGetDC (0, ... ) == 0x1010051 00848 860 NtUserSystemParametersInfo (66, 12, 1240128, 0, ... ) == 0x1 00849 860 NtUserCallOneParam (16842833, 57, ... ) == 0x1 00850 860 NtGdiCreateCompatibleDC (0, ... ) == 0x6e0106ed 00851 860 NtGdiCreateCompatibleDC (0, ... ) == 0x3c01056c 00852 860 NtGdiCreateCompatibleDC (0, ... ) == 0x9d01066e 00853 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ole32.dll"}, 1237460, ... ) }, 1237460, ... ) == 0x0 00854 860 NtUserFindExistingCursorIcon (1239400, 1239416, 1239464, ... ) == 0x10003 00855 860 NtUserFindExistingCursorIcon (1239400, 1239416, 1239464, ... ) == 0x10011 00856 860 NtUserGetClassInfo (1968963584, 1239532, 1240096, 1239528, 0, ... ) == 0x0 00857 860 NtUserRegisterClassExWOW (1239416, 1239484, 1239500, 1239516, 0, 384, 0, ... ) == 0x816dc079 00858 860 NtUserFindExistingCursorIcon (1239400, 1239416, 1239464, ... ) == 0x10013 00859 860 NtUserGetClassInfo (1968963584, 1239532, 1240096, 1239528, 0, ... ) == 0x0 00860 860 NtUserRegisterClassExWOW (1239416, 1239484, 1239500, 1239516, 0, 384, 0, ... ) == 0x816dc07a 00861 860 NtUserRegisterWindowMessage ( ("MSIMEService", ... ) , ... ) == 0xc07b 00862 860 NtUserRegisterWindowMessage ( ("MSIMEUIReady", ... ) , ... ) == 0xc07c 00863 860 NtUserRegisterWindowMessage ( ("MSIMEReconvertRequest", ... ) , ... ) == 0xc07d 00864 860 NtUserRegisterWindowMessage ( ("MSIMEReconvert", ... ) , ... ) == 0xc07e 00865 860 NtUserRegisterWindowMessage ( ("MSIMEDocumentFeed", ... ) , ... ) == 0xc07f 00866 860 NtUserRegisterWindowMessage ( ("MSIMEQueryPosition", ... ) , ... ) == 0xc080 00867 860 NtUserRegisterWindowMessage ( ("MSIMEModeBias", ... ) , ... ) == 0xc081 00868 860 NtUserRegisterWindowMessage ( ("MSIMEShowImePad", ... ) , ... ) == 0xc082 00869 860 NtUserRegisterWindowMessage ( ("MSIMEMouseOperation", ... ) , ... ) == 0xc083 00870 860 NtUserRegisterWindowMessage ( ("MSIMEKeyMap", ... ) , ... ) == 0xc084 00871 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ntdll.dll"}, 1240292, ... ) }, 1240292, ... ) == 0x0 00872 860 NtUserMessageCall (0x1800f4, WM_NCCREATE, 0x0, 0x12f890, 0, 670, 0, ... ) == 0x1 00873 860 NtUserMessageCall (0x1800f4, WM_NCCALCSIZE, 0x0, 0x12f8d4, 0, 670, 0, ... ) == 0x0 00874 860 NtUserSetProp (1573108, 43288, -1, ... ) == 0x1 00875 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00876 860 NtUserValidateHandleSecure (721527, ... ) == 0x1 00877 860 NtUserValidateHandleSecure (721527, ... ) == 0x1 00878 860 NtUserUpdateInputContext (721527, 1, 1573108, ... ) == 0x1 00879 860 NtOpenKey (0x2000000, {24, 96, 0x40, 0, 0, (0x2000000, {24, 96, 0x40, 0, 0, "SOFTWARE\Microsoft\CTF"}, ... 116, ) }, ... 116, ) == 0x0 00880 860 NtQueryValueKey (116, (116, "Disable Thread Input Manager", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00881 860 NtClose (116, ... ) == 0x0 00882 860 NtOpenThreadToken (-2, 0x8, 0, ... ) == STATUS_NO_TOKEN 00883 860 NtOpenProcessToken (-1, 0xa, ... 116, ) == 0x0 00884 860 NtDuplicateToken (116, 0xc, {24, 0, 0x0, 0, 1242124, 0x0}, 0, 2, ... 120, ) == 0x0 00885 860 NtClose (116, ... ) == 0x0 00886 860 NtAccessCheck (1354280, 120, 0x1, 1242200, 1242252, 56, 1242232, ... (0x1), ) == 0x0 00887 860 NtClose (120, ... ) == 0x0 00888 860 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\CTF\SystemShared"}, ... 120, ) }, ... 120, ) == 0x0 00889 860 NtQueryValueKey (120, (120, "CUAS", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (120, "CUAS", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00890 860 NtClose (120, ... ) == 0x0 00891 860 NtUserGetImeInfoEx (1242016, 0, ... ) == 0x1 00892 860 NtWaitForSingleObject (108, 0, {-1000000, -1}, ... ) == 0x0 00893 860 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00894 860 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 120, ) == 0x0 00895 860 NtQueryInformationToken (120, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00896 860 NtClose (120, ... ) == 0x0 00897 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00898 860 NtReleaseMutant (108, ... 0x0, ) == 0x0 00899 860 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\msctfime.ime"}, 1239048, ... ) }, 1239048, ... ) == 0x0 00900 860 NtUserGetThreadState (16, ... ) == 0x0 00901 860 NtOpenThreadToken (-2, 0x8, 0, ... ) == STATUS_NO_TOKEN 00902 860 NtOpenProcessToken (-1, 0xa, ... 120, ) == 0x0 00903 860 NtDuplicateToken (120, 0xc, {24, 0, 0x0, 0, 1241048, 0x0}, 0, 2, ... 116, ) == 0x0 00904 860 NtClose (120, ... ) == 0x0 00905 860 NtAccessCheck (1354280, 116, 0x1, 1241124, 1241176, 56, 1241156, ... (0x1), ) == 0x0 00906 860 NtClose (116, ... ) == 0x0 00907 860 NtUserGetClassInfo (1968963584, 1240768, 1240712, 1240760, 0, ... ) == 0xc079 00908 860 NtUserMessageCall (0x90114, WM_NCCALCSIZE, 0x0, 0x12f8d4, 0, 670, 1, ... ) == 0x0 00909 860 NtUserSetProp (590100, 43288, -1, ... ) == 0x1 00746 860 NtUserCreateWindowEx ... ) == 0x90114 00910 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00911 860 NtUserSetWindowPos (590100, 0, 512, 384, 0, 0, 29, ... 00912 860 NtUserValidateHandleSecure (0, ... ) == 0x0 00911 860 NtUserSetWindowPos ... ) == 0x1 00913 860 NtUserShowWindow (590100, 4, ... ) == 0x0 00914 860 NtQueryVirtualMemory (-1, 0x12fee0, Basic, 28, ... {BaseAddress=0x12f000,AllocationBase=0x30000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 00915 860 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\Codepage"}, ... 116, ) }, ... 116, ) == 0x0 00916 860 NtQueryValueKey (116, (116, "932", Full, 532, ... TitleIdx=0, Type=1, Name="932", Data="c\0_\09\03\02\0.\0n\0l\0s\0\0\0"}, 48, ) , Full, 532, ... TitleIdx=0, Type=1, Name= (116, "932", Full, 532, ... TitleIdx=0, Type=1, Name="932", Data="c\0_\09\03\02\0.\0n\0l\0s\0\0\0"}, 48, ) , Data= (116, "932", Full, 532, ... TitleIdx=0, Type=1, Name="932", Data="c\0_\09\03\02\0.\0n\0l\0s\0\0\0"}, 48, ) }, 48, ) == 0x0 00917 860 NtQueryValueKey (116, (116, "949", Full, 532, ... TitleIdx=0, Type=1, Name="949", Data="c\0_\09\04\09\0.\0n\0l\0s\0\0\0"}, 48, ) , Full, 532, ... TitleIdx=0, Type=1, Name= (116, "949", Full, 532, ... TitleIdx=0, Type=1, Name="949", Data="c\0_\09\04\09\0.\0n\0l\0s\0\0\0"}, 48, ) , Data= (116, "949", Full, 532, ... TitleIdx=0, Type=1, Name="949", Data="c\0_\09\04\09\0.\0n\0l\0s\0\0\0"}, 48, ) }, 48, ) == 0x0 00918 860 NtQueryValueKey (116, (116, "950", Full, 532, ... TitleIdx=0, Type=1, Name="950", Data="c\0_\09\05\00\0.\0n\0l\0s\0\0\0"}, 48, ) , Full, 532, ... TitleIdx=0, Type=1, Name= (116, "950", Full, 532, ... TitleIdx=0, Type=1, Name="950", Data="c\0_\09\05\00\0.\0n\0l\0s\0\0\0"}, 48, ) , Data= (116, "950", Full, 532, ... TitleIdx=0, Type=1, Name="950", Data="c\0_\09\05\00\0.\0n\0l\0s\0\0\0"}, 48, ) }, 48, ) == 0x0 00919 860 NtQueryValueKey (116, (116, "936", Full, 532, ... TitleIdx=0, Type=1, Name="936", Data="c\0_\09\03\06\0.\0n\0l\0s\0\0\0"}, 48, ) , Full, 532, ... TitleIdx=0, Type=1, Name= (116, "936", Full, 532, ... TitleIdx=0, Type=1, Name="936", Data="c\0_\09\03\06\0.\0n\0l\0s\0\0\0"}, 48, ) , Data= (116, "936", Full, 532, ... TitleIdx=0, Type=1, Name="936", Data="c\0_\09\03\06\0.\0n\0l\0s\0\0\0"}, 48, ) }, 48, ) == 0x0 00920 860 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\VBA\Monitors"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00921 860 NtUserSetWindowsHookEx (0, 1244276, 860, -1, 1934216870, 2, ... ) == 0x501e3 00922 860 NtUserGetClassInfo (1933705216, 1244372, 1244316, 1244364, 1, ... ) == 0x0 00923 860 NtUserRegisterClassExWOW (1244204, 1244300, 1244284, 1244272, 0, 386, 0, ... ) == 0x816dc101 00924 860 NtUserCreateWindowEx (-2147483648, 1244596, 1243360, 0x0, -2147483648, -2147483648, -2147483648, -2147483648, -2147483648, 0, 0, 1933705216, 0, 1073742848, 0, ... 00925 860 NtUserMessageCall (0x500fc, WM_NCCREATE, 0x0, 0x12f840, 0, 670, 1, ... ) == 0x1 00926 860 NtUserMessageCall (0x500fc, WM_NCCALCSIZE, 0x0, 0x12f880, 0, 670, 1, ... ) == 0x0 00927 860 NtUserSetProp (327932, 43288, -1, ... ) == 0x1 00924 860 NtUserCreateWindowEx ... ) == 0x500fc 00928 860 NtUserValidateHandleSecure (327932, ... ) == 0x1 00929 860 NtUserSetWindowLong (327932, 0, 12990300, 1, ... ) == 0x0 00930 860 NtUserRegisterWindowMessage ( ("Object Descriptor", ... ) , ... ) == 0xc00e 00931 860 NtUserRegisterWindowMessage ( ("Link Source Descriptor", ... ) , ... ) == 0xc00f 00932 860 NtUserRegisterWindowMessage ( ("Embed Source", ... ) , ... ) == 0xc00b 00933 860 NtUserRegisterWindowMessage ( ("Embedded Object", ... ) , ... ) == 0xc00a 00934 860 NtUserRegisterWindowMessage ( ("Link Source", ... ) , ... ) == 0xc00d 00935 860 NtUserRegisterWindowMessage ( ("OwnerLink", ... ) , ... ) == 0xc003 00936 860 NtUserRegisterWindowMessage ( ("FileName", ... ) , ... ) == 0xc006 00937 860 NtGdiCreateCompatibleDC (0, ... ) == 0xca0104aa 00938 860 NtGdiGetDCObject (-905902934, 327680, ... ) == 0x185000f 00939 860 NtUserCreateWindowEx (-2147483648, 1244740, 1243504, 0x0, 1073741824, 0, 0, 0, 0, 590100, 0, 1933705216, 0, 1073742848, 0, ... 00940 860 NtUserMessageCall (0xd011a, WM_NCCREATE, 0x0, 0x12f8d8, 0, 670, 1, ... ) == 0x1 00941 860 NtUserMessageCall (0xd011a, WM_NCCALCSIZE, 0x0, 0x12f910, 0, 670, 1, ... ) == 0x0 00942 860 NtUserSetProp (852250, 43288, -1, ... ) == 0x1 00939 860 NtUserCreateWindowEx ... ) == 0xd011a 00943 860 NtAllocateVirtualMemory (-1, 12992512, 0, 4096, 4096, 4, ... 12992512, 4096, ) == 0x0 00944 860 NtAllocateVirtualMemory (-1, 12996608, 0, 4096, 4096, 4, ... 12996608, 4096, ) == 0x0 00945 860 NtAllocateVirtualMemory (-1, 13000704, 0, 4096, 4096, 4, ... 13000704, 4096, ) == 0x0 00946 860 NtAllocateVirtualMemory (-1, 13004800, 0, 4096, 4096, 4, ... 13004800, 4096, ) == 0x0 00947 860 NtAllocateVirtualMemory (-1, 13008896, 0, 4096, 4096, 4, ... 13008896, 4096, ) == 0x0 00948 860 NtAllocateVirtualMemory (-1, 13012992, 0, 4096, 4096, 4, ... 13012992, 4096, ) == 0x0 00949 860 NtAllocateVirtualMemory (-1, 13017088, 0, 4096, 4096, 4, ... 13017088, 4096, ) == 0x0 00950 860 NtAllocateVirtualMemory (-1, 13021184, 0, 4096, 4096, 4, ... 13021184, 4096, ) == 0x0 00951 860 NtAllocateVirtualMemory (-1, 13025280, 0, 4096, 4096, 4, ... 13025280, 4096, ) == 0x0 00952 860 NtAllocateVirtualMemory (-1, 13029376, 0, 4096, 4096, 4, ... 13029376, 4096, ) == 0x0 00953 860 NtProtectVirtualMemory (-1, (0xd50000), 24576, 4, ... (0xd50000), 24576, 32, ) == 0x0 00954 860 NtFlushInstructionCache (-1, 13959168, 24576, ... ) == 0x0 00955 860 NtAllocateVirtualMemory (-1, 13959168, 0, 28672, 4096, 4, ... 13959168, 28672, ) == 0x0 00956 860 NtAllocateVirtualMemory (-1, 13959168, 0, 32768, 4096, 4, ... 13959168, 32768, ) == 0x0 00957 860 NtAllocateVirtualMemory (-1, 13959168, 0, 36864, 4096, 4, ... 13959168, 36864, ) == 0x0 00958 860 NtAllocateVirtualMemory (-1, 13959168, 0, 40960, 4096, 4, ... 13959168, 40960, ) == 0x0 00959 860 NtProtectVirtualMemory (-1, (0xd50000), 40960, 32, ... (0xd50000), 40960, 4, ) == 0x0 00960 860 NtFlushInstructionCache (-1, 13959168, 40960, ... ) == 0x0 00961 860 NtAllocateVirtualMemory (-1, 13033472, 0, 12288, 4096, 4, ... 13033472, 12288, ) == 0x0 00962 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00963 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00964 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00965 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00966 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00967 860 NtUserMessageCall (0x90114, WM_SETTEXT, 0x0, 0x12fda4, 0, 670, 1, ... ) == 0x1 00968 860 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\VBA\Monitors"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00969 860 NtUserCallOneParam (0, 40, ... ) == 0x4090409 00970 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00971 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00972 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00973 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00974 860 NtUserValidateHandleSecure (590100, ... ) == 0x1 00975 860 NtUserMessageCall (0x90114, WM_SETTEXT, 0x0, 0xc6fc68, 0, 670, 1, ... ) == 0x1 00976 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00977 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00978 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00979 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00980 860 NtAllocateVirtualMemory (-1, 1359872, 0, 4096, 4096, 4, ... 1359872, 4096, ) == 0x0 00981 860 NtCreateFile (0xc0100080, {24, 0, 0x42, 0, 1243864, (0xc0100080, {24, 0, 0x42, 0, 1243864, "\??\u:\work\packed.exe"}, 0x0, 128, 3, 3, 96, 0, 0, ... ) }, 0x0, 128, 3, 3, 96, 0, 0, ... ) == STATUS_SHARING_VIOLATION 00982 860 NtCreateFile (0x40100080, {24, 0, 0x42, 0, 1243864, (0x40100080, {24, 0, 0x42, 0, 1243864, "\??\u:\work\packed.exe"}, 0x0, 128, 3, 3, 96, 0, 0, ... ) }, 0x0, 128, 3, 3, 96, 0, 0, ... ) == STATUS_SHARING_VIOLATION 00983 860 NtCreateFile (0x80100080, {24, 0, 0x42, 0, 1243864, (0x80100080, {24, 0, 0x42, 0, 1243864, "\??\u:\work\packed.exe"}, 0x0, 128, 3, 3, 96, 0, 0, ... 120, {status=0x0, info=1}, ) }, 0x0, 128, 3, 3, 96, 0, 0, ... 120, {status=0x0, info=1}, ) == 0x0 00984 860 NtQueryVolumeInformationFile (120, 1243968, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00985 860 NtQueryInformationFile (120, 1244256, 8, Position, ... {status=0x0, info=8}, ) == 0x0 00986 860 NtSetInformationFile (120, 1244256, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00987 860 NtQueryInformationFile (120, 1244224, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00988 860 NtSetInformationFile (120, 1244256, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00989 860 NtSetInformationFile (120, 1244256, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00990 860 NtAllocateVirtualMemory (-1, 1363968, 0, 151552, 4096, 4, ... 1363968, 151552, ) == 0x0 00991 860 NtReadFile (120, 0, 0, 0, 148495, 0x0, 0, ... {status=0x0, info=148495}, (120, 0, 0, 0, 148495, 0x0, 0, ... {status=0x0, info=148495}, "MZ\220\0\3\0\0\0\4\0\0\0\377\377\0\0\270\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\310\0\0\0\16\37\272\16\0\264\11\315!\270\1L\315!This program cannot be run in DOS mode.\15\15\12$\0\0\0\0\0\0\0\5\311\240\333A\250\316\210A\250\316\210A\250\316\210\302\264\300\210@\250\316\210(\267\307\210B\250\316\210\250\267\303\210@\250\316\210RichA\250\316\210\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0PE\0\0L\1\3\0\302\373jG\0\0\0\0\0\0\0\0\340\0\17\1\13\1\6\0\00\0\0\0 \0\0\0\0\0\0\256\25\0\0\0\20\0\0\0@\0\0\0\0@\0\0\20\0\0\0\20\0\0\4\0\0\0\1\0\0\0\4\0\0\0\0\0\0\0\0`\0\0\0\20\0\0&\11\1\0\2\0\0\0\0\0\20\0\0\20\0\0\0\0\20\0\0\20\0\0\0\0\0\0\20\0\0\0\0\0\0\0\0\0\0\0\242\0\0(\0\0\0\0P\0\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\08\2\0\0 \0\0\0\0\20\0\0\20\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0.text\0\0\0$'\0\0\0\20\0\0\00\0\0\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0 \0\0`.data\0\0\0H\5\0\0", ) , ) == 0x0 00992 860 NtClose (120, ... ) == 0x0 00993 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00994 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00995 860 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00996 860 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00997 860 NtAllocateVirtualMemory (-1, 1515520, 0, 151552, 4096, 4, ... 1515520, 151552, ) == 0x0 00998 860 NtAllocateVirtualMemory (-1, 1667072, 0, 299008, 4096, 4, ... 1667072, 299008, ) == 0x0 00999 860 NtFreeVirtualMemory (-1, (0x171000), 143360, 16384, ... (0x171000), 143360, ) == 0x0 01000 860 NtAllocateVirtualMemory (-1, 1966080, 0, 249856, 4096, 4, ... 1966080, 249856, ) == 0x0 01001 860 NtFreeVirtualMemory (-1, (0x194000), 299008, 16384, ... (0x194000), 299008, ) == 0x0 01002 860 NtAllocateVirtualMemory (-1, 1511424, 0, 249856, 4096, 4, ... 1511424, 249856, ) == 0x0 01003 860 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 14090240, 1048576, ) == 0x0 01004 860 NtAllocateVirtualMemory (-1, 14090240, 0, 251928, 4096, 4, ... 14090240, 253952, ) == 0x0 01005 860 NtAllocateVirtualMemory (-1, 1761280, 0, 126976, 4096, 4, ... 1761280, 126976, ) == 0x0 01006 860 NtFreeVirtualMemory (-1, (0xd71000), 249856, 16384, ... (0xd71000), 249856, ) == 0x0 01007 860 NtAllocateVirtualMemory (-1, 2215936, 0, 126976, 4096, 4, ... 2215936, 126976, ) == 0x0 01008 860 NtFreeVirtualMemory (-1, (0x1ad000), 131072, 16384, ... (0x1ad000), 131072, ) == 0x0 01009 860 NtUserGetThreadState (8, ... ) == 0x0 01010 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01011 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01012 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01013 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01014 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01015 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01016 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01017 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01018 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01019 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01020 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01021 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01022 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01023 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01024 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01025 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01026 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01027 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01028 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01029 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01030 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01031 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01032 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01033 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01034 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01035 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01036 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01037 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01038 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01039 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01040 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01041 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01042 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01043 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01044 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01045 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01046 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01047 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01048 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01049 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01050 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01051 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01052 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01053 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01054 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01055 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01056 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01057 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01058 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01059 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01060 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01061 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01062 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01063 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01064 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01065 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01066 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01067 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01068 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01069 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01070 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01071 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01072 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01073 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01074 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01075 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01076 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01077 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01078 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01079 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01080 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01081 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01082 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01083 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01084 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01085 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01086 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01087 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01088 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01089 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01090 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01091 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01092 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01093 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01094 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01095 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01096 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01097 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01098 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01099 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01100 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01101 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01102 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01103 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01104 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01105 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01106 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01107 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01108 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01109 860 NtUserPeekMessage (0, 0, 0, 1, ... {0x12fcb8, WM_USER+0x12f8b8, 0x7c90ee18, 0x7c9106f0, 0xffffffff, {2089879275, 1933775084}}, ) == 0x0 01110 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01111 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01112 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01113 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01114 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01115 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01116 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01117 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01118 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01119 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01120 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01121 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01122 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01123 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01124 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01125 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01126 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01127 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01128 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01129 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01130 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01131 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01132 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01133 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01134 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01135 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01136 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01137 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01138 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01139 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01140 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01141 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01142 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01143 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01144 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01145 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01146 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01147 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01148 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01149 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01150 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01151 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01152 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01153 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01154 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01155 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01156 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01157 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01158 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01159 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01160 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01161 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01162 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01163 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01164 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01165 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01166 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01167 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01168 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01169 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01170 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01171 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01172 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01173 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01174 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01175 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01176 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01177 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01178 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01179 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01180 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01181 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01182 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01183 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01184 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01185 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01186 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01187 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01188 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01189 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01190 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01191 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01192 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01193 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01194 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01195 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01196 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01197 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01198 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01199 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01200 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01201 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01202 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01203 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01204 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01205 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01206 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01207 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01208 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01209 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01210 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01211 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01212 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01213 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01214 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01215 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01216 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01217 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01218 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01219 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01220 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01221 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01222 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01223 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01224 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01225 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01226 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01227 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01228 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01229 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01230 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01231 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01232 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01233 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01234 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01235 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01236 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01237 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01238 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01239 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01240 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01241 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01242 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01243 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01244 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01245 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01246 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01247 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01248 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01249 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01250 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01251 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01252 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01253 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01254 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01255 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01256 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01257 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01258 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01259 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01260 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01261 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01262 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01263 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01264 