Summary:

NtAccessCheck(>) 1 NtUserBuildHwndList(>) 1 NtReadFile(>) 5 NtQuerySection(>) 28
NtAddAtom(>) 1 NtUserCallNoParam(>) 1 NtUserFindWindowEx(>) 5 NtOpenProcessTokenEx(>) 29
NtAdjustPrivilegesToken(>) 1 NtUserCallOneParam(>) 1 NtContinue(>) 6 NtOpenThreadTokenEx(>) 29
NtAllocateUuids(>) 1 NtUserGetDC(>) 1 NtDuplicateObject(>) 6 NtCreateSemaphore(>) 30
NtConnectPort(>) 1 NtUserGetObjectInformation(>) 1 NtOpenThreadToken(>) 6 NtCreateEvent(>) 36
NtCreateThread(>) 1 NtUserGetProcessWindowStation(>) 1 NtQueryVolumeInformationFile(>) 7 NtQuerySystemInformation(>) 36
NtCreateTimer(>) 1 NtUserGetThreadDesktop(>) 1 NtSetInformationThread(>) 7 NtCreateSection(>) 37
NtDeleteValueKey(>) 1 NtUserWaitForInputIdle(>) 1 NtQueryDefaultLocale(>) 8 NtQueryInformationToken(>) 37
NtDuplicateToken(>) 1 NtCallbackReturn(>) 2 NtEnumerateValueKey(>) 9 NtUserGetClassInfo(>) 37
NtGdiCreateBitmap(>) 1 NtCreateIoCompletion(>) 2 NtOpenProcessToken(>) 9 NtDeviceIoControlFile(>) 41
NtGdiInit(>) 1 NtGdiCreateSolidBrush(>) 2 NtRequestWaitReplyPort(>) 9 NtProtectVirtualMemory(>) 46
NtGdiQueryFontAssocInfo(>) 1 NtOpenDirectoryObject(>) 2 NtFsControlFile(>) 10 NtUserFindExistingCursorIcon(>) 48
NtGdiSelectBitmap(>) 1 NtQueryInstallUILanguage(>) 2 NtQueryDefaultUILanguage(>) 10 NtCreateFile(>) 52
NtOpenKeyedEvent(>) 1 NtRaiseException(>) 2 NtUserSystemParametersInfo(>) 10 NtQueryVirtualMemory(>) 52
NtOpenProcess(>) 1 NtRegisterThreadTerminatePort(>) 2 NtCreateKey(>) 11 NtOpenSection(>) 53
NtOpenSymbolicLinkObject(>) 1 NtTestAlert(>) 2 NtFlushInstructionCache(>) 11 NtOpenFile(>) 57
NtQueryEvent(>) 1 NtUserPostMessage(>) 2 NtSetValueKey(>) 11 NtMapViewOfSection(>) 59
NtQueryInformationThread(>) 1 NtWriteFile(>) 2 NtUnmapViewOfSection(>) 11 NtUserRegisterClassExWOW(>) 63
NtQueryObject(>) 1 NtGdiCreateCompatibleDC(>) 3 NtSetInformationFile(>) 14 NtQueryDirectoryFile(>) 78
NtQuerySymbolicLinkObject(>) 1 NtNotifyChangeKey(>) 3 NtDelayExecution(>) 17 NtQueryAttributesFile(>) 98
NtQuerySystemTime(>) 1 NtQueryPerformanceCounter(>) 3 NtReleaseMutant(>) 18 NtOpenKey(>) 186
NtQueryTimerResolution(>) 1 NtSetInformationProcess(>) 3 NtCreateMutant(>) 19 NtQueryValueKey(>) 270
NtReleaseSemaphore(>) 1 NtSetInformationObject(>) 4 NtQueryDebugFilterState(>) 22 NtFreeVirtualMemory(>) 290
NtResumeThread(>) 1 NtGdiGetStockObject(>) 5 NtWaitForSingleObject(>) 22 NtClose(>) 330
NtSecureConnectPort(>) 1 NtOpenEvent(>) 5 NtQueryInformationProcess(>) 24 NtAllocateVirtualMemory(>) 409
NtSetSecurityObject(>) 1 NtOpenMutant(>) 5 NtUserRegisterWindowMessage(>) 24 NtEnumerateKey(>) 2141
NtSetTimer(>) 1 NtQueryInformationFile(>) 5 NtQueryKey(>) 26

Trace:

00001 456 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 456 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00003 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00004 456 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00005 456 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00006 456 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00007 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00008 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00009 456 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00010 456 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00011 456 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00012 456 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00013 456 NtClose (12, ... ) == 0x0 00014 456 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00015 456 NtQueryVolumeInformationFile (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00016 456 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER 00017 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 456 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0 00020 456 NtClose (16, ... ) == 0x0 00021 456 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00022 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00023 456 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00024 456 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18743296}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18743296}, {0, 0, 0}, 200, 44, ) == 0x0 00025 456 NtClose (16, ... ) == 0x0 00026 456 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00027 456 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00028 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00029 456 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00030 456 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00031 456 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 0, 0, 0} (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\36\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\36\1\4\0\0\0" ... {28, 56, reply, 0, 448, 456, 1510, 0} "\260\245\30\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\36\1\4\0\0\0" ) ... {28, 56, reply, 0, 448, 456, 1510, 0} (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\36\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\36\1\4\0\0\0" ... {28, 56, reply, 0, 448, 456, 1510, 0} "\260\245\30\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\36\1\4\0\0\0" ) ) == 0x0 00032 456 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00033 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00034 456 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00035 456 NtClose (16, ... ) == 0x0 00036 456 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00037 456 NtOpenMutant (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0 00038 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0 00039 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00040 456 NtClose (28, ... ) == 0x0 00041 456 NtQueryDefaultLocale (0, 2012046252, ... ) == 0x0 00042 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0 00043 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0 00044 456 NtClose (28, ... ) == 0x0 00045 456 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0 00046 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00047 456 NtQuerySection (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00048 456 NtClose (28, ... ) == 0x0 00049 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0 00050 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00051 456 NtClose (28, ... ) == 0x0 00052 456 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00053 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00054 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00055 456 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\36\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\36\18\6\0\0" ... {28, 56, reply, 0, 448, 456, 1514, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\36\18\6\0\0" ) ... {28, 56, reply, 0, 448, 456, 1514, 0} (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\36\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\36\18\6\0\0" ... {28, 56, reply, 0, 448, 456, 1514, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\36\18\6\0\0" ) ) == 0x0 00056 456 NtProtectVirtualMemory (-1, (0x4ed000), 648, 4, ... (0x4ed000), 4096, 8, ) == 0x0 00057 456 NtProtectVirtualMemory (-1, (0x4ed000), 4096, 8, ... (0x4ed000), 4096, 4, ) == 0x0 00058 456 NtFlushInstructionCache (-1, 5165056, 648, ... ) == 0x0 00059 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "USER32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00060 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0 00061 456 NtClose (28, ... ) == 0x0 00062 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00063 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0 00064 456 NtClose (28, ... ) == 0x0 00065 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0 00066 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0 00067 456 NtClose (28, ... ) == 0x0 00068 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0 00069 456 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0 00070 456 NtClose (28, ... ) == 0x0 00071 456 NtProtectVirtualMemory (-1, (0x4ed000), 648, 4, ... (0x4ed000), 4096, 4, ) == 0x0 00072 456 NtProtectVirtualMemory (-1, (0x4ed000), 4096, 4, ... (0x4ed000), 4096, 4, ) == 0x0 00073 456 NtFlushInstructionCache (-1, 5165056, 648, ... ) == 0x0 00074 456 NtProtectVirtualMemory (-1, (0x4ed000), 648, 4, ... (0x4ed000), 4096, 4, ) == 0x0 00075 456 NtProtectVirtualMemory (-1, (0x4ed000), 4096, 4, ... (0x4ed000), 4096, 4, ) == 0x0 00076 456 NtFlushInstructionCache (-1, 5165056, 648, ... ) == 0x0 00077 456 NtOpenProcessToken (-1, 0x8, ... 28, ) == 0x0 00078 456 NtQueryInformationToken (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00079 456 NtClose (28, ... ) == 0x0 00080 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0 00081 456 NtQueryValueKey (28, (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00082 456 NtClose (28, ... ) == 0x0 00083 456 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00084 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0 00085 456 NtQueryValueKey (28, (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00086 456 NtQueryValueKey (28, (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00087 456 NtClose (28, ... ) == 0x0 00088 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0 00089 456 NtQueryValueKey (28, (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00090 456 NtClose (28, ... ) == 0x0 00091 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0 00092 456 NtSetInformationObject (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0 00093 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00094 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00095 456 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2, 2147347448, 1246412, 0} (24, {28, 56, new_msg, 0, 2, 2147347448, 1246412, 0} "\210\6\36\1\0\0\0\0\314\4\23\0!\215\30\34\3\0\0\0\234\6\36\1$\1\0\0" ... {28, 56, reply, 0, 448, 456, 1523, 0} "\310\374\27\0\0\0\0\0\0\0\0\0!\215\30\34\3\0\0\0\234\6\36\1$\1\0\0" ) ... {28, 56, reply, 0, 448, 456, 1523, 0} (24, {28, 56, new_msg, 0, 2, 2147347448, 1246412, 0} "\210\6\36\1\0\0\0\0\314\4\23\0!\215\30\34\3\0\0\0\234\6\36\1$\1\0\0" ... {28, 56, reply, 0, 448, 456, 1523, 0} "\310\374\27\0\0\0\0\0\0\0\0\0!\215\30\34\3\0\0\0\234\6\36\1$\1\0\0" ) ) == 0x0 00096 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00097 456 NtMapViewOfSection (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x550000), 0x0, 1060864, ) == 0x0 00098 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0 00099 456 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00100 456 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482032, ) == 0x0 00101 456 NtQueryInformationToken (-2147482032, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00102 456 NtQueryInformationToken (-2147482032, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00103 456 NtClose (-2147482032, ... ) == 0x0 00104 456 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00105 456 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00106 456 NtDuplicateObject (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0 00107 456 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 00108 456 NtQueryValueKey (-2147482032, (-2147482032, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00109 456 NtClose (-2147482032, ... ) == 0x0 00110 456 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 00111 456 NtQueryValueKey (-2147482032, (-2147482032, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00112 456 NtClose (-2147482032, ... ) == 0x0 00113 456 NtQueryDefaultLocale (0, -136148468, ... ) == 0x0 00114 456 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00115 456 NtUserCallNoParam (24, ... ) == 0x0 00116 456 NtGdiCreateCompatibleDC (0, ... 00117 456 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00116 456 NtGdiCreateCompatibleDC ... ) == 0x13010430 00118 456 NtGdiGetStockObject (0, ... ) == 0x1900010 00119 456 NtGdiGetStockObject (4, ... ) == 0x1900011 00120 456 NtGdiCreateBitmap (8, 8, 1, 1, 2010393708, ... ) == 0x805042f 00121 456 NtGdiCreateSolidBrush (0, 0, ... 00122 456 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 9830400, 4096, ) == 0x0 00121 456 NtGdiCreateSolidBrush ... ) == 0x3e100436 00123 456 NtGdiGetStockObject (13, ... ) == 0x18a0021 00124 456 NtGdiCreateCompatibleDC (0, ... ) == 0x2201042c 00125 456 NtGdiSelectBitmap (570491948, 134546479, ... ) == 0x185000f 00126 456 NtUserGetThreadDesktop (456, 0, ... ) == 0x2c 00127 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0 00128 456 NtQueryValueKey (52, (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00129 456 NtClose (52, ... ) == 0x0 00130 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00131 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810cc017 00132 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00133 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810cc01c 00134 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00135 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810cc01e 00136 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00137 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810c8002 00138 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10013 00139 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810cc018 00140 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00141 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810cc01a 00142 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00143 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810cc01d 00144 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00145 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810cc026 00146 456 NtUserFindExistingCursorIcon (1241204, 1241220, 1241788, ... ) == 0x10011 00147 456 NtUserRegisterClassExWOW (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810cc019 00148 456 NtUserRegisterClassExWOW (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc020 00149 456 NtUserRegisterClassExWOW (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc022 00150 456 NtUserRegisterClassExWOW (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc023 00151 456 NtUserRegisterClassExWOW (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc024 00152 456 NtUserRegisterClassExWOW (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc025 00153 456 NtCallbackReturn (0, 0, 0, ... 00154 456 NtGdiInit (... ) == 0x1 00155 456 NtGdiGetStockObject (18, ... ) == 0x290001c 00156 456 NtGdiGetStockObject (19, ... ) == 0x1b00019 00157 456 NtTestAlert (... ) == 0x0 00158 456 NtContinue (1244464, 1, ... 00159 456 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x4ca10b,}, 4, ... ) == 0x0 00160 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00161 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9895936, 65536, ) == 0x0 00162 456 NtAllocateVirtualMemory (-1, 9895936, 0, 4096, 4096, 4, ... 9895936, 4096, ) == 0x0 00163 456 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0 00164 456 NtMapViewOfSection (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x980000), 0x0, 12288, ) == 0x0 00165 456 NtClose (52, ... ) == 0x0 00166 456 NtAllocateVirtualMemory (-1, 9900032, 0, 4096, 4096, 4, ... 9900032, 4096, ) == 0x0 00167 456 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00168 456 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00169 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe"}, 1243328, ... ) }, 1243328, ... ) == 0x0 00170 456 NtQueryInformationProcess (-1, DefaultHardErrorMode, 4, ... {process info, class 12, size 4}, 0x0, ) == 0x0 00171 456 NtSetInformationProcess (-1, DefaultHardErrorMode, {process info, class 12, size 4}, 4, ... ) == 0x0 00172 456 NtAllocateVirtualMemory (-1, 9904128, 0, 12288, 4096, 4, ... 9904128, 12288, ) == 0x0 00173 456 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0 00174 456 NtOpenMutant (0x1f0001, {24, 52, 0x0, 0, 0, (0x1f0001, {24, 52, 0x0, 0, 0, "1C0::DA2522088C"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00175 456 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0 00176 456 NtQueryValueKey (56, (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00177 456 NtClose (56, ... ) == 0x0 00178 456 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 10027008, 1048576, ) == 0x0 00179 456 NtAllocateVirtualMemory (-1, 10027008, 0, 262152, 4096, 4, ... 10027008, 266240, ) == 0x0 00180 456 NtAllocateVirtualMemory (-1, 10293248, 0, 135168, 4096, 4, ... 10293248, 135168, ) == 0x0 00181 456 NtAllocateVirtualMemory (-1, 9916416, 0, 36864, 4096, 4, ... 9916416, 36864, ) == 0x0 00182 456 NtFreeVirtualMemory (-1, (0x9d0000), 139264, 16384, ... (0x9d0000), 139264, ) == 0x0 00183 456 NtAllocateVirtualMemory (-1, 268435456, 0, 315392, 4096, 4, ... ) == STATUS_CONFLICTING_ADDRESSES 00184 456 NtAllocateVirtualMemory (-1, 0, 0, 315392, 4096, 4, ... 11075584, 315392, ) == 0x0 00185 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "COMCTL32.dll"}, ... 56, ) }, ... 56, ) == 0x0 00186 456 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0 00187 456 NtClose (56, ... ) == 0x0 00188 456 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {448, 0}, ... 56, ) == 0x0 00189 456 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00190 456 NtClose (56, ... ) == 0x0 00191 456 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00192 456 NtUserSystemParametersInfo (104, 0, 2000318720, 0, ... ) == 0x1 00193 456 NtUserSystemParametersInfo (38, 4, 2000318708, 0, ... ) == 0x1 00194 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00195 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00196 456 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00197 456 NtClose (56, ... ) == 0x0 00198 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 56, ) }, ... 56, ) == 0x0 00199 456 NtSetInformationObject (56, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0 00200 456 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 60, ) }, ... 60, ) == 0x0 00201 456 NtQueryValueKey (60, (60, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00202 456 NtClose (60, ... ) == 0x0 00203 456 NtUserSystemParametersInfo (41, 500, 1240472, 0, ... ) == 0x1 00204 456 NtUserSystemParametersInfo (102, 0, 2000318732, 0, ... ) == 0x1 00205 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00206 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00207 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc03b 00208 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00209 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc03d 00210 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00211 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00212 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc03f 00213 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00214 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00215 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc041 00216 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00217 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00218 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc043 00219 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00220 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc045 00221 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00222 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00223 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc047 00224 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00225 456 NtUserFindExistingCursorIcon (1240260, 1240276, 1240844, ... ) == 0x10011 00226 456 NtUserRegisterClassExWOW (1240712, 1240792, 1240776, 1240808, 0, 384, 0, ... ) == 0x810cc049 00227 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00228 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00229 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc04b 00230 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00231 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00232 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc04d 00233 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00234 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00235 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc04f 00236 456 NtUserGetClassInfo (1999896576, 1240884, 1240836, 1240912, 0, ... ) == 0x0 00237 456 NtUserRegisterClassExWOW (1240720, 1240800, 1240784, 1240816, 0, 384, 0, ... ) == 0x810cc051 00238 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00239 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00240 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc053 00241 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00242 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00243 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc055 00244 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc057 00245 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00246 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00247 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc059 00248 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00249 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10013 00250 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc05b 00251 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00252 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00253 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc05d 00254 456 NtUserGetClassInfo (1999896576, 1240880, 1240832, 1240908, 0, ... ) == 0x0 00255 456 NtUserFindExistingCursorIcon (1240264, 1240280, 1240848, ... ) == 0x10011 00256 456 NtUserRegisterClassExWOW (1240716, 1240796, 1240780, 1240812, 0, 384, 0, ... ) == 0x810cc05f 00257 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "OLEAUT32.dll"}, ... 60, ) }, ... 60, ) == 0x0 00258 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00259 456 NtClose (60, ... ) == 0x0 00260 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 60, ) }, ... 