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01265 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01266 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01267 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01268 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01269 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01270 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01271 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01272 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01273 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01274 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01275 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01276 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01277 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01278 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01279 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01280 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01281 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01282 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01283 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01284 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01285 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01286 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01287 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01288 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01289 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01290 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01291 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01292 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01293 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01294 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01295 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01296 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01297 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01298 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01299 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01300 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01301 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01302 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01303 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01304 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01305 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01306 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01307 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01308 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01309 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01310 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01311 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01312 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01313 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01314 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01315 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01316 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01317 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01318 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01319 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01320 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01321 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01322 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01323 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01324 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01325 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01326 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01327 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01328 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01329 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01330 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01331 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01332 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01333 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01334 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01335 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01336 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01337 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01338 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01339 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01340 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01341 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01342 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01343 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01344 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01345 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01346 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01347 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01348 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01349 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01350 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01351 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01352 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01353 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01354 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01355 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01356 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01357 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01358 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01359 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01360 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01361 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01362 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01363 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01364 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01365 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01366 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01367 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01368 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01369 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01370 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01371 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01372 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01373 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01374 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01375 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01376 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01377 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01378 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01379 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01380 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01381 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01382 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01383 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01384 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01385 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01386 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01387 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01388 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01389 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01390 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01391 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01392 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01393 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01394 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01395 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01396 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01397 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01398 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01399 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01400 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01401 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01402 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01403 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01404 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01405 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01406 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01407 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01408 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01409 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01410 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01411 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01412 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01413 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01414 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01415 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01416 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01417 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01418 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01419 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01420 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01421 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01422 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01423 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01424 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01425 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01426 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01427 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01428 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01429 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01430 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01431 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01432 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01433 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01434 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01435 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01436 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01437 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01438 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01439 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01440 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01441 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01442 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01443 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01444 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01445 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01446 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01447 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01448 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01449 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01450 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01451 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01452 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01453 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01454 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01455 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01456 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01457 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01458 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01459 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01460 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01461 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01462 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01463 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01464 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01465 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01466 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01467 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01468 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01469 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01470 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01471 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01472 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01473 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01474 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01475 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01476 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01477 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01478 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01479 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01480 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01481 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01482 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01483 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01484 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01485 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01486 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01487 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01488 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01489 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01490 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01491 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01492 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01493 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01494 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01495 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01496 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01497 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01498 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01499 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01500 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01501 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01502 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01503 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01504 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01505 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01506 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01507 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01508 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01509 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01510 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01511 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01512 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01513 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01514 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01515 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01516 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01517 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01518 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01519 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01520 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01521 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01522 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01523 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01524 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01525 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01526 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01527 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01528 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01529 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01530 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01531 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01532 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01533 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01534 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01535 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01536 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01537 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01538 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01539 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01540 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01541 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01542 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01543 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01544 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01545 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01546 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01547 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01548 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01549 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01550 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01551 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01552 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01553 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01554 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01555 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01556 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01557 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01558 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01559 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01560 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01561 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01562 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01563 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01564 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01565 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01566 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01567 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01568 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01569 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01570 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01571 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01572 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01573 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01574 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01575 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01576 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01577 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01578 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01579 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01580 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01581 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01582 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01583 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01584 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01585 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01586 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01587 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01588 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01589 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01590 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01591 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01592 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01593 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01594 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01595 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01596 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01597 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01598 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01599 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01600 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01601 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01602 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01603 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01604 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01605 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01606 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01607 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01608 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01609 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01610 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01611 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01612 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01613 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01614 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01615 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01616 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01617 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01618 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01619 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01620 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01621 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01622 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01623 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01624 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01625 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01626 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01627 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01628 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01629 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01630 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01631 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01632 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01633 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01634 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01635 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01636 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01637 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01638 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01639 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01640 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01641 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01642 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01643 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01644 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01645 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01646 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01647 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01648 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01649 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01650 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01651 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01652 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01653 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01654 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01655 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01656 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01657 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01658 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01659 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01660 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01661 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01662 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01663 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01664 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01665 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01666 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01667 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01668 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01669 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01670 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01671 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01672 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01673 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01674 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01675 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01676 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01677 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01678 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01679 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01680 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01681 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01682 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01683 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01684 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01685 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01686 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01687 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01688 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01689 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01690 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01691 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01692 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01693 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01694 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01695 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01696 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01697 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01698 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01699 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01700 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01701 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01702 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01703 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01704 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01705 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01706 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01707 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01708 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01709 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01710 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01711 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01712 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01713 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01714 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01715 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01716 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01717 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01718 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01719 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01720 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01721 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01722 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01723 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01724 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01725 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01726 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01727 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01728 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01729 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01730 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01731 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01732 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01733 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01734 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01735 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01736 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01737 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01738 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01739 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01740 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01741 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01742 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01743 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01744 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01745 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01746 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01747 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01748 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01749 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01750 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01751 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01752 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01753 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01754 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01755 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01756 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01757 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01758 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01759 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01760 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01761 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01762 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01763 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01764 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01765 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01766 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01767 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01768 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01769 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01770 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01771 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01772 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01773 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01774 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01775 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01776 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01777 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01778 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01779 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01780 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01781 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01782 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01783 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01784 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01785 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01786 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01787 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01788 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01789 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01790 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01791 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01792 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01793 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01794 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01795 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01796 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01797 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01798 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01799 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01800 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01801 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01802 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01803 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01804 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01805 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01806 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01807 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01808 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01809 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01810 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01811 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01812 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01813 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01814 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01815 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01816 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01817 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01818 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01819 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01820 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01821 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01822 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01823 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01824 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01825 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01826 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01827 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01828 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01829 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01830 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01831 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01832 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01833 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01834 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01835 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01836 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01837 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01838 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01839 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01840 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01841 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01842 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01843 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01844 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01845 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01846 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01847 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01848 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01849 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01850 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01851 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01852 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01853 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01854 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01855 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01856 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01857 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01858 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01859 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01860 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01861 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01862 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01863 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01864 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01865 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01866 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01867 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01868 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01869 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01870 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01871 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01872 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01873 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01874 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01875 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01876 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01877 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01878 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01879 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01880 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01881 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01882 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01883 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01884 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01885 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01886 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01887 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01888 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01889 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01890 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01891 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01892 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01893 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01894 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01895 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01896 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01897 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01898 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01899 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01900 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01901 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01902 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01903 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01904 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01905 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01906 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01907 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01908 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01909 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01910 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01911 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01912 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01913 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01914 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01915 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01916 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01917 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 01918 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01919 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01920 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01921 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01922 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01923 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01924 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01925 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01926 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01927 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01928 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01929 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01930 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01931 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01932 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01933 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01934 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01935 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01936 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01937 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01938 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01939 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01940 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01941 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01942 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01943 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01944 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01945 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01946 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01947 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01948 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01949 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01950 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01951 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01952 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01953 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01954 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01955 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01956 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01957 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01958 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01959 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01960 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01961 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01962 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01963 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01964 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01965 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01966 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01967 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01968 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01969 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01970 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01971 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01972 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01973 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01974 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01975 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01976 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01977 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01978 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01979 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01980 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01981 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01982 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01983 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01984 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01985 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01986 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01987 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01988 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01989 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01990 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01991 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01992 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01993 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01994 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01995 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01996 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01997 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01998 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 01999 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02000 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02001 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02002 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02003 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02004 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02005 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02006 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02007 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02008 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02009 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02010 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02011 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02012 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02013 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02014 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02015 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02016 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02017 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02018 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02019 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02020 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02021 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02022 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02023 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02024 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02025 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02026 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02027 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02028 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02029 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02030 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02031 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02032 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02033 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02034 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02035 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02036 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02037 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02038 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02039 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02040 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02041 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02042 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02043 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02044 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02045 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02046 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02047 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02048 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02049 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02050 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02051 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02052 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02053 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02054 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02055 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02056 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02057 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02058 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02059 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02060 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02061 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02062 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02063 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02064 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02065 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02066 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02067 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02068 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02069 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02070 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02071 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02072 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02073 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02074 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02075 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02076 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02077 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02078 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02079 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02080 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02081 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02082 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02083 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02084 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02085 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02086 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02087 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02088 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02089 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02090 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02091 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02092 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02093 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02094 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02095 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02096 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02097 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02098 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02099 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02100 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02101 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02102 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02103 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02104 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02105 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02106 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02107 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02108 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02109 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02110 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02111 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02112 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02113 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02114 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02115 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02116 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02117 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02118 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02119 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02120 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02121 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02122 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02123 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02124 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02125 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02126 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02127 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02128 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02129 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02130 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02131 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02132 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02133 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02134 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02135 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02136 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02137 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02138 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02139 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02140 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02141 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02142 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02143 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02144 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02145 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02146 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02147 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02148 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02149 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02150 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02151 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02152 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02153 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02154 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02155 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02156 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02157 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02158 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02159 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02160 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02161 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02162 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02163 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02164 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02165 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02166 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02167 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02168 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02169 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02170 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02171 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02172 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02173 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02174 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02175 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02176 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02177 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02178 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02179 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02180 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02181 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02182 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02183 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02184 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02185 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02186 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02187 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02188 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02189 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02190 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02191 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02192 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02193 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02194 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02195 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02196 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02197 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02198 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02199 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02200 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02201 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02202 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02203 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02204 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02205 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02206 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02207 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02208 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02209 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02210 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02211 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02212 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02213 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02214 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02215 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02216 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02217 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02218 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02219 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02220 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02221 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02222 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02223 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02224 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02225 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02226 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02227 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02228 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02229 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02230 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02231 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02232 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02233 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02234 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02235 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02236 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02237 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02238 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02239 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02240 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02241 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02242 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02243 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02244 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02245 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02246 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02247 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02248 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02249 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02250 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02251 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02252 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02253 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02254 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02255 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02256 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02257 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02258 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02259 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02260 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02261 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02262 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02263 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02264 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02265 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02266 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02267 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02268 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02269 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02270 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02271 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02272 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02273 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02274 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02275 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02276 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02277 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02278 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02279 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02280 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02281 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02282 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02283 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02284 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02285 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02286 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02287 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02288 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02289 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02290 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02291 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02292 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02293 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02294 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02295 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02296 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02297 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02298 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02299 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02300 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02301 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02302 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02303 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02304 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02305 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02306 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02307 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02308 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02309 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02310 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02311 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02312 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02313 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02314 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02315 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02316 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02317 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02318 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02319 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02320 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02321 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02322 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02323 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02324 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02325 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02326 