60, ) == 0x0 00261 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0 00262 456 NtClose (60, ... ) == 0x0 00263 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 60, ) }, ... 60, ) == 0x0 00264 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0 00265 456 NtClose (60, ... ) == 0x0 00266 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00267 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 11403264, 65536, ) == 0x0 00268 456 NtAllocateVirtualMemory (-1, 11403264, 0, 4096, 4096, 4, ... 11403264, 4096, ) == 0x0 00269 456 NtAllocateVirtualMemory (-1, 11407360, 0, 8192, 4096, 4, ... 11407360, 8192, ) == 0x0 00270 456 NtAllocateVirtualMemory (-1, 11415552, 0, 4096, 4096, 4, ... 11415552, 4096, ) == 0x0 00271 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00272 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00273 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 60, ) }, ... 60, ) == 0x0 00274 456 NtQueryValueKey (60, (60, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (60, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00275 456 NtClose (60, ... ) == 0x0 00276 456 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00277 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00278 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00279 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00280 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00281 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 60, ) }, ... 60, ) == 0x0 00282 456 NtQueryValueKey (60, (60, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00283 456 NtQueryValueKey (60, (60, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00284 456 NtQueryValueKey (60, (60, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00285 456 NtClose (60, ... ) == 0x0 00286 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 60, ) }, ... 60, ) == 0x0 00287 456 NtQueryValueKey (60, (60, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00288 456 NtQueryValueKey (60, (60, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00289 456 NtClose (60, ... ) == 0x0 00290 456 NtOpenEvent (0x1f0003, {24, 52, 0x0, 0, 0, (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00291 456 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b 00292 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00293 456 NtOpenKey (0x9, {24, 28, 0x40, 0, 0, (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00294 456 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00295 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00296 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comdlg32.dll"}, ... 60, ) }, ... 60, ) == 0x0 00297 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x763b0000), 0x0, 282624, ) == 0x0 00298 456 NtClose (60, ... ) == 0x0 00299 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 60, ) }, ... 60, ) == 0x0 00300 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0 00301 456 NtClose (60, ... ) == 0x0 00302 456 NtProtectVirtualMemory (-1, (0x763b1000), 1536, 4, ... (0x763b1000), 4096, 32, ) == 0x0 00303 456 NtProtectVirtualMemory (-1, (0x763b1000), 4096, 32, ... (0x763b1000), 4096, 4, ) == 0x0 00304 456 NtFlushInstructionCache (-1, 1983582208, 1536, ... ) == 0x0 00305 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHELL32.dll"}, ... 60, ) }, ... 60, ) == 0x0 00306 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0 00307 456 NtClose (60, ... ) == 0x0 00308 456 NtOpenKey (0x2000000, {24, 28, 0x40, 0, 0, (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00309 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 60, ) }, ... 60, ) == 0x0 00310 456 NtQueryValueKey (60, (60, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (60, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00311 456 NtClose (60, ... ) == 0x0 00312 456 NtQueryDefaultUILanguage (1239096, ... 00313 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00314 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482032, ) == 0x0 00315 456 NtQueryInformationToken (-2147482032, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00316 456 NtClose (-2147482032, ... ) == 0x0 00317 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 00318 456 NtOpenKey (0x80000000, {24, 0, 0x240, 0, 0, (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00319 456 NtOpenKey (0x80000000, {24, -2147482032, 0x640, 0, 0, (0x80000000, {24, -2147482032, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482044, ) }, ... -2147482044, ) == 0x0 00320 456 NtQueryValueKey (-2147482044, (-2147482044, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 456 NtClose (-2147482044, ... ) == 0x0 00322 456 NtClose (-2147482032, ... ) == 0x0 00312 456 NtQueryDefaultUILanguage ... ) == 0x0 00323 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 456 NtQueryInstallUILanguage (2012047340, ... ) == 0x0 00325 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\SHELL32.dll"}, 1, 96, ... 60, {status=0x0, info=1}, ) }, 1, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00326 456 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 60, ... 64, ) == 0x0 00327 456 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0xaf0000), 0x0, 8323072, ) == 0x0 00328 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\SHELL32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 456 NtQueryDefaultUILanguage (2013024600, ... 00330 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00331 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482032, ) == 0x0 00332 456 NtQueryInformationToken (-2147482032, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00333 456 NtClose (-2147482032, ... ) == 0x0 00334 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 00335 456 NtOpenKey (0x80000000, {24, 0, 0x240, 0, 0, (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00336 456 NtOpenKey (0x80000000, {24, -2147482032, 0x640, 0, 0, (0x80000000, {24, -2147482032, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482044, ) }, ... -2147482044, ) == 0x0 00337 456 NtQueryValueKey (-2147482044, (-2147482044, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00338 456 NtClose (-2147482044, ... ) == 0x0 00339 456 NtClose (-2147482032, ... ) == 0x0 00329 456 NtQueryDefaultUILanguage ... ) == 0x0 00340 456 NtQueryInstallUILanguage (2013024602, ... ) == 0x0 00341 456 NtQueryDefaultLocale (1, 1237132, ... ) == 0x0 00342 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\SHELL32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00343 456 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 1237988, 1, 96, 0} (24, {128, 156, new_msg, 0, 1237988, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\347\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1<\0\0\0\377\377\377\377\0\0\0\0\20\311\346\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\344\352\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1553, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\347\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1<\0\0\0\377\377\377\377\0\0\0\0\20\311\346\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\344\352\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 448, 456, 1553, 0} (24, {128, 156, new_msg, 0, 1237988, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\347\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1<\0\0\0\377\377\377\377\0\0\0\0\20\311\346\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\344\352\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1553, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\347\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1<\0\0\0\377\377\377\377\0\0\0\0\20\311\346\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\344\352\22\0\0\0\0\0" ) ) == 0x0 00344 456 NtClose (60, ... ) == 0x0 00345 456 NtClose (64, ... ) == 0x0 00346 456 NtUnmapViewOfSection (-1, 0xaf0000, ... ) == 0x0 00347 456 NtUnmapViewOfSection (-1, 0x12eae4, ... ) == STATUS_NOT_MAPPED_VIEW 00348 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00349 456 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00350 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00351 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00352 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1236216, ... ) }, 1236216, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00353 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00354 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00355 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00356 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1236808, ... ) }, 1236808, ... ) == 0x0 00357 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 64, {status=0x0, info=1}, ) }, 3, 33, ... 64, {status=0x0, info=1}, ) == 0x0 00358 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00359 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00360 456 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 60, ... 68, ) == 0x0 00361 456 NtClose (60, ... ) == 0x0 00362 456 NtMapViewOfSection (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xaf0000), 0x0, 921600, ) == 0x0 00363 456 NtClose (68, ... ) == 0x0 00364 456 NtUnmapViewOfSection (-1, 0xaf0000, ... ) == 0x0 00365 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0 00366 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 68, ... 60, ) == 0x0 00367 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00368 456 NtOpenProcessToken (-1, 0x8, ... 72, ) == 0x0 00369 456 NtQueryInformationToken (72, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00370 456 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00371 456 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 76, ) }, ... 76, ) == 0x0 00372 456 NtQueryValueKey (76, (76, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (76, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00373 456 NtClose (76, ... ) == 0x0 00374 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00375 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 76, ) == 0x0 00376 456 NtQueryInformationToken (76, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00377 456 NtClose (76, ... ) == 0x0 00378 456 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00379 456 NtClose (72, ... ) == 0x0 00380 456 NtClose (68, ... ) == 0x0 00381 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0 00382 456 NtClose (60, ... ) == 0x0 00383 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00384 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00385 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00386 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00387 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00388 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00389 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00390 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00391 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00392 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00393 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00394 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00395 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00396 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00397 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00398 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00399 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00400 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00401 456 NtProtectVirtualMemory (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0 00402 456 NtProtectVirtualMemory (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0 00403 456 NtFlushInstructionCache (-1, 1905594368, 1952, ... ) == 0x0 00404 456 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1237992, ... ) , 42, 1237992, ... ) == 0x0 00405 456 NtQueryDefaultUILanguage (1236708, ... 00406 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00407 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482032, ) == 0x0 00408 456 NtQueryInformationToken (-2147482032, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00409 456 NtClose (-2147482032, ... ) == 0x0 00410 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 00411 456 NtOpenKey (0x80000000, {24, 0, 0x240, 0, 0, (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00412 456 NtOpenKey (0x80000000, {24, -2147482032, 0x640, 0, 0, (0x80000000, {24, -2147482032, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482044, ) }, ... -2147482044, ) == 0x0 00413 456 NtQueryValueKey (-2147482044, (-2147482044, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00414 456 NtClose (-2147482044, ... ) == 0x0 00415 456 NtClose (-2147482032, ... ) == 0x0 00405 456 NtQueryDefaultUILanguage ... ) == 0x0 00416 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00417 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1235560, ... ) }, 1235560, ... ) == 0x0 00418 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00419 456 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 60, ... 68, ) == 0x0 00420 456 NtClose (60, ... ) == 0x0 00421 456 NtMapViewOfSection (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xaf0000), 0x0, 4096, ) == 0x0 00422 456 NtClose (68, ... ) == 0x0 00423 456 NtUnmapViewOfSection (-1, 0xaf0000, ... ) == 0x0 00424 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1235200, ... ) }, 1235200, ... ) == 0x0 00425 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1235900, (0x80100080, {24, 0, 0x40, 0, 1235900, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 68, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 68, {status=0x0, info=1}, ) == 0x0 00426 456 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 68, ... 60, ) == 0x0 00427 456 NtClose (68, ... ) == 0x0 00428 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xaf0000), {0, 0}, 4096, ) == 0x0 00429 456 NtClose (60, ... ) == 0x0 00430 456 NtUnmapViewOfSection (-1, 0xaf0000, ... ) == 0x0 00431 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 60, {status=0x0, info=1}, ) }, 1, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00432 456 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 60, ... 68, ) == 0x0 00433 456 NtMapViewOfSection (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0xaf0000), 0x0, 4096, ) == 0x0 00434 456 NtQueryInformationFile (60, 1235520, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0 00435 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00436 456 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 1235600, 1, 96, 0} (24, {128, 156, new_msg, 0, 1235600, 1, 96, 0} "\210\6\36\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\36\1<\0\0\0D\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\36\1\0\0\0\0\0\0\0\0\220\341\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1554, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\36\1<\0\0\0D\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\36\1\0\0\0\0\0\0\0\0\220\341\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 448, 456, 1554, 0} (24, {128, 156, new_msg, 0, 1235600, 1, 96, 0} "\210\6\36\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\36\1<\0\0\0D\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\36\1\0\0\0\0\0\0\0\0\220\341\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1554, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\36\1<\0\0\0D\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\36\1\0\0\0\0\0\0\0\0\220\341\22\0\0\0\0\0" ) ) == 0x0 00437 456 NtClose (60, ... ) == 0x0 00438 456 NtClose (68, ... ) == 0x0 00439 456 NtUnmapViewOfSection (-1, 0xaf0000, ... ) == 0x0 00440 456 NtUnmapViewOfSection (-1, 0x12e190, ... ) == STATUS_NOT_MAPPED_VIEW 00441 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00442 456 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00443 456 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00444 456 NtUserSystemParametersInfo (104, 0, 1906151468, 0, ... ) == 0x1 00445 456 NtUserGetDC (0, ... ) == 0x1010054 00446 456 NtUserCallOneParam (16842836, 56, ... ) == 0x1 00447 456 NtUserSystemParametersInfo (38, 4, 1906153440, 0, ... ) == 0x1 00448 456 NtUserSystemParametersInfo (66, 12, 1238012, 0, ... ) == 0x1 00449 456 NtOpenProcessToken (-1, 0x8, ... 68, ) == 0x0 00450 456 NtAccessCheck (1328064, 68, 0x1, 1237416, 1237360, 56, 1237444, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00451 456 NtClose (68, ... ) == 0x0 00452 456 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 68, ) }, ... 68, ) == 0x0 00453 456 NtQueryValueKey (68, (68, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00454 456 NtClose (68, ... ) == 0x0 00455 456 NtUserSystemParametersInfo (41, 500, 1237512, 0, ... ) == 0x1 00456 456 NtOpenKey (0x1, {24, 56, 0x40, 0, 0, (0x1, {24, 56, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0 00457 456 NtQueryValueKey (68, (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 60, ) }, ... 60, ) == 0x0 00459 456 NtQueryValueKey (60, (60, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00460 456 NtClose (60, ... ) == 0x0 00461 456 NtClose (68, ... ) == 0x0 00462 456 NtUserSystemParametersInfo (102, 0, 1906153328, 0, ... ) == 0x1 00463 456 NtUserSystemParametersInfo (4130, 0, 1238036, 0, ... ) == 0x1 00464 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 68, ) }, ... 68, ) == 0x0 00465 456 NtEnumerateValueKey (68, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00466 456 NtClose (68, ... ) == 0x0 00467 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00468 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc03b 00469 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc03d 00470 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00471 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc03f 00472 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00473 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc041 00474 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00475 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc043 00476 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc045 00477 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00478 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc047 00479 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00480 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc049 00481 456 NtUserGetClassInfo (1905590272, 1237932, 1237884, 1237960, 0, ... ) == 0xc049 00482 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00483 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... 00484 456 NtAllocateVirtualMemory (-1, 6799360, 0, 4096, 4096, 32, ... 6799360, 4096, ) == 0x0 00483 456 NtUserRegisterClassExWOW ... ) == 0x810cc04b 00485 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00486 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc04d 00487 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00488 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc04f 00489 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc051 00490 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00491 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc053 00492 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00493 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc055 00494 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc057 00495 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00496 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc059 00497 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10013 00498 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc05b 00499 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00500 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc05d 00501 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00502 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc05f 00503 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00504 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc017 00505 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00506 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc019 00507 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10013 00508 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc018 00509 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00510 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc01a 00511 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00512 456 NtUserRegisterClassExWOW (1237768, 1237848, 1237832, 1237864, 0, 384, 0, ... ) == 0x810cc01c 00513 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00514 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc01e 00515 456 NtUserFindExistingCursorIcon (1237316, 1237332, 1237900, ... ) == 0x10011 00516 456 NtUserRegisterClassExWOW (1237828, 1237908, 1237892, 1237924, 0, 384, 0, ... ) == 0x810cc01b 00517 456 NtUserFindExistingCursorIcon (1237312, 1237328, 1237896, ... ) == 0x10011 00518 456 NtUserRegisterClassExWOW (1237824, 1237904, 1237888, 1237920, 0, 384, 0, ... ) == 0x810cc068 00519 456 NtUserFindExistingCursorIcon (1237320, 1237336, 1237904, ... ) == 0x10011 00520 456 NtUserRegisterClassExWOW (1237772, 1237852, 1237836, 1237868, 0, 384, 0, ... ) == 0x810cc06a 00521 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc03b 00522 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc03d 00523 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc03f 00524 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc041 00525 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc043 00526 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc045 00527 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc047 00528 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc049 00529 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc04b 00530 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc04d 00531 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc04f 00532 456 NtUserGetClassInfo (1999896576, 1240836, 1240788, 1240864, 0, ... ) == 0xc051 00533 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc053 00534 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc055 00535 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc059 00536 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc05b 00537 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc05d 00538 456 NtUserGetClassInfo (1999896576, 1240832, 1240784, 1240860, 0, ... ) == 0xc05f 00539 456 NtUserRegisterWindowMessage ( ("WOWLFChange", ... ) , ... ) == 0xc06b 00540 456 NtUserRegisterWindowMessage ( ("WOWDirChange", ... ) , ... ) == 0xc06c 00541 456 NtUserRegisterWindowMessage ( ("WOWCHOOSEFONT_GETLOGFONT", ... ) , ... ) == 0xc06d 00542 456 NtUserRegisterWindowMessage ( ("commdlg_LBSelChangedNotify", ... ) , ... ) == 0xc06e 00543 456 NtUserRegisterWindowMessage ( ("commdlg_ShareViolation", ... ) , ... ) == 0xc06f 00544 456 NtUserRegisterWindowMessage ( ("commdlg_FileNameOK", ... ) , ... ) == 0xc070 00545 456 NtUserRegisterWindowMessage ( ("commdlg_ColorOK", ... ) , ... ) == 0xc071 00546 456 NtUserRegisterWindowMessage ( ("commdlg_SetRGBColor", ... ) , ... ) == 0xc072 00547 456 NtUserRegisterWindowMessage ( ("commdlg_LBSelChangedNotify", ... ) , ... ) == 0xc06e 00548 456 NtUserRegisterWindowMessage ( ("commdlg_ShareViolation", ... ) , ... ) == 0xc06f 00549 456 NtUserRegisterWindowMessage ( ("commdlg_FileNameOK", ... ) , ... ) == 0xc070 00550 456 NtUserRegisterWindowMessage ( ("commdlg_ColorOK", ... ) , ... ) == 0xc071 00551 456 NtUserRegisterWindowMessage ( ("commdlg_SetRGBColor", ... ) , ... ) == 0xc072 00552 456 NtUserRegisterWindowMessage ( ("Shell IDList Array", ... ) , ... ) == 0xc073 00553 456 NtUserRegisterWindowMessage ( ("commdlg_help", ... ) , ... ) == 0xc074 00554 456 NtUserRegisterWindowMessage ( ("commdlg_help", ... ) , ... ) == 0xc074 00555 456 NtProtectVirtualMemory (-1, (0xa91000), 184730, 32, ... (0xa91000), 188416, 4, ) == 0x0 00556 456 NtProtectVirtualMemory (-1, (0xabf000), 9953, 2, ... (0xabf000), 12288, 4, ) == 0x0 00557 456 NtProtectVirtualMemory (-1, (0xac2000), 79520, 4, ... (0xac2000), 81920, 4, ) == 0x0 00558 456 NtProtectVirtualMemory (-1, (0xad6000), 9320, 2, ... (0xad6000), 12288, 4, ) == 0x0 00559 456 NtProtectVirtualMemory (-1, (0xad9000), 13662, 2, ... (0xad9000), 16384, 4, ) == 0x0 00560 456 NtFreeVirtualMemory (-1, (0x991000), 258048, 16384, ... (0x991000), 258048, ) == 0x0 00561 456 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00562 456 NtRaiseException (1239408, 1238668, 1, ... 00563 456 NtContinue (1237464, 0, ... 00564 456 NtOpenMutant (0x120001, {24, 52, 0x2, 0, 0, (0x120001, {24, 52, 0x2, 0, 0, "DBWinMutex"}, ... 68, ) }, ... 68, ) == 0x0 00565 456 NtWaitForSingleObject (68, 0, 0x0, ... ) == 0x0 00566 456 NtOpenSection (0x2, {24, 52, 0x0, 0, 0, (0x2, {24, 52, 0x0, 0, 0, "DBWIN_BUFFER"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00567 456 NtReleaseMutant (68, ... 0x0, ) == 0x0 00568 456 NtOpenFile (0x80100000, {24, 0, 0x40, 0, 0, (0x80100000, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.INI"}, 7, 96, ... ) }, 7, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00569 456 NtClose (0, ... ) == STATUS_INVALID_HANDLE 00570 456 NtOpenProcessToken (-1, 0x8, ... 60, ) == 0x0 00571 456 NtQueryInformationToken (60, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00572 456 NtClose (60, ... ) == 0x0 00573 456 NtOpenFile (0x80100000, {24, 0, 0x40, 0, 0, (0x80100000, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.INI"}, 7, 96, ... ) }, 7, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00574 456 NtClose (0, ... ) == STATUS_INVALID_HANDLE 00575 456 NtOpenProcessToken (-1, 0x8, ... 60, ) == 0x0 00576 456 NtQueryInformationToken (60, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00577 456 NtClose (60, ... ) == 0x0 00578 456 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 11599872, 1048576, ) == 0x0 00579 456 NtAllocateVirtualMemory (-1, 11599872, 0, 69640, 4096, 4, ... 11599872, 73728, ) == 0x0 00580 456 NtAllocateVirtualMemory (-1, 10031104, 0, 36864, 4096, 4, ... 10031104, 36864, ) == 0x0 00581 456 NtFreeVirtualMemory (-1, (0x991000), 36864, 16384, ... (0x991000), 36864, ) == 0x0 00582 456 NtAllocateVirtualMemory (-1, 11673600, 0, 69632, 4096, 4, ... 11673600, 69632, ) == 0x0 00583 456 NtAllocateVirtualMemory (-1, 11419648, 0, 4096, 4096, 4, ... 11419648, 4096, ) == 0x0 00584 456 NtAllocateVirtualMemory (-1, 11423744, 0, 4096, 4096, 4, ... 11423744, 4096, ) == 0x0 00585 456 NtAllocateVirtualMemory (-1, 11427840, 0, 4096, 4096, 4, ... 11427840, 4096, ) == 0x0 00586 456 NtFreeVirtualMemory (-1, (0xb21000), 61440, 16384, ... (0xb21000), 61440, ) == 0x0 00587 456 NtAllocateVirtualMemory (-1, 11743232, 0, 69632, 4096, 4, ... 11743232, 69632, ) == 0x0 00588 456 NtAllocateVirtualMemory (-1, 11812864, 0, 86016, 4096, 4, ... 11812864, 86016, ) == 0x0 00589 456 NtAllocateVirtualMemory (-1, 11898880, 0, 69632, 4096, 4, ... 11898880, 69632, ) == 0x0 00590 456 NtAllocateVirtualMemory (-1, 11968512, 0, 86016, 4096, 4, ... 11968512, 86016, ) == 0x0 00591 456 NtAllocateVirtualMemory (-1, 12054528, 0, 69632, 4096, 4, ... 12054528, 69632, ) == 0x0 00592 456 NtAllocateVirtualMemory (-1, 12124160, 0, 86016, 4096, 4, ... 12124160, 86016, ) == 0x0 00593 456 NtAllocateVirtualMemory (-1, 12210176, 0, 69632, 4096, 4, ... 12210176, 69632, ) == 0x0 00594 456 NtAllocateVirtualMemory (-1, 12279808, 0, 86016, 4096, 4, ... 12279808, 86016, ) == 0x0 00595 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1239984, (0x80100080, {24, 0, 0x40, 0, 1239984, "\??\u:\work\packed.exe"}, 0x0, 0, 1, 1, 96, 0, 0, ... 60, {status=0x0, info=1}, ) }, 0x0, 0, 1, 1, 96, 0, 0, ... 60, {status=0x0, info=1}, ) == 0x0 00596 456 NtSetInformationFile (60, 1240076, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00597 456 NtReadFile (60, 0, 0, 0, 4096, 0x0, 0, ... {status=0x0, info=4096}, (60, 0, 0, 0, 4096, 0x0, 0, ... {status=0x0, info=4096}, "MZ\220\0\3\0\0\0\4\0\0\0\377\377\0\0\270\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\253\231\3\0Tf\374\377\330\0\0\0\16\37\272\16\0\264\11\315!\270\1L\315!This program cannot be run in DOS mode.\15\15\12$\0\0\0\0\0\0\0(\27Cmlv->lv->lv->lv,>\353v->\257yp>kv->\14~`>mv->\27j!>nv->\357j#>uv->\204i'>\20v->\204i&>,v->Richlv->\0\0\0\0\0\0\0\0PE\0\0L\1\7\0\276Y`F\0\0\0\0\0\0\0\0\340\0\17\1\13\1SR\0\0\5\0\0@\4\0\0\0\0\0\13\241\14\0\0\320\10\0\0\320\16\0\0\0@\0\0\20\0\0\0\20\0\0\4\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\0\320\24\0\0\20\0\0\200n\11\0\2\0\0\0\0\0\20\0\0\20\0\0\0\0\20\0\0\20\0\0\0\0\0\0\20\0\0\0\0\0\0\0\0\0\0\0D`\17\0f\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\320\16\0\210\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0UPX0\0\0\0\0\0 \7\0\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 00598 456 NtAllocateVirtualMemory (-1, 12365824, 0, 278528, 4096, 4, ... 12365824, 278528, ) == 0x0 00599 456 NtSetInformationFile (60, 1240076, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00600 456 NtReadFile (60, 0, 0, 0, 274432, 0x0, 0, ... {status=0x0, info=274432}, (60, 0, 0, 0, 274432, 0x0, 0, ... {status=0x0, info=274432}, "U\213\354\203\354\14\213E\20P\350\322\265\3\0\203\304\4\211E\370\213M\370\211M\374\213U\14R\213E\374P\213M\10Q\350]\0\0\0\203\304\14\213U\14R\213E\10P\213M\374Q\350f\2\0\0\203\304\14\213U\14\213\2P\213M\374Q\213U\10R\350@\3\0\0\203\304\14\213E\20P\213M\14Q\213U\10R\213E\374P\350r\32\0\0\203\304\20\213M\374\211M\364\213U\364R\350V\265\3\0\203\304\4\260\1\213\345]\303U\213\354\203\354(\213E\10\211E\360\213M\14\211M\350\213U\20\213E\360\3\2\211E\370\213M\20\213\21\213E\350\215L\20\376\211M\364\306E\374\377\306E\354\1\213U\350\306\2\1\213E\350\203\300\1\211E\350\213M\360;M\370\17\203\201\1\0\0\213U\360\203\302\2;U\370\17\203\373\0\0\0\213E\3603\311\212\10\213U\374\201\342\377\0\0\0;\312\17\205\343\0\0\0\213E\3603\311\212H\1\213U\374\201\342\377\0\0\0;\312\17\205\312\0\0\0\213E\3603\311\212H\2\213U\374\201\342\377\0\0\0;\312\17\205\261\0\0\0\307E\340\3\0\0\0\213E\360\203\300\3\211E\344\213M\344;M\370s(\213U\3443\300\212\2\213M\374\201\341\377\0\0\0;\301u\24\213U\340\203\302\1\211U\340\213E\344\203\300\1\211E\344\353\320\203}\340\3r`\201}\340\1\1\0\0v\11\307E\330\1\1\0\0\353\6\213M\340\211M\330\213U\330\211U\334\213E\350\306\0\377\213M\350\203\301\1\211M\350\213U\334\203\352\3\213E\350\210\20\213M\350\203\301\1\211M\350\213U\340+U\334\211U\340\213E\350;E\364r\14\306E\354\0\213M\370\211M\360\353\2\353\232\213U\344+U\340\211U\360\353r\213E\3603\311\212\10\201\371\377\0\0\0u1\213U\350", ) , ) == 0x0 00601 456 NtFreeVirtualMemory (-1, (0xbc4000), 307200, 16384, ... (0xbc4000), 307200, ) == 0x0 00602 456 NtAllocateVirtualMemory (-1, 11669504, 0, 57344, 4096, 4, ... 11669504, 57344, ) == 0x0 00603 456 NtSetInformationFile (60, 1240076, 8, Position, ... {status=0x0, info=0}, ) == 0x0 00604 456 NtReadFile (60, 0, 0, 0, 53248, 0x0, 0, ... {status=0x0, info=53248}, (60, 0, 0, 0, 53248, 0x0, 0, ... {status=0x0, info=53248}, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 00605 456 NtFreeVirtualMemory (-1, (0xb21000), 57344, 16384, ... (0xb21000), 57344, ) == 0x0 00606 456 NtClose (60, ... ) == 0x0 00607 456 NtRaiseException (1239408, 1238668, 1, ... 00608 456 NtContinue (1237464, 0, ... 00609 456 NtWaitForSingleObject (68, 0, 0x0, ... ) == 0x0 00610 456 NtOpenSection (0x2, {24, 52, 0x0, 0, 0, (0x2, {24, 52, 0x0, 0, 0, "DBWIN_BUFFER"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00611 456 NtReleaseMutant (68, ... 0x0, ) == 0x0 00612 456 NtAllocateVirtualMemory (-1, 12337152, 0, 135168, 4096, 4, ... 12337152, 135168, ) == 0x0 00613 456 NtFreeVirtualMemory (-1, (0xbc4000), 135168, 16384, ... (0xbc4000), 135168, ) == 0x0 00614 456 NtAllocateVirtualMemory (-1, 12337152, 0, 135168, 4096, 4, ... 12337152, 135168, ) == 0x0 00615 456 NtFreeVirtualMemory (-1, (0xbc4000), 135168, 16384, ... (0xbc4000), 135168, ) == 0x0 00616 456 NtAllocateVirtualMemory (-1, 12337152, 0, 69632, 4096, 4, ... 12337152, 69632, ) == 0x0 00617 456 NtAllocateVirtualMemory (-1, 10031104, 0, 36864, 4096, 4, ... 10031104, 36864, ) == 0x0 00618 456 NtFreeVirtualMemory (-1, (0x991000), 36864, 16384, ... (0x991000), 36864, ) == 0x0 00619 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00620 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00621 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 60, ) }, ... 60, ) == 0x0 00622 456 NtOpenKey (0x20019, {24, 60, 0x40, 0, 0, (0x20019, {24, 60, 0x40, 0, 0, "ActiveComputerName"}, ... 72, ) }, ... 72, ) == 0x0 00623 456 NtQueryValueKey (72, (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 00624 456 NtClose (72, ... ) == 0x0 00625 456 NtClose (60, ... ) == 0x0 00626 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 60, {status=0x0, info=1}, ) }, 3, 16417, ... 60, {status=0x0, info=1}, ) == 0x0 00627 456 NtQueryInformationFile (60, 1238016, 528, Name, ... {status=0x0, info=6}, ) == 0x0 00628 456 NtQueryVolumeInformationFile (60, 1337928, 284, Volume, ... {status=0x0, info=18}, ) == 0x0 00629 456 NtQueryVolumeInformationFile (60, 1331704, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0 00630 456 NtClose (60, ... ) == 0x0 00631 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 60, ) }, ... 60, ) == 0x0 00632 456 NtOpenKey (0x20019, {24, 60, 0x40, 0, 0, (0x20019, {24, 60, 0x40, 0, 0, "ActiveComputerName"}, ... 72, ) }, ... 72, ) == 0x0 00633 456 NtQueryValueKey (72, (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (72, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 00634 456 NtClose (72, ... ) == 0x0 00635 456 NtClose (60, ... ) == 0x0 00636 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00637 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1236264, ... ) }, 1236264, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00638 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1236264, ... ) }, 1236264, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00639 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1236264, ... ) }, 1236264, ... ) == 0x0 00640 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00641 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00642 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00643 456 NtClose (60, ... ) == 0x0 00644 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0 00645 456 NtClose (72, ... ) == 0x0 00646 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00647 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00648 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00649 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1235460, ... ) }, 1235460, ... ) == 0x0 00650 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00651 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00652 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00653 456 NtClose (72, ... ) == 0x0 00654 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00655 456 NtClose (60, ... ) == 0x0 00656 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00657 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00658 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "inetmib1.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00659 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\inetmib1.dll"}, 1236264, ... ) }, 1236264, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00660 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "inetmib1.dll"}, 1236264, ... ) }, 1236264, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00661 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\inetmib1.dll"}, 1236264, ... ) }, 1236264, ... ) == 0x0 00662 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\inetmib1.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00663 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00664 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00665 456 NtClose (60, ... ) == 0x0 00666 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x666f0000), 0x0, 45056, ) == 0x0 00667 456 NtClose (72, ... ) == 0x0 00668 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "iphlpapi.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00669 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\iphlpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00670 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "iphlpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00671 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\iphlpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == 0x0 00672 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\iphlpapi.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00673 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00674 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00675 456 NtClose (72, ... ) == 0x0 00676 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76d60000), 0x0, 86016, ) == 0x0 00677 456 NtClose (60, ... ) == 0x0 00678 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "netman.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00679 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\netman.dll"}, 1234656, ... ) }, 1234656, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00680 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "netman.dll"}, 1234656, ... ) }, 1234656, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00681 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\netman.dll"}, 1234656, ... ) }, 1234656, ... ) == 0x0 00682 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\netman.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00683 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00684 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00685 456 NtClose (60, ... ) == 0x0 00686 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76de0000), 0x0, 155648, ) == 0x0 00687 456 NtClose (72, ... ) == 0x0 00688 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "MPRAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00689 456 NtAllocateVirtualMemory (-1, 1224704, 0, 4096, 4096, 260, ... 1224704, 4096, ) == 0x0 00690 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\MPRAPI.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00691 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "MPRAPI.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00692 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\MPRAPI.dll"}, 1233852, ... ) }, 1233852, ... ) == 0x0 00693 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\MPRAPI.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00694 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00695 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00696 456 NtClose (72, ... ) == 0x0 00697 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76d40000), 0x0, 90112, ) == 0x0 00698 456 NtClose (60, ... ) == 0x0 00699 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ACTIVEDS.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00700 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ACTIVEDS.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "ACTIVEDS.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00702 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ACTIVEDS.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00703 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ACTIVEDS.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00704 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00705 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00706 456 NtClose (60, ... ) == 0x0 00707 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76e40000), 0x0, 192512, ) == 0x0 00708 456 NtClose (72, ... ) == 0x0 00709 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "adsldpc.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00710 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\adsldpc.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00711 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "adsldpc.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00712 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\adsldpc.dll"}, 1232244, ... ) }, 1232244, ... ) == 0x0 00713 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\adsldpc.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00714 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00715 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00716 456 NtClose (72, ... ) == 0x0 00717 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76e10000), 0x0, 147456, ) == 0x0 00718 456 NtClose (60, ... ) == 0x0 00719 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "NETAPI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00720 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\NETAPI32.dll"}, 1231440, ... ) }, 1231440, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00721 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "NETAPI32.dll"}, 1231440, ... ) }, 1231440, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00722 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\NETAPI32.dll"}, 1231440, ... ) }, 1231440, ... ) == 0x0 00723 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\NETAPI32.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00724 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00725 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00726 456 NtClose (60, ... ) == 0x0 00727 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71c20000), 0x0, 323584, ) == 0x0 00728 456 NtClose (72, ... ) == 0x0 00729 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WLDAP32.dll"}, ... 72, ) }, ... 72, ) == 0x0 00730 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76f60000), 0x0, 180224, ) == 0x0 00731 456 NtClose (72, ... ) == 0x0 00732 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ATL.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00733 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ATL.DLL"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00734 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "ATL.DLL"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00735 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ATL.DLL"}, 1232244, ... ) }, 1232244, ... ) == 0x0 00736 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ATL.DLL"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00737 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00738 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00739 456 NtClose (72, ... ) == 0x0 00740 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76b20000), 0x0, 86016, ) == 0x0 00741 456 NtClose (60, ... ) == 0x0 00742 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "rtutils.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00743 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\rtutils.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00744 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "rtutils.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00745 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\rtutils.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00746 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\rtutils.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00747 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00748 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00749 456 NtClose (60, ... ) == 0x0 00750 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76e80000), 0x0, 53248, ) == 0x0 00751 456 NtClose (72, ... ) == 0x0 00752 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SAMLIB.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00753 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\SAMLIB.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00754 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "SAMLIB.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00755 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\SAMLIB.