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02327 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02328 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02329 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02330 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02331 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02332 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02333 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02334 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02335 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02336 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02337 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02338 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02339 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02340 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02341 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02342 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02343 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02344 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02345 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02346 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02347 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02348 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02349 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02350 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02351 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02352 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02353 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02354 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02355 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02356 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02357 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02358 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02359 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02360 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02361 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02362 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02363 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02364 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02365 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02366 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02367 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02368 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02369 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02370 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02371 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02372 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02373 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02374 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02375 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02376 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02377 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02378 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02379 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02380 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02381 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02382 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02383 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02384 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02385 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02386 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02387 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02388 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02389 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02390 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02391 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02392 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02393 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02394 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02395 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02396 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02397 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02398 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02399 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02400 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02401 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02402 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02403 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02404 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02405 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02406 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02407 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02408 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02409 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02410 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02411 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02412 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02413 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02414 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02415 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02416 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02417 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02418 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02419 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02420 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02421 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02422 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02423 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02424 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02425 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02426 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02427 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02428 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02429 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02430 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02431 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02432 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02433 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02434 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02435 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02436 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02437 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02438 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02439 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02440 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02441 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02442 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02443 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02444 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02445 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02446 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02447 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02448 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02449 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02450 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02451 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02452 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02453 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02454 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02455 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02456 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02457 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02458 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02459 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02460 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02461 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02462 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02463 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02464 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02465 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02466 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02467 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02468 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02469 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02470 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02471 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02472 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02473 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02474 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02475 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02476 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02477 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02478 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02479 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02480 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02481 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02482 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02483 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02484 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02485 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02486 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02487 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02488 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02489 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02490 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02491 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02492 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02493 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02494 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02495 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02496 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02497 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02498 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02499 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02500 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02501 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02502 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02503 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02504 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02505 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02506 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02507 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02508 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02509 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02510 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02511 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02512 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02513 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02514 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02515 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02516 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02517 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02518 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02519 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02520 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02521 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02522 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02523 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02524 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02525 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02526 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02527 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02528 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02529 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02530 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02531 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02532 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02533 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02534 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02535 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02536 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02537 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02538 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02539 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02540 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02541 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02542 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02543 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02544 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02545 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02546 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02547 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02548 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02549 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02550 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02551 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02552 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02553 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02554 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02555 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02556 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02557 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02558 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02559 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02560 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02561 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02562 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02563 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02564 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02565 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02566 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02567 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02568 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02569 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02570 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02571 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02572 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02573 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02574 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02575 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02576 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02577 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02578 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02579 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02580 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02581 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02582 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02583 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02584 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02585 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02586 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02587 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02588 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02589 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02590 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02591 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02592 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02593 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02594 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02595 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02596 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02597 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02598 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02599 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02600 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02601 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02602 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02603 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02604 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02605 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02606 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02607 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02608 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02609 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02610 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02611 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02612 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02613 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02614 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02615 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02616 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02617 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02618 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02619 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02620 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02621 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02622 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02623 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02624 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02625 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02626 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02627 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02628 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02629 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02630 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02631 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02632 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02633 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02634 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02635 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02636 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02637 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02638 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02639 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02640 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02641 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02642 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02643 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02644 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02645 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02646 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02647 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02648 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02649 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02650 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02651 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02652 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02653 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02654 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02655 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02656 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02657 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02658 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02659 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02660 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02661 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02662 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02663 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02664 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02665 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02666 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02667 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02668 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02669 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02670 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02671 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02672 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02673 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02674 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02675 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02676 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02677 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02678 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02679 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02680 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02681 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02682 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02683 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02684 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02685 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02686 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02687 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02688 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02689 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02690 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02691 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02692 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02693 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02694 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02695 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02696 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02697 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02698 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02699 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02700 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02701 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02702 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02703 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02704 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02705 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02706 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02707 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02708 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02709 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02710 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02711 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02712 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02713 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02714 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02715 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02716 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02717 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02718 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02719 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02720 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02721 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02722 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02723 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02724 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02725 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02726 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02727 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02728 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02729 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02730 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02731 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02732 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02733 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02734 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02735 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02736 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02737 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02738 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02739 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02740 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02741 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02742 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02743 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02744 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02745 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02746 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02747 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02748 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02749 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02750 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02751 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02752 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02753 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02754 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02755 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02756 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02757 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02758 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02759 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02760 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02761 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02762 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02763 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02764 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02765 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02766 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02767 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02768 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02769 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02770 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02771 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02772 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02773 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02774 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02775 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02776 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02777 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02778 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02779 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02780 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02781 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02782 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02783 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02784 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02785 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02786 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02787 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02788 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02789 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02790 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02791 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02792 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02793 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02794 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02795 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02796 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02797 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02798 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02799 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02800 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02801 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02802 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02803 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02804 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02805 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02806 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02807 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02808 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02809 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02810 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02811 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02812 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02813 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02814 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02815 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02816 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02817 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02818 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02819 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02820 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02821 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02822 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02823 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02824 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02825 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02826 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02827 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02828 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02829 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02830 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02831 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02832 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02833 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02834 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02835 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02836 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02837 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02838 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02839 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02840 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02841 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02842 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02843 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02844 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02845 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02846 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02847 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02848 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02849 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02850 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02851 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02852 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02853 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02854 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02855 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02856 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02857 