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00756 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\SAMLIB.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00757 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00758 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00759 456 NtClose (72, ... ) == 0x0 00760 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71bf0000), 0x0, 69632, ) == 0x0 00761 456 NtClose (60, ... ) == 0x0 00762 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SETUPAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00763 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\SETUPAPI.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00764 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "SETUPAPI.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00765 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\SETUPAPI.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00766 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\SETUPAPI.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00767 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00768 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00769 456 NtClose (60, ... ) == 0x0 00770 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76670000), 0x0, 933888, ) == 0x0 00771 456 NtClose (72, ... ) == 0x0 00772 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RASAPI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00773 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\RASAPI32.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00774 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "RASAPI32.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00775 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\RASAPI32.dll"}, 1233852, ... ) }, 1233852, ... ) == 0x0 00776 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\RASAPI32.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00777 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00778 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00779 456 NtClose (72, ... ) == 0x0 00780 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76ee0000), 0x0, 225280, ) == 0x0 00781 456 NtClose (60, ... ) == 0x0 00782 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "rasman.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00783 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\rasman.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00784 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "rasman.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00785 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\rasman.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00786 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\rasman.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00787 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00788 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00789 456 NtClose (60, ... ) == 0x0 00790 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76e90000), 0x0, 69632, ) == 0x0 00791 456 NtClose (72, ... ) == 0x0 00792 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "TAPI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00793 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\TAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00794 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "TAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00795 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\TAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00796 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\TAPI32.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00797 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00798 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00799 456 NtClose (72, ... ) == 0x0 00800 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76eb0000), 0x0, 172032, ) == 0x0 00801 456 NtClose (60, ... ) == 0x0 00802 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WINMM.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00803 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WINMM.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00804 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WINMM.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00805 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WINMM.dll"}, 1232244, ... ) }, 1232244, ... ) == 0x0 00806 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WINMM.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00807 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00808 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00809 456 NtClose (60, ... ) == 0x0 00810 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76b40000), 0x0, 180224, ) == 0x0 00811 456 NtClose (72, ... ) == 0x0 00812 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "Secur32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00813 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\Secur32.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00814 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "Secur32.dll"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00815 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\Secur32.dll"}, 1233852, ... ) }, 1233852, ... ) == 0x0 00816 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\Secur32.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00817 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00818 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00819 456 NtClose (72, ... ) == 0x0 00820 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76f90000), 0x0, 65536, ) == 0x0 00821 456 NtClose (60, ... ) == 0x0 00822 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WZCSvc.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00823 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WZCSvc.DLL"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00824 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WZCSvc.DLL"}, 1233852, ... ) }, 1233852, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00825 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WZCSvc.DLL"}, 1233852, ... ) }, 1233852, ... ) == 0x0 00826 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WZCSvc.DLL"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00827 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00828 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00829 456 NtClose (60, ... ) == 0x0 00830 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76da0000), 0x0, 196608, ) == 0x0 00831 456 NtClose (72, ... ) == 0x0 00832 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WMI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00833 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WMI.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00834 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WMI.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00835 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WMI.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00836 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WMI.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00837 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00838 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00839 456 NtClose (72, ... ) == 0x0 00840 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76d30000), 0x0, 16384, ) == 0x0 00841 456 NtClose (60, ... ) == 0x0 00842 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "DHCPCSVC.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00843 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\DHCPCSVC.DLL"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00844 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "DHCPCSVC.DLL"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00845 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\DHCPCSVC.DLL"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00846 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\DHCPCSVC.DLL"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00847 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00848 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00849 456 NtClose (60, ... ) == 0x0 00850 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76d80000), 0x0, 106496, ) == 0x0 00851 456 NtClose (72, ... ) == 0x0 00852 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "DNSAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00853 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\DNSAPI.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00854 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "DNSAPI.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00855 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\DNSAPI.dll"}, 1232244, ... ) }, 1232244, ... ) == 0x0 00856 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\DNSAPI.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00857 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00858 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00859 456 NtClose (72, ... ) == 0x0 00860 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76f20000), 0x0, 151552, ) == 0x0 00861 456 NtClose (60, ... ) == 0x0 00862 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "CRYPT32.dll"}, ... 60, ) }, ... 60, ) == 0x0 00863 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x762c0000), 0x0, 565248, ) == 0x0 00864 456 NtClose (60, ... ) == 0x0 00865 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "MSASN1.dll"}, ... 60, ) }, ... 60, ) == 0x0 00866 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x762a0000), 0x0, 61440, ) == 0x0 00867 456 NtClose (60, ... ) == 0x0 00868 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WTSAPI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00869 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WTSAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00870 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WTSAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00871 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WTSAPI32.dll"}, 1233048, ... ) }, 1233048, ... ) == 0x0 00872 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WTSAPI32.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00873 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00874 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00875 456 NtClose (60, ... ) == 0x0 00876 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76f50000), 0x0, 32768, ) == 0x0 00877 456 NtClose (72, ... ) == 0x0 00878 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WINSTA.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00879 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WINSTA.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00880 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WINSTA.dll"}, 1232244, ... ) }, 1232244, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00881 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WINSTA.dll"}, 1232244, ... ) }, 1232244, ... ) == 0x0 00882 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WINSTA.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00883 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00884 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00885 456 NtClose (72, ... ) == 0x0 00886 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76360000), 0x0, 61440, ) == 0x0 00887 456 NtClose (60, ... ) == 0x0 00888 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "snmpapi.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00889 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\snmpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00890 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "snmpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00891 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\snmpapi.dll"}, 1235460, ... ) }, 1235460, ... ) == 0x0 00892 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\snmpapi.dll"}, 5, 96, ... 60, {status=0x0, info=1}, ) }, 5, 96, ... 60, {status=0x0, info=1}, ) == 0x0 00893 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 60, ... 72, ) == 0x0 00894 456 NtQuerySection (72, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00895 456 NtClose (60, ... ) == 0x0 00896 456 NtMapViewOfSection (72, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71f60000), 0x0, 32768, ) == 0x0 00897 456 NtClose (72, ... ) == 0x0 00898 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WSOCK32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00899 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WSOCK32.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00900 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "WSOCK32.dll"}, 1235460, ... ) }, 1235460, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00901 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WSOCK32.dll"}, 1235460, ... ) }, 1235460, ... ) == 0x0 00902 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WSOCK32.dll"}, 5, 96, ... 72, {status=0x0, info=1}, ) }, 5, 96, ... 72, {status=0x0, info=1}, ) == 0x0 00903 456 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 72, ... 60, ) == 0x0 00904 456 NtQuerySection (60, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00905 456 NtClose (72, ... ) == 0x0 00906 456 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0 00907 456 NtClose (60, ... ) == 0x0 00908 456 NtAllocateVirtualMemory (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0 00909 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 60, ) == 0x0 00910 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\LDAP"}, ... 72, ) }, ... 72, ) == 0x0 00911 456 NtQueryValueKey (72, (72, "LdapClientIntegrity", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (72, "LdapClientIntegrity", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00912 456 NtClose (72, ... ) == 0x0 00913 456 NtQueryDefaultLocale (1, 1236136, ... ) == 0x0 00914 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00915 456 NtAllocateVirtualMemory (-1, 0, 0, 262144, 8192, 4, ... 12648448, 262144, ) == 0x0 00916 456 NtAllocateVirtualMemory (-1, 12648448, 0, 4096, 4096, 4, ... 12648448, 4096, ) == 0x0 00917 456 NtAllocateVirtualMemory (-1, 12652544, 0, 8192, 4096, 4, ... 12652544, 8192, ) == 0x0 00918 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00919 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00920 456 NtQueryDefaultLocale (1, 1236096, ... ) == 0x0 00921 456 NtQueryInformationProcess (-1, Wow64, 4, ... {process info, class 26, size 4}, 0x0, ) == 0x0 00922 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00923 456 NtQueryValueKey (72, (72, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (72, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00924 456 NtClose (72, ... ) == 0x0 00925 456 NtUserGetProcessWindowStation (... ) == 0x28 00926 456 NtUserGetObjectInformation (40, 1, 1235768, 12, 1235780, ... ) == 0x1 00927 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Control\Session Manager\WPA\PnP"}, ... 72, ) }, ... 72, ) == 0x0 00928 456 NtQueryValueKey (72, (72, "seed", Partial, 144, ... TitleIdx=0, Type=4, Data="\345\252r\363"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (72, "seed", Partial, 144, ... TitleIdx=0, Type=4, Data="\345\252r\363"}, 16, ) }, 16, ) == 0x0 00929 456 NtClose (72, ... ) == 0x0 00930 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00931 456 NtQueryValueKey (72, (72, "OsLoaderPath", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "OsLoaderPath", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0\0\0"}, 16, ) }, 16, ) == 0x0 00932 456 NtQueryValueKey (72, (72, "OsLoaderPath", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "OsLoaderPath", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0\0\0"}, 16, ) }, 16, ) == 0x0 00933 456 NtClose (72, ... ) == 0x0 00934 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00935 456 NtQueryValueKey (72, (72, "SystemPartition", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0D\0e\0v\0i\0c\0e\0\\0H\0a\0r\0d\0d\0i\0s\0k\0V\0o\0l\0u\0m\0e\01\0\0\0"}, 60, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "SystemPartition", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0D\0e\0v\0i\0c\0e\0\\0H\0a\0r\0d\0d\0i\0s\0k\0V\0o\0l\0u\0m\0e\01\0\0\0"}, 60, ) }, 60, ) == 0x0 00936 456 NtQueryValueKey (72, (72, "SystemPartition", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0D\0e\0v\0i\0c\0e\0\\0H\0a\0r\0d\0d\0i\0s\0k\0V\0o\0l\0u\0m\0e\01\0\0\0"}, 60, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "SystemPartition", Partial, 144, ... TitleIdx=0, Type=1, Data="\\0D\0e\0v\0i\0c\0e\0\\0H\0a\0r\0d\0d\0i\0s\0k\0V\0o\0l\0u\0m\0e\01\0\0\0"}, 60, ) }, 60, ) == 0x0 00937 456 NtClose (72, ... ) == 0x0 00938 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00939 456 NtQueryValueKey (72, (72, "SourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "SourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) }, 20, ) == 0x0 00940 456 NtQueryValueKey (72, (72, "SourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "SourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) }, 20, ) == 0x0 00941 456 NtClose (72, ... ) == 0x0 00942 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00943 456 NtQueryValueKey (72, (72, "ServicePackSourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "ServicePackSourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) }, 20, ) == 0x0 00944 456 NtQueryValueKey (72, (72, "ServicePackSourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "ServicePackSourcePath", Partial, 144, ... TitleIdx=0, Type=1, Data="D\0:\0\\0\0\0"}, 20, ) }, 20, ) == 0x0 00945 456 NtClose (72, ... ) == 0x0 00946 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Setup"}, ... 72, ) }, ... 72, ) == 0x0 00947 456 NtQueryValueKey (72, (72, "DriverCachePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0D\0r\0i\0v\0e\0r\0 \0C\0a\0c\0h\0e\0\0\0"}, 64, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (72, "DriverCachePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0D\0r\0i\0v\0e\0r\0 \0C\0a\0c\0h\0e\0\0\0"}, 64, ) }, 64, ) == 0x0 00948 456 NtQueryValueKey (72, (72, "DriverCachePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0D\0r\0i\0v\0e\0r\0 \0C\0a\0c\0h\0e\0\0\0"}, 64, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (72, "DriverCachePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0D\0r\0i\0v\0e\0r\0 \0C\0a\0c\0h\0e\0\0\0"}, 64, ) }, 64, ) == 0x0 00949 456 NtClose (72, ... ) == 0x0 00950 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion"}, ... 72, ) }, ... 72, ) == 0x0 00951 456 NtQueryValueKey (72, (72, "DevicePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0i\0n\0f\0\0\0"}, 46, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (72, "DevicePath", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0i\0n\0f\0\0\0"}, 46, ) }, 46, ) == 0x0 00952 456 NtClose (72, ... ) == 0x0 00953 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 72, ) == 0x0 00954 456 NtCreateMutant (0x1f0001, 0x0, 0, ... 76, ) == 0x0 00955 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 80, ) == 0x0 00956 456 NtCreateMutant (0x1f0001, 0x0, 0, ... 84, ) == 0x0 00957 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 88, ) == 0x0 00958 456 NtCreateMutant (0x1f0001, 0x0, 0, ... 92, ) == 0x0 00959 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Setup"}, ... 96, ) }, ... 96, ) == 0x0 00960 456 NtQueryValueKey (96, (96, "LogLevel", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00961 456 NtQueryValueKey (96, (96, "LogPath", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00962 456 NtOpenKey (0x1, {24, 96, 0x40, 0, 0, (0x1, {24, 96, 0x40, 0, 0, "AppLogLevels"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00963 456 NtClose (96, ... ) == 0x0 00964 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\"}, 1235688, ... ) }, 1235688, ... ) == 0x0 00965 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName\ActiveComputerName"}, ... 96, ) }, ... 96, ) == 0x0 00966 456 NtQueryValueKey (96, (96, "ComputerName", Full, 128, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 128, ... TitleIdx=0, Type=1, Name= (96, "ComputerName", Full, 128, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (96, "ComputerName", Full, 128, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 00967 456 NtClose (96, ... ) == 0x0 00968 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"}, ... 96, ) }, ... 96, ) == 0x0 00969 456 NtQueryValueKey (96, (96, "Hostname", Full, 128, ... TitleIdx=0, Type=1, Name="Hostname", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 52, ) , Full, 128, ... TitleIdx=0, Type=1, Name= (96, "Hostname", Full, 128, ... TitleIdx=0, Type=1, Name="Hostname", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 52, ) , Data= (96, "Hostname", Full, 128, ... TitleIdx=0, Type=1, Name="Hostname", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 52, ) }, 52, ) == 0x0 00970 456 NtClose (96, ... ) == 0x0 00971 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\System\DNSclient"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00972 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters"}, ... 96, ) }, ... 96, ) == 0x0 00973 456 NtQueryValueKey (96, (96, "Domain", Full, 128, ... TitleIdx=0, Type=1, Name="Domain", Data="\0\0"}, 34, ) , Full, 128, ... TitleIdx=0, Type=1, Name= (96, "Domain", Full, 128, ... TitleIdx=0, Type=1, Name="Domain", Data="\0\0"}, 34, ) , Data= (96, "Domain", Full, 128, ... TitleIdx=0, Type=1, Name="Domain", Data="\0\0"}, 34, ) }, 34, ) == 0x0 00974 456 NtClose (96, ... ) == 0x0 00975 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 96, ) == 0x0 00976 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 100, ) == 0x0 00977 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 104, ) == 0x0 00978 456 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\DRIVERS32"}, ... 108, ) }, ... 108, ) == 0x0 00979 456 NtQueryValueKey (108, (108, "wave", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00980 456 NtQueryValueKey (108, (108, "wave1", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00981 456 NtQueryValueKey (108, (108, "wave2", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00982 456 NtQueryValueKey (108, (108, "wave3", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00983 456 NtQueryValueKey (108, (108, "wave4", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00984 456 NtQueryValueKey (108, (108, "wave5", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00985 456 NtQueryValueKey (108, (108, "wave6", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00986 456 NtQueryValueKey (108, (108, "wave7", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00987 456 NtQueryValueKey (108, (108, "wave8", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00988 456 NtQueryValueKey (108, (108, "wave9", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00989 456 NtQueryValueKey (108, (108, "midi", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00990 456 NtQueryValueKey (108, (108, "midi1", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00991 456 NtQueryValueKey (108, (108, "midi2", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00992 456 NtQueryValueKey (108, (108, "midi3", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00993 456 NtQueryValueKey (108, (108, "midi4", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00994 456 NtQueryValueKey (108, (108, "midi5", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00995 456 NtQueryValueKey (108, (108, "midi6", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00996 456 NtQueryValueKey (108, (108, "midi7", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00997 456 NtQueryValueKey (108, (108, "midi8", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00998 456 NtQueryValueKey (108, (108, "midi9", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00999 456 NtQueryTimerResolution (... 156250, 10000, 156250, ) == 0x0 01000 456 NtQueryValueKey (108, (108, "aux", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01001 456 NtQueryValueKey (108, (108, "aux1", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01002 456 NtQueryValueKey (108, (108, "aux2", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01003 456 NtQueryValueKey (108, (108, "aux3", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01004 456 NtQueryValueKey (108, (108, "aux4", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01005 456 NtQueryValueKey (108, (108, "aux5", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01006 456 NtQueryValueKey (108, (108, "aux6", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01007 456 NtQueryValueKey (108, (108, "aux7", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01008 456 NtQueryValueKey (108, (108, "aux8", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01009 456 NtQueryValueKey (108, (108, "aux9", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01010 456 NtUserRegisterWindowMessage ( ("MSJSTICK_VJOYD_MSGSTR", ... ) , ... ) == 0xc07c 01011 456 NtOpenKey (0xf003f, {24, 28, 0x40, 0, 0, (0xf003f, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm"}, ... 112, ) }, ... 112, ) == 0x0 01012 456 NtQueryValueKey (112, (112, "wheel", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (112, "wheel", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 01013 456 NtClose (112, ... ) == 0x0 01014 456 NtCreateEvent (0x1f0003, {24, 52, 0x80, 0, 0, (0x1f0003, {24, 52, 0x80, 0, 0, "DINPUTWINMM"}, 0, 0, ... ) }, 0, 0, ... ) == STATUS_ACCESS_DENIED 01015 456 NtQueryValueKey (108, (108, "mixer", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01016 456 NtQueryValueKey (108, (108, "mixer1", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01017 456 NtQueryValueKey (108, (108, "mixer2", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01018 456 NtQueryValueKey (108, (108, "mixer3", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01019 456 NtQueryValueKey (108, (108, "mixer4", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01020 456 NtQueryValueKey (108, (108, "mixer5", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01021 456 NtQueryValueKey (108, (108, "mixer6", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01022 456 NtQueryValueKey (108, (108, "mixer7", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01023 456 NtQueryValueKey (108, (108, "mixer8", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01024 456 NtQueryValueKey (108, (108, "mixer9", Partial, 536, ... ) , Partial, 536, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01025 456 NtQueryDefaultUILanguage (1234656, ... 01026 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 01027 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482032, ) == 0x0 01028 456 NtQueryInformationToken (-2147482032, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 01029 456 NtClose (-2147482032, ... ) == 0x0 01030 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 01031 456 NtOpenKey (0x80000000, {24, 0, 0x240, 0, 0, (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01032 456 NtOpenKey (0x80000000, {24, -2147482032, 0x640, 0, 0, (0x80000000, {24, -2147482032, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482044, ) }, ... -2147482044, ) == 0x0 01033 456 NtQueryValueKey (-2147482044, (-2147482044, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01034 456 NtClose (-2147482044, ... ) == 0x0 01035 456 NtClose (-2147482032, ... ) == 0x0 01025 456 NtQueryDefaultUILanguage ... ) == 0x0 01036 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01037 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\TAPI32.dll"}, 1, 96, ... 112, {status=0x0, info=1}, ) }, 1, 96, ... 112, {status=0x0, info=1}, ) == 0x0 01038 456 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 112, ... 116, ) == 0x0 01039 456 NtMapViewOfSection (116, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0xc50000), 0x0, 163840, ) == 0x0 01040 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\TAPI32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01041 456 NtQueryDefaultLocale (1, 1232692, ... ) == 0x0 01042 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\TAPI32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01043 456 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 1233548, 1, 96, 0} (24, {128, 156, new_msg, 0, 1233548, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\325\22\0\1\0\0\0\0\0\11\4\1\1\1\0<\0@\0\250\6\36\1p\0\0\0\377\377\377\377\0\0\0\0\360Z\307\0\0\0\0\0\251\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\214\331\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1555, 0} " S\26\0\33\0\1\0\0\0\0\0\1\325\22\0\1\0\0\0\0\0\11\4\1\1\1\0<\0@\0\250\6\36\1p\0\0\0\377\377\377\377\0\0\0\0\360Z\307\0\0\0\0\0\251\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\214\331\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 448, 456, 1555, 0} (24, {128, 156, new_msg, 0, 1233548, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\325\22\0\1\0\0\0\0\0\11\4\1\1\1\0<\0@\0\250\6\36\1p\0\0\0\377\377\377\377\0\0\0\0\360Z\307\0\0\0\0\0\251\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\214\331\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1555, 0} " S\26\0\33\0\1\0\0\0\0\0\1\325\22\0\1\0\0\0\0\0\11\4\1\1\1\0<\0@\0\250\6\36\1p\0\0\0\377\377\377\377\0\0\0\0\360Z\307\0\0\0\0\0\251\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\0\214\331\22\0\0\0\0\0" ) ) == 0x0 01044 456 NtClose (112, ... ) == 0x0 01045 456 NtClose (116, ... ) == 0x0 01046 456 NtUnmapViewOfSection (-1, 0xc50000, ... ) == 0x0 01047 456 NtUnmapViewOfSection (-1, 0x12d98c, ... ) == STATUS_NOT_MAPPED_VIEW 01048 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01049 456 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01050 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01051 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01052 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1231776, ... ) }, 1231776, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01053 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01054 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01055 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01056 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1232368, ... ) }, 1232368, ... ) == 0x0 01057 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 116, {status=0x0, info=1}, ) }, 3, 33, ... 116, {status=0x0, info=1}, ) == 0x0 01058 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 01059 456 NtAllocateVirtualMemory (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0 01060 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Telephony"}, ... 112, ) }, ... 112, ) == 0x0 01061 456 NtQueryValueKey (112, (112, "Tapi32MaxNumRequestRetries", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01062 456 NtQueryValueKey (112, (112, "Tapi32RequestRetryTimeout", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01063 456 NtClose (112, ... ) == 0x0 01064 456 NtCreateMutant (0x1f0001, 0x0, 0, ... 112, ) == 0x0 01065 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 1343280, 0, (0x1f0001, {24, 52, 0x80, 1343280, 0, "RasPbFile"}, 0, ... ) }, 0, ... ) == STATUS_ACCESS_DENIED 01066 456 NtOpenMutant (0x100000, {24, 52, 0x0, 0, 0, (0x100000, {24, 52, 0x0, 0, 0, "RasPbFile"}, ... 120, ) }, ... 120, ) == 0x0 01067 456 NtCreateEvent (0x1f0003, 0x0, 0, 1, ... 124, ) == 0x0 01068 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 128, ) == 0x0 01069 456 NtCreateEvent (0x1f0003, 0x0, 0, 1, ... 132, ) == 0x0 01070 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 136, ) == 0x0 01071 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 140, ) == 0x0 01072 456 NtCreateKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Tcpip\Parameters"}, 0, "Class", 0, ... 144, 2, ) }, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Tcpip\Parameters"}, 0, "Class", 0, ... 144, 2, ) , 0, ... 144, 2, ) == 0x0 01073 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\DnsCache\Parameters"}, ... 148, ) }, ... 148, ) == 0x0 01074 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Policies\Microsoft\Windows NT\DnsClient"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01075 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\DNS"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01076 456 NtQueryValueKey (148, (148, "QueryAdapterName", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01077 456 NtQueryValueKey (144, (144, "DisableAdapterDomainName", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01078 456 NtQueryValueKey (148, (148, "UseDomainNameDevolution", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01079 456 NtQueryValueKey (144, (144, "UseDomainNameDevolution", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (144, "UseDomainNameDevolution", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 01080 456 NtQueryValueKey (148, (148, "PrioritizeRecordData", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01081 456 NtQueryValueKey (144, (144, "PrioritizeRecordData", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01082 456 NtQueryValueKey (148, (148, "AllowUnqualifiedQuery", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01083 456 NtQueryValueKey (144, (144, "AllowUnqualifiedQuery", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01084 456 NtQueryValueKey (148, (148, "AppendToMultiLabelName", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01085 456 NtQueryValueKey (148, (148, "ScreenBadTlds", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01086 456 NtQueryValueKey (148, (148, "ScreenUnreachableServers", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01087 456 NtQueryValueKey (148, (148, "FilterClusterIp", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01088 456 NtQueryValueKey (148, (148, "WaitForNameErrorOnAll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01089 456 NtQueryValueKey (148, (148, "UseEdns", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01090 456 NtQueryValueKey (148, (148, "RegistrationEnabled", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01091 456 NtQueryValueKey (144, (144, "DisableDynamicUpdate", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01092 456 NtQueryValueKey (148, (148, "RegisterPrimaryName", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01093 456 NtQueryValueKey (148, (148, "RegisterAdapterName", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01094 456 NtQueryValueKey (144, (144, "EnableAdapterDomainNameRegistration", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01095 456 NtQueryValueKey (148, (148, "RegisterReverseLookup", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01096 456 NtQueryValueKey (144, (144, "DisableReverseAddressRegistrations", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01097 456 NtQueryValueKey (148, (148, "RegisterWanAdapters", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01098 456 NtQueryValueKey (144, (144, "DisableWanDynamicUpdate", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01099 456 NtQueryValueKey (148, (148, "RegistrationOverwritesInConflict", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01100 456 NtQueryValueKey (144, (144, "DisableReplaceAddressesInConflicts", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01101 456 NtQueryValueKey (148, (148, "RegistrationTtl", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01102 456 NtQueryValueKey (144, (144, "DefaultRegistrationTTL", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01103 456 NtQueryValueKey (148, (148, "RegistrationRefreshInterval", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01104 456 NtQueryValueKey (144, (144, "DefaultRegistrationRefreshInterval", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01105 456 NtQueryValueKey (148, (148, "RegistrationMaxAddressCount", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01106 456 NtQueryValueKey (144, (144, "MaxNumberOfAddressesToRegister", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01107 456 NtQueryValueKey (148, (148, "UpdateSecurityLevel", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01108 456 NtQueryValueKey (144, (144, "UpdateSecurityLevel", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01109 456 NtQueryValueKey (148, (148, "UpdateZoneExcludeFile", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01110 456 NtQueryValueKey (148, (148, "UpdateTopLevelDomainZones", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01111 456 NtQueryValueKey (148, (148, "DnsTest", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01112 456 NtQueryValueKey (148, (148, "MaxCacheSize", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01113 456 NtQueryValueKey (148, (148, "MaxCacheTtl", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01114 456 NtQueryValueKey (148, (148, "MaxNegativeCacheTtl", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01115 456 NtQueryValueKey (148, (148, "AdapterTimeoutLimit", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01116 456 NtQueryValueKey (148, (148, "ServerPriorityTimeLimit", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01117 456 NtQueryValueKey (148, (148, "MaxCachedSockets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01118 456 NtQueryValueKey (148, (148, "UseMulticast", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01119 456 NtQueryValueKey (148, (148, "MulticastOnNameError", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01120 456 NtQueryValueKey (148, (148, "UseDotLocalDomain", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01121 456 NtQueryValueKey (148, (148, "ListenOnMulticast", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01122 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "System\Setup"}, ... 152, ) }, ... 152, ) == 0x0 01123 456 NtQueryValueKey (152, (152, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (152, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01124 456 NtClose (152, ... ) == 0x0 01125 456 NtClose (144, ... ) == 0x0 01126 456 NtClose (148, ... ) == 0x0 01127 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Tcpip\Parameters"}, ... 148, ) }, ... 148, ) == 0x0 01128 456 NtQueryValueKey (148, (148, "DnsQueryTimeouts", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01129 456 NtQueryValueKey (148, (148, "DnsQuickQueryTimeouts", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01130 456 NtQueryValueKey (148, (148, "DnsMulticastQueryTimeouts", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01131 456 NtClose (148, ... ) == 0x0 01132 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 148, ) == 0x0 01133 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Services\crypt32\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01134 456 NtAllocateVirtualMemory (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0 01135 456 NtAllocateVirtualMemory (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0 01136 456 NtAllocateVirtualMemory (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0 01137 456 NtCreateEvent (0x1f0003, {24, 52, 0x80, 1236396, 0, (0x1f0003, {24, 52, 0x80, 1236396, 0, "Global\crypt32LogoffEvent"}, 0, 0, ... ) }, 0, 0, ... ) == STATUS_ACCESS_DENIED 01138 456 NtOpenEvent (0x100000, {24, 52, 0x0, 0, 0, (0x100000, {24, 52, 0x0, 0, 0, "Global\crypt32LogoffEvent"}, ... 144, ) }, ... 144, ) == 0x0 01139 456 NtAllocateVirtualMemory (-1, 1359872, 0, 4096, 4096, 4, ... 1359872, 4096, ) == 0x0 01140 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 152, ) == 0x0 01141 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 156, ) == 0x0 01142 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 01143 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12910592, 65536, ) == 0x0 01144 456 NtAllocateVirtualMemory (-1, 12910592, 0, 4096, 4096, 4, ... 12910592, 4096, ) == 0x0 01145 456 NtAllocateVirtualMemory (-1, 12914688, 0, 8192, 4096, 4, ... 12914688, 8192, ) == 0x0 01146 456 NtCreateFile (0x20000000, {24, 0, 0x40, 0, 0, (0x20000000, {24, 0, 0x40, 0, 0, "\Device\Tcp"}, 0x0, 128, 3, 3, 0, 0, 0, ... 160, {status=0x0, info=0}, ) }, 0x0, 128, 3, 3, 0, 0, 0, ... 160, {status=0x0, info=0}, ) == 0x0 01147 456 NtCreateFile (0x40000000, {24, 0, 0x40, 0, 0, (0x40000000, {24, 0, 0x40, 0, 0, "\Device\Tcp"}, 0x0, 128, 3, 3, 0, 0, 0, ... 164, {status=0x0, info=0}, ) }, 0x0, 128, 3, 3, 0, 0, 0, ... 164, {status=0x0, info=0}, ) == 0x0 01148 456 NtCreateFile (0x20000000, {24, 0, 0x40, 0, 0, (0x20000000, {24, 0, 0x40, 0, 0, "\Device\Ip"}, 0x0, 128, 3, 3, 0, 0, 0, ... 168, {status=0x0, info=0}, ) }, 0x0, 128, 3, 3, 0, 0, 0, ... 168, {status=0x0, info=0}, ) == 0x0 01149 456 NtCreateFile (0x100003, {24, 0, 0x40, 0, 0, (0x100003, {24, 0, 0x40, 0, 0, "\Device\Ip"}, 0x0, 128, 3, 3, 0, 0, 0, ... 172, {status=0x0, info=0}, ) }, 0x0, 128, 3, 3, 0, 0, 0, ... 172, {status=0x0, info=0}, ) == 0x0 01150 456 NtCreateFile (0x20100080, {24, 0, 0x40, 0, 1236220, (0x20100080, {24, 0, 0x40, 0, 1236220, "\??\Ip"}, 0x0, 128, 3, 1, 64, 0, 0, ... 176, {status=0x0, info=0}, ) }, 0x0, 128, 3, 1, 64, 0, 0, ... 176, {status=0x0, info=0}, ) == 0x0 01151 456 NtAllocateVirtualMemory (-1, 12922880, 0, 36864, 4096, 4, ... 