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02858 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02859 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02860 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02861 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02862 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02863 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02864 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02865 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02866 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02867 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02868 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02869 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02870 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02871 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02872 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02873 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02874 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02875 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02876 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02877 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02878 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02879 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02880 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02881 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02882 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02883 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02884 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02885 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02886 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02887 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02888 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02889 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02890 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02891 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02892 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02893 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02894 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02895 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02896 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02897 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02898 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02899 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02900 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02901 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02902 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02903 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02904 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02905 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02906 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02907 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02908 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02909 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02910 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02911 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02912 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02913 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02914 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02915 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02916 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02917 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02918 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02919 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02920 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02921 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02922 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02923 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02924 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02925 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02926 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02927 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 02928 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02929 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02930 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02931 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02932 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02933 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02934 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02935 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02936 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02937 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02938 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02939 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02940 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02941 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02942 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02943 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02944 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02945 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02946 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02947 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02948 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02949 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02950 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02951 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02952 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02953 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02954 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02955 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02956 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02957 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02958 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02959 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02960 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02961 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02962 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02963 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02964 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02965 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02966 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02967 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02968 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02969 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02970 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02971 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02972 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02973 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02974 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02975 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02976 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02977 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02978 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02979 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02980 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02981 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02982 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02983 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02984 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02985 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02986 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02987 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02988 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02989 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02990 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02991 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02992 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02993 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02994 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02995 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02996 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02997 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02998 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 02999 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03000 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03001 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03002 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03003 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03004 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03005 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03006 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03007 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03008 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03009 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03010 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03011 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03012 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03013 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03014 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03015 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03016 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03017 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03018 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03019 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03020 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03021 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03022 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03023 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03024 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03025 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03026 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03027 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03028 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03029 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03030 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03031 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03032 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03033 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03034 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03035 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03036 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03037 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03038 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03039 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03040 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03041 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03042 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03043 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03044 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03045 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03046 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03047 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03048 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03049 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03050 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03051 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03052 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03053 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03054 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03055 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03056 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03057 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03058 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03059 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03060 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03061 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03062 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03063 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03064 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03065 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03066 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03067 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03068 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03069 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03070 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03071 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03072 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03073 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03074 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03075 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03076 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03077 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03078 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03079 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03080 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03081 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03082 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03083 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03084 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03085 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03086 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03087 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03088 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03089 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03090 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03091 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03092 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03093 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03094 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03095 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03096 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03097 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03098 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03099 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03100 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03101 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03102 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03103 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03104 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03105 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03106 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03107 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03108 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03109 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03110 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03111 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03112 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03113 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03114 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03115 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03116 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03117 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03118 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03119 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03120 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03121 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03122 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03123 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03124 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03125 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03126 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03127 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03128 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03129 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03130 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03131 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03132 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03133 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03134 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03135 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03136 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03137 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03138 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03139 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03140 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03141 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03142 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03143 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03144 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03145 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03146 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03147 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03148 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03149 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03150 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03151 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03152 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03153 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03154 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03155 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03156 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03157 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03158 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03159 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03160 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03161 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03162 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03163 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03164 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03165 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03166 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03167 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03168 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03169 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03170 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03171 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03172 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03173 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03174 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03175 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03176 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03177 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03178 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03179 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03180 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03181 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03182 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03183 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03184 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03185 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03186 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03187 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03188 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03189 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03190 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03191 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03192 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03193 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03194 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03195 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03196 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03197 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03198 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03199 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03200 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03201 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03202 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03203 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03204 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03205 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03206 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03207 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03208 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03209 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03210 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03211 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03212 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03213 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03214 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03215 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03216 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03217 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03218 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03219 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03220 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03221 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03222 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03223 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03224 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03225 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03226 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03227 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03228 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03229 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03230 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03231 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03232 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03233 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03234 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03235 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03236 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03237 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03238 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03239 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03240 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03241 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03242 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03243 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03244 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03245 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03246 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03247 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03248 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03249 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03250 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03251 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03252 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03253 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03254 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03255 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03256 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03257 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03258 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03259 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03260 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03261 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03262 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03263 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03264 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03265 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03266 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03267 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03268 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03269 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03270 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03271 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03272 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03273 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03274 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03275 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03276 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03277 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03278 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03279 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03280 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03281 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03282 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03283 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03284 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03285 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03286 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03287 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03288 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03289 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03290 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03291 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03292 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03293 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03294 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03295 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03296 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03297 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03298 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03299 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03300 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03301 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03302 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03303 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03304 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03305 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03306 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03307 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03308 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03309 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03310 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03311 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03312 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03313 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03314 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03315 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03316 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03317 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03318 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03319 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03320 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03321 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03322 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03323 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03324 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03325 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03326 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03327 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03328 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03329 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03330 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03331 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03332 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03333 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03334 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03335 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03336 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03337 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03338 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03339 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03340 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03341 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03342 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03343 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03344 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03345 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03346 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03347 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03348 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03349 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03350 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03351 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03352 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03353 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03354 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03355 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03356 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03357 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03358 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03359 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03360 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03361 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03362 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03363 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03364 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03365 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03366 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03367 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03368 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03369 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03370 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03371 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03372 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03373 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03374 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03375 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03376 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03377 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03378 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03379 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03380 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03381 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03382 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03383 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03384 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03385 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03386 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03387 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03388 