12922880, 36864, ) == 0x0 01152 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01153 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , 36, 32768, ... {status=0x0, info=56}, (160, 180, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , ) == 0x0 01154 456 NtClose (180, ... ) == 0x0 01155 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01156 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , 36, 348, ... {status=0x0, info=118}, (160, 180, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , ) == 0x0 01157 456 NtClose (180, ... ) == 0x0 01158 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01159 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , 36, 348, ... {status=0x0, info=158}, (160, 180, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , ) == 0x0 01160 456 NtClose (180, ... ) == 0x0 01161 456 NtCreateFile (0x20000000, {24, 0, 0x40, 0, 0, (0x20000000, {24, 0, 0x40, 0, 0, "\Device\Tcp6"}, 0x0, 128, 3, 3, 0, 0, 0, ... ) }, 0x0, 128, 3, 3, 0, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01162 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01163 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , 36, 32768, ... {status=0x0, info=56}, (160, 180, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , ) == 0x0 01164 456 NtClose (180, ... ) == 0x0 01165 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01166 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\200\2\0\0\0\0\0\0\0\1\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 4, ... {status=0x0, info=4}, "\200\2\0\0", ) , 36, 4, ... {status=0x0, info=4}, (160, 180, 0x0, 0x0, 0x120003, "\200\2\0\0\0\0\0\0\0\1\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 4, ... {status=0x0, info=4}, "\200\2\0\0", ) , ) == 0x0 01167 456 NtClose (180, ... ) == 0x0 01168 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 180, ) == 0x0 01169 456 NtDeviceIoControlFile (160, 180, 0x0, 0x0, 0x120003, (160, 180, 0x0, 0x0, 0x120003, "\200\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 8, ... {status=0x0, info=8}, "\1\0\0\0\3\0\1\0", ) , 36, 8, ... {status=0x0, info=8}, (160, 180, 0x0, 0x0, 0x120003, "\200\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 8, ... {status=0x0, info=8}, "\1\0\0\0\3\0\1\0", ) , ) == 0x0 01170 456 NtClose (180, ... ) == 0x0 01171 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01172 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01173 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01174 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01175 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01176 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01177 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01178 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01179 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01180 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01181 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01182 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01183 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01184 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01185 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01186 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01187 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01188 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01189 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01190 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01191 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01192 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01193 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01194 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01195 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01196 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01197 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01198 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01199 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01200 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01201 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01202 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01203 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01204 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01205 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01206 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01207 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01208 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01209 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01210 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01211 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01212 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01213 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01214 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01215 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01216 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01217 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01218 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01219 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01220 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01221 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01222 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01223 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01224 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01225 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01226 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01227 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01228 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01229 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01230 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01231 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01232 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01233 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01234 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01235 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01236 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01237 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01238 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01239 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01240 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01241 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01242 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01243 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01244 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01245 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01246 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01247 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01248 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01249 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01250 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01251 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01252 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01253 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01254 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01255 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01256 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01257 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01258 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01259 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01260 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01261 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01262 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01263 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01264 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01265 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01266 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01267 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01268 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01269 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01270 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01271 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01272 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01273 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01274 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01275 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01276 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01277 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01278 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01279 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01280 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01281 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01282 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01283 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01284 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01285 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01286 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01287 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01288 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01289 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01290 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01291 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01292 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x20000,}, 28, ) == 0x0 01293 456 NtAllocateVirtualMemory (-1, 12976128, 0, 1, 4096, 4, ... 12976128, 4096, ) == 0x0 01294 456 NtQueryVirtualMemory (-1, 0xc60000, Basic, 28, ... {BaseAddress=0xc60000,AllocationBase=0xc60000,AllocationProtect=0x4,RegionSize=0x1000,State=0x1000,Protect=0x4,Type=0x20000,}, 28, ) == 0x0 01295 456 NtFreeVirtualMemory (-1, (0xc60000), 0, 32768, ... (0xc60000), 65536, ) == 0x0 01296 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Services\Tcpip\Linkage"}, ... 180, ) }, ... 180, ) == 0x0 01297 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\"}, ... 184, ) }, ... 184, ) == 0x0 01298 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces"}, ... 188, ) }, ... 188, ) == 0x0 01299 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Services\NetBT\Parameters"}, ... 192, ) }, ... 192, ) == 0x0 01300 456 NtQueryDefaultLocale (1, 1236156, ... ) == 0x0 01301 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 01302 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 12976128, 65536, ) == 0x0 01303 456 NtAllocateVirtualMemory (-1, 12976128, 0, 4096, 4096, 4, ... 12976128, 4096, ) == 0x0 01304 456 NtAllocateVirtualMemory (-1, 12980224, 0, 8192, 4096, 4, ... 12980224, 8192, ) == 0x0 01305 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 196, ) == 0x0 01306 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 200, ) == 0x0 01307 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 204, ) == 0x0 01308 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 208, ) == 0x0 01309 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 212, ) == 0x0 01310 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 216, ) == 0x0 01311 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 220, ) == 0x0 01312 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 224, ) == 0x0 01313 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 228, ) == 0x0 01314 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 232, ) == 0x0 01315 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 236, ) == 0x0 01316 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 240, ) == 0x0 01317 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 244, ) == 0x0 01318 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 248, ) == 0x0 01319 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 252, ) == 0x0 01320 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 256, ) == 0x0 01321 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 260, ) == 0x0 01322 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 264, ) == 0x0 01323 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 268, ) == 0x0 01324 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 272, ) == 0x0 01325 456 NtOpenKey (0x2000000, {24, 28, 0x40, 0, 0, (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 276, ) }, ... 276, ) == 0x0 01326 456 NtQueryValueKey (276, (276, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (276, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0 01327 456 NtQueryValueKey (276, (276, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (276, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0 01328 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 280, ) == 0x0 01329 456 NtOpenKey (0x2000000, {24, 276, 0x40, 0, 0, (0x2000000, {24, 276, 0x40, 0, 0, "Protocol_Catalog9"}, ... 284, ) }, ... 284, ) == 0x0 01330 456 NtQueryValueKey (284, (284, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (284, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0 01331 456 NtNotifyChangeKey (284, 280, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103 01332 456 NtQueryValueKey (284, (284, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (284, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0 01333 456 NtOpenKey (0x2000000, {24, 284, 0x40, 0, 0, (0x2000000, {24, 284, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01334 456 NtQueryValueKey (284, (284, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (284, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0 01335 456 NtQueryValueKey (284, (284, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (284, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0 01336 456 NtOpenKey (0x2000000, {24, 284, 0x40, 0, 0, (0x2000000, {24, 284, 0x40, 0, 0, "Catalog_Entries"}, ... 288, ) }, ... 288, ) == 0x0 01337 456 NtAllocateVirtualMemory (-1, 1363968, 0, 4096, 4096, 4, ... 1363968, 4096, ) == 0x0 01338 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000001"}, ... 292, ) }, ... 292, ) == 0x0 01339 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01340 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01341 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0A\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0A\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0A\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0>\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0?\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0@\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0A\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01342 456 NtClose (292, ... ) == 0x0 01343 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000002"}, ... 292, ) }, ... 292, ) == 0x0 01344 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01345 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01346 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0F\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0F\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0F\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0C\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0D\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0E\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0F\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01347 456 NtClose (292, ... ) == 0x0 01348 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000003"}, ... 292, ) }, ... 292, ) == 0x0 01349 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01350 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01351 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0K\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0K\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0K\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0H\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0I\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0J\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0K\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01352 456 NtClose (292, ... ) == 0x0 01353 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000004"}, ... 292, ) }, ... 292, ) == 0x0 01354 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01355 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01356 456 NtAllocateVirtualMemory (-1, 1368064, 0, 4096, 4096, 4, ... 1368064, 4096, ) == 0x0 01357 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0Q\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0Q\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0Q\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0N\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0O\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0P\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0Q\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01358 456 NtClose (292, ... ) == 0x0 01359 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000005"}, ... 292, ) }, ... 292, ) == 0x0 01360 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01361 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01362 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0V\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0V\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0V\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0S\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0T\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0U\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0V\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01363 456 NtClose (292, ... ) == 0x0 01364 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000006"}, ... 292, ) }, ... 292, ) == 0x0 01365 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01366 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01367 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0[\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0[\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0[\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0X\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0Y\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0Z\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0[\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01368 456 NtClose (292, ... ) == 0x0 01369 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000007"}, ... 292, ) }, ... 292, ) == 0x0 01370 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01371 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01372 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0`\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0`\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0`\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0]\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0^\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0_\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0`\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01373 456 NtClose (292, ... ) == 0x0 01374 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000008"}, ... 292, ) }, ... 292, ) == 0x0 01375 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01376 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01377 456 NtAllocateVirtualMemory (-1, 1372160, 0, 4096, 4096, 4, ... 1372160, 4096, ) == 0x0 01378 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0f\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0f\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0f\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0c\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0d\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0e\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0f\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01379 456 NtClose (292, ... ) == 0x0 01380 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000009"}, ... 292, ) }, ... 292, ) == 0x0 01381 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01382 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01383 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0k\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0k\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0k\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0h\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0i\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0j\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0k\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01384 456 NtClose (292, ... ) == 0x0 01385 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000010"}, ... 292, ) }, ... 292, ) == 0x0 01386 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01387 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01388 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0p\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0p\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0p\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0 (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0m\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0 \1\0\0\370\343\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0\220\315\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0n\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0$\1\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0o\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0p\5\0\0\300\1\0\0\310\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0$\1\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0 01389 456 NtClose (292, ... ) == 0x0 01390 456 NtOpenKey (0x20019, {24, 288, 0x40, 0, 0, (0x20019, {24, 288, 0x40, 0, 0, "000000000011"}, ... 292, ) }, ... 292, ) == 0x0 01391 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01392 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW 01393 456 NtQueryValueKey (292, (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0r\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0r\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0s\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0 \1\0\0s\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0t\5\0\0\300\1\0\0\310\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\30\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0t\5\0\0\300\1\0\0\310\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0u\5\0\0\300\1\0\0\310\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0u\5\0\0\300\1\0\0\310\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0 \1\0\0v\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0\24\1\0\0\24\344\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0@\315\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (292, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0r\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0$\1\0\0r\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0s\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0 \1\0\0s\5\0\0\300\1\0\0\310\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0t\5\0\0\300\1\0\0\310\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\30\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0t\5\0\0\300\1\0\0\310\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0u\5\0\0\300\1\0\0\310\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0u\5\0\0\300\1\0\0\310\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0 \1\0\0v\5\0\0\300\1\0\0\310\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0\24\1\0\0\24\344\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0@\315\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0 01394 456 NtClose (292, ... ) == 0x0 01395 456 NtClose (288, ... ) == 0x0 01396 456 NtWaitForSingleObject (280, 0, {0, 0}, ... ) == 0x102 01397 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 288, ) == 0x0 01398 456 NtOpenKey (0x2000000, {24, 276, 0x40, 0, 0, (0x2000000, {24, 276, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 292, ) }, ... 292, ) == 0x0 01399 456 NtQueryValueKey (292, (292, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (292, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0 01400 456 NtNotifyChangeKey (292, 288, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103 01401 456 NtQueryValueKey (292, (292, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (292, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0 01402 456 NtOpenKey (0x2000000, {24, 292, 0x40, 0, 0, (0x2000000, {24, 292, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01403 456 NtQueryValueKey (292, (292, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (292, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0 01404 456 NtOpenKey (0x2000000, {24, 292, 0x40, 0, 0, (0x2000000, {24, 292, 0x40, 0, 0, "Catalog_Entries"}, ... 296, ) }, ... 296, ) == 0x0 01405 456 NtOpenKey (0x20019, {24, 296, 0x40, 0, 0, (0x20019, {24, 296, 0x40, 0, 0, "000000000001"}, ... 300, ) }, ... 300, ) == 0x0 01406 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0 01407 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0 01408 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0 01409 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0 01410 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0 01411 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0 01412 456 NtQueryValueKey (300, (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0 01413 456 NtQueryValueKey (300, (300, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01414 456 NtQueryValueKey (300, (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0 01415 456 NtQueryValueKey (300, (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 01416 456 NtQueryValueKey (300, (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01417 456 NtQueryValueKey (300, (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01418 456 NtClose (300, ... ) == 0x0 01419 456 NtAllocateVirtualMemory (-1, 1376256, 0, 4096, 4096, 4, ... 1376256, 4096, ) == 0x0 01420 456 NtOpenKey (0x20019, {24, 296, 0x40, 0, 0, (0x20019, {24, 296, 0x40, 0, 0, "000000000002"}, ... 300, ) }, ... 300, ) == 0x0 01421 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0 01422 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0 01423 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0 01424 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0 01425 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0 01426 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0 01427 456 NtQueryValueKey (300, (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0 01428 456 NtQueryValueKey (300, (300, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01429 456 NtQueryValueKey (300, (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0 01430 456 NtQueryValueKey (300, (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 01431 456 NtQueryValueKey (300, (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01432 456 NtQueryValueKey (300, (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01433 456 NtClose (300, ... ) == 0x0 01434 456 NtOpenKey (0x20019, {24, 296, 0x40, 0, 0, (0x20019, {24, 296, 0x40, 0, 0, "000000000003"}, ... 300, ) }, ... 300, ) == 0x0 01435 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0 01436 456 NtQueryValueKey (300, (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0 01437 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0 01438 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0 01439 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0 01440 456 NtQueryValueKey (300, (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (300, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0 01441 456 NtQueryValueKey (300, (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (300, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0 01442 456 NtQueryValueKey (300, (300, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01443 456 NtQueryValueKey (300, (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0 01444 456 NtQueryValueKey (300, (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 01445 456 NtQueryValueKey (300, (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01446 456 NtQueryValueKey (300, (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (300, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 01447 456 NtClose (300, ... ) == 0x0 01448 456 NtClose (296, ... ) == 0x0 01449 456 NtWaitForSingleObject (288, 0, {0, 0}, ... ) == 0x102 01450 456 NtClose (276, ... ) == 0x0 01451 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 01452 456 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 01453 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 276, ) }, ... 276, ) == 0x0 01454 456 NtQueryValueKey (276, (276, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01455 456 NtClose (276, ... ) == 0x0 01456 456 NtDuplicateObject (-1, -2, -1, 0x0, 0, 2, ... 276, ) == 0x0 01457 456 NtAllocateVirtualMemory (-1, 1380352, 0, 4096, 4096, 4, ... 1380352, 4096, ) == 0x0 01458 456 NtOpenEvent (0x100000, {24, 52, 0x0, 0, 0, (0x100000, {24, 52, 0x0, 0, 0, "Global\SvcctrlStartEvent_A3752DX"}, ... 296, ) }, ... 296, ) == 0x0 01459 456 NtWaitForSingleObject (296, 0, {-1800000000, -1}, ... ) == 0x0 01460 456 NtClose (296, ... ) == 0x0 01461 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 01462 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Rpc\PagedBuffers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01463 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Rpc"}, ... 296, ) }, ... 296, ) == 0x0 01464 456 NtQueryValueKey (296, (296, "MaxRpcSize", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01465 456 NtClose (296, ... ) == 0x0 01466 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe\RpcThreadPoolThrottle"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01467 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 296, ) == 0x0 01468 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 300, ) == 0x0 01469 456 NtQuerySystemTime (... {-1660379744, 29881238}, ) == 0x0 01470 456 NtAllocateVirtualMemory (-1, 1384448, 0, 4096, 4096, 4, ... 1384448, 4096, ) == 0x0 01471 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 304, ) == 0x0 01472 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Policies\Microsoft\Windows NT\Rpc"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01473 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01474 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01475 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01476 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 308, ) == 0x0 01477 456 NtDuplicateObject (-1, -2, -1, 0x0, 0, 2, ... 312, ) == 0x0 01478 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 316, ) }, ... 316, ) == 0x0 01479 456 NtOpenKey (0x20019, {24, 316, 0x40, 0, 0, (0x20019, {24, 316, 0x40, 0, 0, "ActiveComputerName"}, ... 320, ) }, ... 320, ) == 0x0 01480 456 NtQueryValueKey (320, (320, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (320, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (320, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01481 456 NtClose (320, ... ) == 0x0 01482 456 NtClose (316, ... ) == 0x0 01483 456 NtCreateIoCompletion (0x1f0003, 0x0, 0, ... 316, ) == 0x0 01484 456 NtCreateIoCompletion (0x1f0003, 0x0, -1, ... 320, ) == 0x0 01485 456 NtDuplicateObject (-1, 316, -1, 0x0, 0, 2, ... 324, ) == 0x0 01486 456 NtOpenThreadToken (-2, 0xc, 1, ... ) == STATUS_NO_TOKEN 01487 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 328, ) == 0x0 01488 456 NtOpenThreadToken (-2, 0xc, 1, ... ) == STATUS_NO_TOKEN 01489 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=0,}, 4, ... ) == 0x0 01490 456 NtAllocateVirtualMemory (-1, 1388544, 0, 4096, 4096, 4, ... 1388544, 4096, ) == 0x0 01491 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1236420, (0xc0100080, {24, 0, 0x40, 0, 1236420, "\??\PIPE\svcctl"}, 0x0, 0, 3, 1, 4194368, 0, 0, ... 332, {status=0x0, info=1}, ) }, 0x0, 0, 3, 1, 4194368, 0, 0, ... 332, {status=0x0, info=1}, ) == 0x0 01492 456 NtSetInformationFile (332, 1236476, 8, Pipe, ... {status=0x0, info=0}, ) == 0x0 01493 456 NtSetInformationFile (332, 1236468, 8, Completion, ... {status=0x0, info=0}, ) == 0x0 01494 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=0,}, 4, ... ) == 0x0 01495 456 NtWriteFile (332, 309, 0, 0, (332, 309, 0, 0, "\5\0\13\3\20\0\0\0H\0\0\0\1\0\0\0\270\20\270\20\0\0\0\0\1\0\0\0\0\0\1\0\201\273z6D\230\3615\2552\230\3608\0\20\3\2\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", 72, {0, 0}, 0, ... {status=0x0, info=72}, ) , 72, {0, 0}, 0, ... {status=0x0, info=72}, ) == 0x0 01496 456 NtReadFile (332, 309, 0, 0, 1024, {0, 0}, 0, ... {status=0x0, info=68}, (332, 309, 0, 0, 1024, {0, 0}, 0, ... {status=0x0, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\246\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , ) == 0x0 01497 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0$\0\0\0\1\0\0\0\14\0\0\0\0\0\17\0\0\0\0\0\0\0\0\0\0\0\0\200", 36, 1024, ... {status=0x103, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\246\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , 36, 1024, ... {status=0x103, info=68}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0$\0\0\0\1\0\0\0\14\0\0\0\0\0\17\0\0\0\0\0\0\0\0\0\0\0\0\200", 36, 1024, ... {status=0x103, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\246\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , ) == 0x103 01498 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0X\0\0\0\2\0\0\0@\0\0\0\0\0\20\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\15\0\0\0\0\0\0\0\15\0\0\0R\0e\0m\0o\0t\0e\0A\0c\0c\0e\0s\0s\0\0\0\0\0\4\0\0\0", 88, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\1\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , 88, 1024, ... {status=0x103, info=48}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0X\0\0\0\2\0\0\0@\0\0\0\0\0\20\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\15\0\0\0\0\0\0\0\15\0\0\0R\0e\0m\0o\0t\0e\0A\0c\0c\0e\0s\0s\0\0\0\0\0\4\0\0\0", 88, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\1\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , ) == 0x103 01499 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\3\0\0\0\24\0\0\0\0\0\6\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\2\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , 44, 1024, ... {status=0x103, info=48}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\3\0\0\0\24\0\0\0\0\0\6\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\2\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , ) == 0x103 01500 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0L\0\0\0\4\0\0\04\0\0\0\0\0\20\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\7\0\0\0\0\0\0\0\7\0\0\0R\0o\0u\0t\0e\0r\0\0\0c\0\4\0\0\0", 76, 1024, ... {status=0x103, info=56}, "\5\0\2\3\20\0\0\08\0\0\0\3\0\0\0 \0\0\0\0\0\0\0 \0\0\0\1\0\0\0\0\0\0\05\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 76, 1024, ... {status=0x103, info=56}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0L\0\0\0\4\0\0\04\0\0\0\0\0\20\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305\7\0\0\0\0\0\0\0\7\0\0\0R\0o\0u\0t\0e\0r\0\0\0c\0\4\0\0\0", 76, 1024, ... {status=0x103, info=56}, "\5\0\2\3\20\0\0\08\0\0\0\3\0\0\0 \0\0\0\0\0\0\0 \0\0\0\1\0\0\0\0\0\0\05\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x103 01501 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\5\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\4\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\4\0\0", ) , 44, 1024, ... {status=0x103, info=48}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\5\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\216\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\4\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\4\0\0", ) , ) == 0x103 01502 456 NtFsControlFile (332, 309, 0x0, 0x0, 0x11c017, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\6\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\5\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 44, 1024, ... {status=0x103, info=48}, (332, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\6\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\215\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\5\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x103 01503 456 NtClose (328, ... ) == 0x0 01504 456 NtClose (332, ... ) == 0x0 01505 456 NtCreateFile (0x20000000, {24, 0, 0x40, 0, 0, (0x20000000, {24, 0, 0x40, 0, 0, "\Device\Tcp6"}, 0x0, 128, 3, 3, 0, 0, 0, ... ) }, 0x0, 128, 3, 3, 0, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01506 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01507 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\1\3\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 92, ... {status=0x0, info=92}, "\2\0\0\0\200\0\0\0I\3\0\0\0\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0I\3\0\0F\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0<\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\6\0\0\0", ) , 36, 92, ... {status=0x0, info=92}, (160, 332, 0x0, 0x0, 0x120003, "\1\3\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 92, ... {status=0x0, info=92}, "\2\0\0\0\200\0\0\0I\3\0\0\0\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0I\3\0\0F\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0<\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\6\0\0\0", ) , ) == 0x0 01508 456 NtClose (332, ... ) == 0x0 01509 456 NtAllocateVirtualMemory (-1, 12988416, 0, 12288, 4096, 4, ... 12988416, 12288, ) == 0x0 01510 456 NtCreateFile (0x20000000, {24, 0, 0x40, 0, 0, (0x20000000, {24, 0, 0x40, 0, 0, "\Device\Tcp6"}, 0x0, 128, 3, 3, 0, 0, 0, ... ) }, 0x0, 128, 3, 3, 0, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01511 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01512 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , 36, 32768, ... {status=0x0, info=56}, (160, 332, 0x0, 0x0, 0x120003, "\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 32768, ... {status=0x0, info=56}, "\0\4\0\0\0\0\0\0\1\4\0\0\0\0\0\0\1\3\0\0\0\0\0\0\200\3\0\0\0\0\0\0\0\2\0\0\0\0\0\0\200\2\0\0\0\0\0\0\0\2\0\0\1\0\0\0", ) , ) == 0x0 01513 456 NtClose (332, ... ) == 0x0 01514 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01515 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , 36, 348, ... {status=0x0, info=118}, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , ) == 0x0 01516 456 NtClose (332, ... ) == 0x0 01517 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01518 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , 36, 348, ... {status=0x0, info=158}, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , ) == 0x0 01519 456 NtClose (332, ... ) == 0x0 01520 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01521 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , 36, 348, ... {status=0x0, info=118}, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\0\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=118}, "\1\0\0\0\30\0\0\0\360\5\0\0\200\226\230\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\364\200\370\317\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0MS TCP Loopback interface\0", ) , ) == 0x0 01522 456 NtClose (332, ... ) == 0x0 01523 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 332, ) == 0x0 01524 456 NtDeviceIoControlFile (160, 332, 0x0, 0x0, 0x120003, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , 36, 348, ... {status=0x0, info=158}, (160, 332, 0x0, 0x0, 0x120003, "\0\2\0\0\1\0\0\0\0\2\0\0\0\1\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36, 348, ... {status=0x0, info=158}, "\3\0\1\0\6\0\0\0\334\5\0\0\0\312\232;\6\0\0\0\0\14)\371\246\305\0\0\1\0\0\0\5\0\0\0\27\201\370\317W_\15\0!\3\0\0,\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\345\366\1\0\36\2\0\0+\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0B\0\0\0AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport\0", ) , ) == 0x0 01525 456 NtClose (332, ... ) == 0x0 01526 456 NtCreateTimer (0x1f0003, 0x0, 1, ... 332, ) == 0x0 01527 456 NtCreateKey (0xf003f, {24, 28, 0x40, 0, 0, (0xf003f, {24, 28, 0x40, 0, 0, "Software\Microsoft\RFC1156Agent\CurrentVersion\Parameters"}, 0, 0x0, 0, ... 328, 2, ) }, 0, 0x0, 0, ... 328, 2, ) == 0x0 01528 456 NtQueryValueKey (328, (328, "TrapPollTimeMilliSecs", Partial, 144, ... TitleIdx=0, Type=4, Data="\230:\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (328, "TrapPollTimeMilliSecs", Partial, 144, ... TitleIdx=0, Type=4, Data="\230:\0\0"}, 16, ) }, 16, ) == 0x0 01529 456 NtSetValueKey (328, (328, "TrapPollTimeMilliSecs", 0, 4, "\230:\0\0", 4, ... ) , 0, 4, (328, "TrapPollTimeMilliSecs", 0, 4, "\230:\0\0", 4, ... ) , 4, ... ) == 0x0 01530 456 NtSetTimer (332, {-150000000, -1}, 0x0, 0x0, 0, 15000, 0, ... ) == 0x0 01531 456 NtAllocateVirtualMemory (-1, 1392640, 0, 4096, 4096, 4, ... 1392640, 4096, ) == 0x0 01532 456 NtAllocateUuids (1238164, 1238172, 1238176, 2010313078, ... ) == 0x0 01533 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01534 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01535 456 NtClose (336, ... ) == 0x0 01536 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01537 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01538 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01539 456 NtClose (336, ... ) == 0x0 01540 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01541 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01542 456 NtClose (336, ... ) == 0x0 01543 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01544 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01545 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01546 456 NtClose (336, ... ) == 0x0 01547 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01548 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01549 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01550 456 NtClose (336, ... ) == 0x0 01551 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01552 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01553 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01554 456 NtClose (336, ... ) == 0x0 01555 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01556 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01557 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01558 456 NtClose (336, ... ) == 0x0 01559 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01560 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01561 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01562 456 NtClose (336, ... ) == 0x0 01563 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01564 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01565 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01566 456 NtClose (336, ... ) == 0x0 01567 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01568 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01569 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01570 456 NtClose (336, ... ) == 0x0 01571 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01572 456 NtDelayExecution (0, {-1000000, -1}, ... ) == 0x0 01573 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01574 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01575 456 NtClose (336, ... ) == 0x0 01576 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01577 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01578 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01579 456 NtClose (336, ... ) == 0x0 01580 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01581 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01582 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01583 456 NtClose (336, ... ) == 0x0 01584 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01585 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01586 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01587 456 NtClose (336, ... ) == 0x0 01588 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01589 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01590 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01591 456 NtClose (336, ... ) == 0x0 01592 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01593 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01594 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01595 456 NtClose (336, ... ) == 0x0 01596 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01597 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01598 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01599 456 NtClose (336, ... ) == 0x0 01600 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01601 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1235164, (0xc0100080, {24, 0, 0x40, 0, 1235164, "\??\SCSI0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01602 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x4d008, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 573, 573, ... {status=0x0, info=573}, (336, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 573, 573, ... {status=0x0, info=573}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0!\2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0 01603 456 NtClose (336, ... ) == 0x0 01604 456 NtDelayExecution (0, {-10000, -1}, ... ) == 0x0 01605 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01606 456 NtCreateKey (0x20006, {24, 28, 0x40, 1385280, 0, (0x20006, {24, 28, 0x40, 1385280, 0, "Software\Licenses"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ... 01607 456 NtSetInformationFile (-2147482808, -136150452, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01608 456 NtSetInformationFile (-2147482808, -136150300, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01609 456 NtSetInformationFile (-2147482808, -136150076, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01606 456 NtCreateKey ... 