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03389 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03390 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03391 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03392 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03393 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03394 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03395 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03396 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03397 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03398 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03399 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03400 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03401 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03402 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03403 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03404 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03405 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03406 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03407 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03408 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03409 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03410 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03411 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03412 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03413 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03414 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03415 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03416 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03417 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03418 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03419 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03420 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03421 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03422 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03423 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03424 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03425 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03426 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03427 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03428 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03429 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03430 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03431 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03432 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03433 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03434 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03435 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03436 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03437 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03438 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03439 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03440 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03441 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03442 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03443 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03444 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03445 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03446 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03447 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03448 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03449 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03450 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03451 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03452 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03453 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03454 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03455 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03456 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03457 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03458 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03459 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03460 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03461 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03462 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03463 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03464 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03465 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03466 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03467 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03468 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03469 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03470 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03471 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03472 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03473 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03474 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03475 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03476 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03477 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03478 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03479 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03480 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03481 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03482 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03483 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03484 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03485 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03486 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03487 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03488 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03489 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03490 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03491 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03492 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03493 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03494 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03495 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03496 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03497 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03498 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03499 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03500 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03501 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03502 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03503 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03504 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03505 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03506 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03507 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03508 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03509 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03510 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03511 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03512 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03513 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03514 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03515 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03516 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03517 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03518 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03519 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03520 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03521 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03522 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03523 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03524 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03525 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03526 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03527 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03528 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03529 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03530 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03531 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03532 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03533 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03534 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03535 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03536 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03537 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03538 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03539 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03540 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03541 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03542 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03543 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03544 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03545 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03546 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03547 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03548 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03549 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03550 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03551 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03552 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03553 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03554 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03555 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03556 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03557 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03558 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03559 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03560 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03561 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03562 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03563 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03564 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03565 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03566 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03567 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03568 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03569 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03570 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03571 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03572 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03573 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03574 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03575 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03576 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03577 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03578 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03579 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03580 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03581 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03582 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03583 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03584 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03585 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03586 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03587 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03588 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03589 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03590 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03591 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03592 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03593 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03594 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03595 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03596 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03597 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03598 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03599 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03600 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03601 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03602 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03603 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03604 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03605 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03606 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03607 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03608 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03609 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03610 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03611 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03612 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03613 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03614 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03615 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03616 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03617 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03618 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03619 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03620 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03621 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03622 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03623 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03624 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03625 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03626 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03627 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03628 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03629 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03630 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03631 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03632 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03633 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03634 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03635 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03636 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03637 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03638 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03639 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03640 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03641 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03642 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03643 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03644 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03645 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03646 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03647 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03648 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03649 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03650 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03651 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03652 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03653 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03654 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03655 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03656 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03657 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03658 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03659 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03660 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03661 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03662 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03663 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03664 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03665 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03666 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03667 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03668 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03669 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03670 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03671 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03672 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03673 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03674 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03675 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03676 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03677 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03678 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03679 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03680 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03681 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03682 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03683 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03684 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03685 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03686 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03687 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03688 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03689 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03690 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03691 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03692 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03693 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03694 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03695 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03696 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03697 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03698 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03699 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03700 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03701 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03702 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03703 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03704 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03705 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03706 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03707 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03708 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03709 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03710 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03711 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03712 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03713 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03714 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03715 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03716 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03717 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03718 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03719 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03720 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03721 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03722 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03723 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03724 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03725 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03726 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03727 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03728 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03729 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03730 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03731 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03732 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03733 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03734 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03735 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03736 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03737 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03738 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03739 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03740 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03741 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03742 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03743 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03744 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03745 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03746 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03747 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03748 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03749 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03750 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03751 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03752 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03753 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03754 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03755 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03756 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03757 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03758 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03759 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03760 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03761 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03762 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03763 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03764 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03765 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03766 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03767 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03768 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03769 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03770 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03771 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03772 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03773 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03774 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03775 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03776 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03777 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03778 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03779 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03780 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03781 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03782 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03783 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03784 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03785 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03786 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03787 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03788 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03789 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03790 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03791 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03792 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03793 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03794 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03795 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03796 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03797 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03798 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03799 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03800 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03801 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03802 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03803 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03804 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03805 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03806 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03807 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03808 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03809 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03810 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03811 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03812 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03813 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03814 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03815 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03816 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03817 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03818 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03819 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03820 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03821 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03822 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03823 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03824 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03825 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03826 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03827 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03828 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03829 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03830 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03831 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03832 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03833 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03834 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03835 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03836 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03837 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03838 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03839 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03840 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03841 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03842 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03843 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03844 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03845 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03846 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03847 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03848 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03849 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03850 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03851 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03852 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03853 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03854 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03855 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03856 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03857 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03858 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03859 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03860 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03861 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03862 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03863 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03864 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03865 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03866 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03867 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03868 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03869 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03870 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03871 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03872 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03873 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03874 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03875 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03876 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03877 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03878 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03879 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03880 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03881 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03882 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03883 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03884 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03885 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03886 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03887 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03888 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03889 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03890 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03891 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03892 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03893 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03894 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03895 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03896 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03897 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03898 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03899 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03900 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03901 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03902 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03903 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03904 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03905 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03906 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03907 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03908 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03909 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03910 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03911 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03912 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03913 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03914 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03915 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03916 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03917 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03918 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03919 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03920 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03921 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03922 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03923 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03924 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03925 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03926 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03927 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03928 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03929 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03930 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03931 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03932 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03933 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03934 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03935 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03936 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03937 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 03938 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03939 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03940 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03941 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03942 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03943 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03944 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03945 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03946 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03947 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03948 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03949 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03950 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03951 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03952 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03953 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03954 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03955 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03956 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03957 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03958 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03959 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03960 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03961 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03962 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03963 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03964 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03965 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03966 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03967 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03968 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03969 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03970 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03971 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03972 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03973 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03974 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03975 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03976 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03977 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03978 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03979 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03980 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03981 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03982 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03983 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03984 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03985 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03986 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03987 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03988 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03989 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03990 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03991 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03992 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03993 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03994 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03995 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03996 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03997 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03998 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 03999 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04000 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04001 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04002 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04003 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04004 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04005 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04006 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04007 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04008 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04009 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04010 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04011 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04012 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04013 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04014 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04015 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04016 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04017 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04018 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04019 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04020 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04021 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04022 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04023 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04024 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04025 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04026 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04027 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04028 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04029 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04030 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04031 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04032 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04033 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04034 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04035 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04036 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04037 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04038 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04039 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04040 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04041 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04042 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04043 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04044 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04045 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04046 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04047 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04048 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04049 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04050 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04051 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04052 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04053 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04054 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04055 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04056 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04057 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04058 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04059 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04060 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04061 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04062 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04063 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04064 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04065 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04066 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04067 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04068 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04069 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04070 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04071 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04072 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04073 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04074 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04075 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04076 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04077 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04078 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04079 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04080 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04081 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04082 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04083 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04084 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04085 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04086 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04087 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04088 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04089 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04090 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04091 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04092 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04093 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04094 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04095 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04096 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04097 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04098 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04099 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04100 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04101 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04102 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04103 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04104 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04105 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04106 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04107 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04108 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04109 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04110 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04111 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04112 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04113 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04114 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04115 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04116 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04117 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04118 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04119 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04120 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04121 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04122 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04123 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04124 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04125 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04126 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04127 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04128 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04129 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04130 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04131 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04132 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04133 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04134 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04135 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04136 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04137 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04138 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04139 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04140 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04141 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04142 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04143 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04144 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04145 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04146 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04147 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04148 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04149 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04150 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04151 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04152 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04153 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04154 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04155 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04156 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04157 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04158 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04159 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04160 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04161 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04162 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04163 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04164 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04165 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04166 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04167 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04168 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04169 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04170 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04171 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04172 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04173 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04174 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04175 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04176 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04177 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04178 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04179 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04180 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04181 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04182 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04183 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04184 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04185 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04186 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04187 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04188 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04189 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04190 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04191 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04192 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04193 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04194 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04195 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04196 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04197 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04198 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04199 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04200 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04201 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04202 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04203 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04204 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04205 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04206 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04207 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04208 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04209 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04210 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04211 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04212 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04213 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04214 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04215 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04216 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04217 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04218 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04219 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04220 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04221 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04222 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04223 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04224 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04225 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04226 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04227 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04228 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04229 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04230 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04231 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04232 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04233 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04234 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04235 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04236 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04237 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04238 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04239 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04240 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04241 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04242 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04243 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04244 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04245 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04246 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04247 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04248 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04249 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04250 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04251 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04252 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04253 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04254 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04255 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04256 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04257 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04258 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04259 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04260 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04261 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04262 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04263 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04264 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04265 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04266 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04267 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04268 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04269 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04270 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04271 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04272 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04273 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04274 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04275 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04276 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04277 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04278 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04279 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04280 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04281 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04282 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04283 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04284 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04285 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04286 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04287 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04288 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04289 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04290 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04291 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04292 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04293 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04294 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04295 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04296 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04297 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04298 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04299 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04300 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04301 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04302 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04303 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04304 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04305 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04306 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04307 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04308 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04309 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04310 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04311 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04312 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04313 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04314 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04315 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04316 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04317 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04318 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04319 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04320 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04321 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04322 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04323 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04324 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04325 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04326 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04327 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04328 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04329 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04330 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04331 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04332 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04333 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04334 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04335 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04336 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04337 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04338 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04339 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04340 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04341 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04342 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04343 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04344 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04345 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04346 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04347 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04348 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04349 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04350 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04351 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04352 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04353 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04354 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04355 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04356 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04357 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04358 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04359 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04360 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04361 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04362 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04363 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04364 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04365 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04366 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04367 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04368 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04369 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04370 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04371 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04372 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04373 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04374 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04375 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04376 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04377 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04378 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04379 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04380 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04381 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04382 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04383 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04384 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04385 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04386 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04387 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04388 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04389 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04390 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04391 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04392 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04393 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04394 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04395 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04396 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04397 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04398 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04399 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04400 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04401 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04402 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04403 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04404 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04405 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04406 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04407 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04408 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04409 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04410 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04411 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04412 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04413 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04414 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04415 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04416 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04417 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04418 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04419 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04420 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04421 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04422 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04423 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04424 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04425 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04426 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04427 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04428 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04429 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04430 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04431 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04432 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04433 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04434 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04435 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04436 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04437 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04438 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04439 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04440 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04441 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04442 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04443 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04444 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04445 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04446 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04447 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04448 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04449 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04450 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04451 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04452 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04453 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04454 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04455 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04456 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04457 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04458 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04459 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04460 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04461 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04462 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04463 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04464 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04465 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04466 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04467 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04468 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04469 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04470 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04471 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04472 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04473 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04474 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04475 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04476 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04477 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04478 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04479 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04480 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04481 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04482 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04483 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04484 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04485 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04486 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04487 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04488 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04489 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04490 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04491 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04492 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04493 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04494 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04495 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04496 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04497 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04498 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04499 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04500 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04501 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04502 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04503 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04504 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04505 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04506 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04507 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04508 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04509 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04510 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04511 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04512 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04513 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04514 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04515 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04516 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04517 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04518 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04519 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04520 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04521 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04522 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04523 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04524 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04525 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04526 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04527 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04528 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04529 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04530 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04531 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04532 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04533 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04534 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04535 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04536 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04537 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04538 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04539 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04540 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04541 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04542 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04543 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04544 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04545 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04546 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04547 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04548 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04549 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04550 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04551 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04552 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04553 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04554 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04555 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04556 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04557 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04558 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04559 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04560 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04561 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04562 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04563 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04564 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04565 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04566 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04567 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04568 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04569 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04570 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04571 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04572 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04573 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04574 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04575 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04576 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04577 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04578 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04579 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04580 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04581 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04582 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04583 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04584 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04585 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04586 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04587 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04588 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04589 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04590 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04591 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04592 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04593 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04594 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04595 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04596 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04597 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04598 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04599 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04600 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04601 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04602 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04603 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04604 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04605 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04606 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04607 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04608 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04609 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04610 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04611 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04612 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04613 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04614 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04615 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04616 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04617 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04618 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04619 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04620 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04621 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04622 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04623 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04624 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04625 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04626 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04627 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04628 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04629 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04630 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04631 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04632 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04633 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04634 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04635 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04636 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04637 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04638 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04639 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04640 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04641 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04642 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04643 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04644 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04645 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04646 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04647 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04648 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04649 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04650 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04651 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04652 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04653 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04654 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04655 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04656 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04657 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04658 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04659 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04660 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04661 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04662 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04663 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04664 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04665 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04666 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04667 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04668 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04669 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04670 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04671 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04672 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04673 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04674 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04675 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04676 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04677 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04678 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04679 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04680 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04681 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04682 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04683 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04684 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04685 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04686 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04687 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04688 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04689 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04690 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04691 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04692 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04693 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04694 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04695 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04696 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04697 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04698 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04699 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04700 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04701 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04702 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04703 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04704 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04705 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04706 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04707 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04708 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04709 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04710 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04711 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04712 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04713 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04714 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04715 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04716 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04717 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04718 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04719 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04720 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04721 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04722 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04723 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04724 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04725 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04726 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04727 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04728 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04729 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04730 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04731 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04732 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04733 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04734 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04735 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04736 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04737 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04738 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04739 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04740 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04741 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04742 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04743 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04744 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04745 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04746 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04747 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04748 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04749 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04750 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04751 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04752 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04753 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04754 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04755 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04756 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04757 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04758 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04759 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04760 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04761 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04762 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04763 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04764 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04765 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04766 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04767 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04768 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04769 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04770 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04771 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04772 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04773 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04774 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04775 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04776 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04777 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04778 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04779 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04780 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04781 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04782 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04783 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04784 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04785 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04786 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04787 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04788 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04789 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04790 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04791 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04792 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04793 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04794 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04795 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04796 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04797 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04798 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04799 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04800 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04801 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04802 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04803 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04804 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04805 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04806 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04807 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04808 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04809 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04810 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04811 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04812 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04813 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04814 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04815 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04816 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04817 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04818 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04819 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04820 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04821 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04822 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04823 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04824 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04825 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04826 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04827 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04828 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04829 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04830 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04831 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04832 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04833 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04834 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04835 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04836 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04837 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04838 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04839 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04840 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04841 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04842 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04843 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04844 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04845 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04846 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04847 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04848 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04849 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04850 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04851 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04852 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04853 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04854 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04855 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04856 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04857 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04858 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04859 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04860 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04861 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04862 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04863 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04864 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04865 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04866 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04867 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04868 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04869 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04870 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04871 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04872 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04873 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04874 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04875 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04876 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04877 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04878 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04879 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04880 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04881 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04882 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04883 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04884 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04885 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04886 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04887 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04888 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04889 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04890 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04891 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04892 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04893 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04894 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04895 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04896 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04897 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04898 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04899 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04900 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04901 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04902 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04903 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04904 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04905 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04906 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04907 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04908 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04909 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04910 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04911 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04912 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04913 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04914 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04915 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04916 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04917 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04918 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04919 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04920 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04921 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04922 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04923 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04924 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04925 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04926 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04927 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04928 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04929 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04930 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04931 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04932 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04933 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04934 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04935 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04936 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04937 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04938 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04939 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04940 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04941 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04942 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04943 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04944 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04945 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04946 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04947 860 NtYieldExecution (... ) == STATUS_NO_YIELD_PERFORMED 04948 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04949 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04950 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04951 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04952 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04953 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04954 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04955 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04956 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04957 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04958 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04959 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04960 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04961 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04962 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04963 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04964 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04965 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04966 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04967 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04968 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04969 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04970 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04971 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04972 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04973 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04974 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04975 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04976 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04977 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04978 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04979 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0 04980 860 NtDelayExecution (0, {0, 0}, ... ) == 0x0