336, 1, ) == 0x0 01610 456 NtSetValueKey (336, (336, "{R7C0DB872A3F777C0}", 0, 3, "J\215}L", 4, ... ) , 0, 3, (336, "{R7C0DB872A3F777C0}", 0, 3, "J\215}L", 4, ... ) , 4, ... ) == 0x0 01611 456 NtClose (336, ... ) == 0x0 01612 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01613 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01614 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01615 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01616 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01617 456 NtClose (336, ... ) == 0x0 01618 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01619 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01620 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01621 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01622 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01623 456 NtClose (336, ... ) == 0x0 01624 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01625 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01626 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01627 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01628 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01629 456 NtClose (336, ... ) == 0x0 01630 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01631 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01632 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01633 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 336, ) }, ... 336, ) == 0x0 01634 456 NtOpenKey (0x20019, {24, 336, 0x40, 0, 0, (0x20019, {24, 336, 0x40, 0, 0, "ActiveComputerName"}, ... 340, ) }, ... 340, ) == 0x0 01635 456 NtQueryValueKey (340, (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01636 456 NtClose (340, ... ) == 0x0 01637 456 NtClose (336, ... ) == 0x0 01638 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01639 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01640 456 NtClose (336, ... ) == 0x0 01641 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01642 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01643 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01644 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 336, ) }, ... 336, ) == 0x0 01645 456 NtOpenKey (0x20019, {24, 336, 0x40, 0, 0, (0x20019, {24, 336, 0x40, 0, 0, "ActiveComputerName"}, ... 340, ) }, ... 340, ) == 0x0 01646 456 NtQueryValueKey (340, (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01647 456 NtClose (340, ... ) == 0x0 01648 456 NtClose (336, ... ) == 0x0 01649 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1238684, (0x100080, {24, 0, 0x40, 0, 1238684, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 336, {status=0x0, info=0}, ) == 0x0 01650 456 NtDeviceIoControlFile (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (336, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01651 456 NtClose (336, ... ) == 0x0 01652 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01653 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01654 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01655 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Hardware\Description\System"}, ... 336, ) }, ... 336, ) == 0x0 01656 456 NtQueryValueKey (336, (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01657 456 NtQueryValueKey (336, (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01658 456 NtQueryValueKey (336, (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01659 456 NtQueryValueKey (336, (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01660 456 NtClose (336, ... ) == 0x0 01661 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 336, ) }, ... 336, ) == 0x0 01662 456 NtOpenKey (0x20019, {24, 336, 0x40, 0, 0, (0x20019, {24, 336, 0x40, 0, 0, "ActiveComputerName"}, ... 340, ) }, ... 340, ) == 0x0 01663 456 NtQueryValueKey (340, (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01664 456 NtClose (340, ... ) == 0x0 01665 456 NtClose (336, ... ) == 0x0 01666 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Hardware\Description\System"}, ... 336, ) }, ... 336, ) == 0x0 01667 456 NtQueryValueKey (336, (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01668 456 NtQueryValueKey (336, (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (336, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01669 456 NtQueryValueKey (336, (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01670 456 NtQueryValueKey (336, (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (336, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01671 456 NtClose (336, ... ) == 0x0 01672 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 336, ) }, ... 336, ) == 0x0 01673 456 NtOpenKey (0x20019, {24, 336, 0x40, 0, 0, (0x20019, {24, 336, 0x40, 0, 0, "ActiveComputerName"}, ... 340, ) }, ... 340, ) == 0x0 01674 456 NtQueryValueKey (340, (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (340, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01675 456 NtClose (340, ... ) == 0x0 01676 456 NtClose (336, ... ) == 0x0 01677 456 NtCreateSection (0xf0007, {24, 52, 0x80, 11308024, 0, (0xf0007, {24, 52, 0x80, 11308024, 0, "LSI-3BBE6CE7"}, {268, 0}, 4, 134217728, 0, ... 336, ) }, {268, 0}, 4, 134217728, 0, ... 336, ) == 0x0 01678 456 NtMapViewOfSection (336, -1, (0x0), 0, 0, {0, 0}, 268, 1, 0, 4, ... (0xc70000), {0, 0}, 4096, ) == 0x0 01679 456 NtCreateSection (0xf0007, {24, 52, 0x80, 11308024, 0, (0xf0007, {24, 52, 0x80, 11308024, 0, "C6E3D063::SharedIndexInfo"}, {384, 0}, 4, 134217728, 0, ... 340, ) }, {384, 0}, 4, 134217728, 0, ... 340, ) == 0x0 01680 456 NtMapViewOfSection (340, -1, (0x0), 0, 0, {0, 0}, 384, 1, 0, 4, ... (0xc80000), {0, 0}, 4096, ) == 0x0 01681 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1236992, (0x100080, {24, 0, 0x40, 0, 1236992, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01682 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01683 456 NtClose (344, ... ) == 0x0 01684 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1236984, (0x100080, {24, 0, 0x40, 0, 1236984, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01685 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01686 456 NtClose (344, ... ) == 0x0 01687 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 344, ) }, ... 344, ) == 0x0 01688 456 NtQueryValueKey (344, (344, "{K7C0DB872A3F777C0}", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01689 456 NtClose (344, ... ) == 0x0 01690 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Hardware\Description\System"}, ... 344, ) }, ... 344, ) == 0x0 01691 456 NtQueryValueKey (344, (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01692 456 NtQueryValueKey (344, (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01693 456 NtQueryValueKey (344, (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01694 456 NtQueryValueKey (344, (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01695 456 NtClose (344, ... ) == 0x0 01696 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 344, ) }, ... 344, ) == 0x0 01697 456 NtOpenKey (0x20019, {24, 344, 0x40, 0, 0, (0x20019, {24, 344, 0x40, 0, 0, "ActiveComputerName"}, ... 348, ) }, ... 348, ) == 0x0 01698 456 NtQueryValueKey (348, (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01699 456 NtClose (348, ... ) == 0x0 01700 456 NtClose (344, ... ) == 0x0 01701 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 344, {status=0x0, info=1}, ) }, 3, 16417, ... 344, {status=0x0, info=1}, ) == 0x0 01702 456 NtQueryInformationFile (344, 1231640, 528, Name, ... {status=0x0, info=6}, ) == 0x0 01703 456 NtQueryVolumeInformationFile (344, 1337928, 284, Volume, ... {status=0x0, info=18}, ) == 0x0 01704 456 NtQueryVolumeInformationFile (344, 1331704, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0 01705 456 NtClose (344, ... ) == 0x0 01706 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1232340, (0x100080, {24, 0, 0x40, 0, 1232340, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01707 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01708 456 NtClose (344, ... ) == 0x0 01709 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01710 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01711 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01712 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "u3dapi10.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01713 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01714 456 NtQueryAttributesFile ({24, 12, 0x40, 0, 0, ({24, 12, 0x40, 0, 0, "u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01715 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01716 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01717 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01718 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01719 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01720 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\Wbem\u3dapi10.dll"}, 1230528, ... ) }, 1230528, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01721 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1232340, (0x100080, {24, 0, 0x40, 0, 1232340, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01722 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01723 456 NtClose (344, ... ) == 0x0 01724 456 NtOpenKey (0x1, {24, 28, 0x40, 0, 0, (0x1, {24, 28, 0x40, 0, 0, "Hardware\Description\System"}, ... 344, ) }, ... 344, ) == 0x0 01725 456 NtQueryValueKey (344, (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01726 456 NtQueryValueKey (344, (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) , Partial, 144, ... TitleIdx=0, Type=7, Data= (344, "SystemBiosVersion", Partial, 144, ... TitleIdx=0, Type=7, Data="P\0T\0L\0T\0D\0 \0 \0-\0 \06\00\04\00\00\00\00\0\0\0P\0h\0o\0e\0n\0i\0x\0B\0I\0O\0S\0 \04\0.\00\0 \0R\0e\0l\0e\0a\0s\0e\0 \06\0.\00\0 \0 \0 \0 \0 \0\0\0\0\0"}, 114, ) }, 114, ) == 0x0 01727 456 NtQueryValueKey (344, (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01728 456 NtQueryValueKey (344, (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (344, "SystemBiosDate", Partial, 144, ... TitleIdx=0, Type=1, Data="0\04\0/\01\07\0/\00\06\0\0\0"}, 30, ) }, 30, ) == 0x0 01729 456 NtClose (344, ... ) == 0x0 01730 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\ComputerName"}, ... 344, ) }, ... 344, ) == 0x0 01731 456 NtOpenKey (0x20019, {24, 344, 0x40, 0, 0, (0x20019, {24, 344, 0x40, 0, 0, "ActiveComputerName"}, ... 348, ) }, ... 348, ) == 0x0 01732 456 NtQueryValueKey (348, (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Full, 108, ... TitleIdx=0, Type=1, Name= (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) , Data= (348, "ComputerName", Full, 108, ... TitleIdx=0, Type=1, Name="ComputerName", Data="M\0Y\0W\0O\0R\0L\0D\0\0\0"}, 60, ) }, 60, ) == 0x0 01733 456 NtClose (348, ... ) == 0x0 01734 456 NtClose (344, ... ) == 0x0 01735 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 344, {status=0x0, info=1}, ) }, 3, 16417, ... 344, {status=0x0, info=1}, ) == 0x0 01736 456 NtQueryInformationFile (344, 1231640, 528, Name, ... {status=0x0, info=6}, ) == 0x0 01737 456 NtQueryVolumeInformationFile (344, 1337928, 284, Volume, ... {status=0x0, info=18}, ) == 0x0 01738 456 NtQueryVolumeInformationFile (344, 1331704, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0 01739 456 NtClose (344, ... ) == 0x0 01740 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1232340, (0x100080, {24, 0, 0x40, 0, 1232340, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01741 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01742 456 NtClose (344, ... ) == 0x0 01743 456 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 0x0, ) == 0x0 01744 456 NtQueryInformationProcess (-1, QuotaLimits, 32, ... {process info, class 1, size 32}, 0x0, ) == 0x0 01745 456 NtQueryInformationProcess (-1, VmCounters, 44, ... {process info, class 3, size 44}, 0x0, ) == 0x0 01746 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1232340, (0x100080, {24, 0, 0x40, 0, 1232340, "\??\PHYSICALDRIVE0"}, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) }, 0x0, 0, 3, 3, 96, 0, 0, ... 344, {status=0x0, info=0}, ) == 0x0 01747 456 NtDeviceIoControlFile (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, (344, 0, 0x0, 0x0, 0x70000, 0x0, 0, 24, ... {status=0x0, info=24}, "\14\3\0\0\0\0\0\0\14\0\0\0\200\0\0\0?\0\0\0\0\2\0\0", ) , ) == 0x0 01748 456 NtClose (344, ... ) == 0x0 01749 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 344, ) }, ... 344, ) == 0x0 01750 456 NtSetValueKey (344, (344, "{K7C0DB872A3F777C0}", 0, 3, "\323\245\215=f\14\37\377\377\377\377\314+\36d\351I\317gR%\313\304\224\207\\11J\215}L\377\377\377\377\2070\14\303\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\0\0\0\0\224\207\\11f\14\37\377\377\377\377\314+\36d\351I\317gR%\313\304\224\207\\11J\215}L\377\377\377\377\2070\14\303\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\0\0\0\0\224\207\\11\0\0", 260, ... ) , 0, 3, (344, "{K7C0DB872A3F777C0}", 0, 3, "\323\245\215=f\14\37\377\377\377\377\314+\36d\351I\317gR%\313\304\224\207\\11J\215}L\377\377\377\377\2070\14\303\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\0\0\0\0\224\207\\11f\14\37\377\377\377\377\314+\36d\351I\317gR%\313\304\224\207\\11J\215}L\377\377\377\377\2070\14\303\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\0\0\0\0\224\207\\11\0\0", 260, ... ) , 260, ... ) == 0x0 01751 456 NtClose (344, ... ) == 0x0 01752 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 01753 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 344, ) == 0x0 01754 456 NtQueryInformationToken (344, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 01755 456 NtClose (344, ... ) == 0x0 01756 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 344, ) }, ... 344, ) == 0x0 01757 456 NtSetInformationObject (346, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0 01758 456 NtQueryKey (346, Name, 384, ... {Name= (346, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0 01759 456 NtOpenKey (0xf003f, {24, 346, 0x40, 0, 0, (0xf003f, {24, 346, 0x40, 0, 0, "CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01760 456 NtOpenKey (0xf003f, {24, 0, 0x40, 0, 0, (0xf003f, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01761 456 NtQueryKey (346, Name, 382, ... {Name= (346, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES6"}, 138, ) }, 138, ) == 0x0 01762 456 NtOpenKey (0x2000000, {24, 346, 0x40, 0, 0, (0x2000000, {24, 346, 0x40, 0, 0, "CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01763 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 348, ) }, ... 348, ) == 0x0 01764 456 NtCreateKey (0xf003f, {24, 348, 0x40, 1385280, 0, (0xf003f, {24, 348, 0x40, 1385280, 0, "CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ... 01765 456 NtSetInformationFile (-2147482808, -136149980, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01766 456 NtSetInformationFile (-2147482808, -136150300, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01767 456 NtSetInformationFile (-2147482808, -136150084, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01768 456 NtSetInformationFile (-2147482808, -136150076, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 01764 456 NtCreateKey ... 352, 1, ) == 0x0 01769 456 NtClose (348, ... ) == 0x0 01770 456 NtQueryKey (354, Name, 384, ... {Name= (354, Name, 384, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}5"}, 162, ) }, 162, ) == 0x0 01771 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 01772 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 348, ) == 0x0 01773 456 NtQueryInformationToken (348, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 01774 456 NtClose (348, ... ) == 0x0 01775 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\Version"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01776 456 NtOpenKey (0x2000000, {24, 354, 0x40, 0, 0, (0x2000000, {24, 354, 0x40, 0, 0, "Version"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01777 456 NtQueryKey (354, Name, 392, ... {Name= (354, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, 162, ) }, 162, ) == 0x0 01778 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 01779 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 348, ) == 0x0 01780 456 NtQueryInformationToken (348, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 01781 456 NtClose (348, ... ) == 0x0 01782 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01783 456 NtDeleteValueKey (354, (354, "0", ... ) , ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01784 456 NtQueryKey (346, Name, 384, ... {Name= (346, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0 01785 456 NtOpenKey (0x20019, {24, 346, 0x40, 0, 0, (0x20019, {24, 346, 0x40, 0, 0, "CLSID"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01786 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\CLSID"}, ... 348, ) }, ... 348, ) == 0x0 01787 456 NtQueryKey (350, Name, 392, ... {Name= (350, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID"}, 84, ) }, 84, ) == 0x0 01788 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 01789 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 356, ) == 0x0 01790 456 NtQueryInformationToken (356, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 01791 456 NtClose (356, ... ) == 0x0 01792 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 01793 456 NtDuplicateObject (-1, 350, -1, 0x1, 0, 0, ... 356, ) == 0x0 01794 456 NtQueryKey (356, 4, 40, ... {key info, class 4, size 40}, 40, ) == 0x0 01795 456 NtClose (356, ... ) == 0x0 01796 456 NtOpenKey (0x9, {24, 350, 0x40, 0, 0, 0x0, }, ... 356, ) == 0x0 01797 456 NtQueryKey (356, 4, 40, ... {key info, class 4, size 40}, 40, ) == 0x0 01798 456 NtClose (356, ... ) == 0x0 01799 456 NtEnumerateKey (350, 2544, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 2544, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{ffdc1a80-d527-11d0-a32c-34af06c10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01800 456 NtEnumerateKey (350, 2543, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 2543, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01801 456 NtEnumerateKey (350, 2542, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 2542, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{FFAC7A18-EDF9-40DE-BA3F-49FC2269855E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01802 456 NtEnumerateKey (350, 2541, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 2541, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{FF393560-C2A7-11CF-BFF4-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01803 456 NtEnumerateKey (350, 2540, Node, 288, ... {LastWrite={0x62965a8e,0x1c73999}, TitleIdx=0, Name= (350, 2540, Node, 288, ... {LastWrite={0x62965a8e,0x1c73999}, TitleIdx=0, Name="{FF37A93C-C28E-11D1-AEB6-00C04FB68820}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01804 456 NtEnumerateKey (350, 2539, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name= (350, 2539, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name="{FF151822-B0BF-11D1-A80D-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01805 456 NtEnumerateKey (350, 2538, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 2538, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{FEF10FA2-355E-4e06-9381-9B24D7F7CC88}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01806 456 NtEnumerateKey (350, 2537, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 2537, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{FEF10DED-355E-4e06-9381-9B24D7F7CC88}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01807 456 NtEnumerateKey (350, 2536, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2536, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{FEE225FC-7AFD-45E9-95D0-5A318079D911}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01808 456 NtEnumerateKey (350, 2535, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 2535, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{fecd606e-7161-4cbc-a868-4703867823ea}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01809 456 NtEnumerateKey (350, 2534, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 2534, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{FEB50740-7BEF-11CE-9BD9-0000E202599C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01810 456 NtEnumerateKey (350, 2533, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2533, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{FEA4300C-7959-4147-B26A-2377B9E7A91D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01811 456 NtEnumerateKey (350, 2532, Node, 288, ... {LastWrite={0x6b74193e,0x1c73999}, TitleIdx=0, Name= (350, 2532, Node, 288, ... {LastWrite={0x6b74193e,0x1c73999}, TitleIdx=0, Name="{FE9E48A4-A014-11D1-855C-00A0C944138C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01812 456 NtEnumerateKey (350, 2531, Node, 288, ... {LastWrite={0x6e599494,0x1c73999}, TitleIdx=0, Name= (350, 2531, Node, 288, ... {LastWrite={0x6e599494,0x1c73999}, TitleIdx=0, Name="{FE9E48A2-A014-11D1-855C-00A0C944138C}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 2531, Node, 288, ... {LastWrite={0x6e599494,0x1c73999}, TitleIdx=0, Name="{FE9E48A2-A014-11D1-855C-00A0C944138C}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 01813 456 NtEnumerateKey (350, 2530, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name= (350, 2530, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name="{FE9AF5C0-D3B6-11CE-A5B6-00AA00680C3F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01814 456 NtEnumerateKey (350, 2529, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name= (350, 2529, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name="{FE883157-CEBD-4570-B7A2-E4FE06ABE626}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01815 456 NtEnumerateKey (350, 2528, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name= (350, 2528, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name="{FE48704D-DC92-4F10-91DE-C676E25624CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01816 456 NtEnumerateKey (350, 2527, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 2527, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{FE12CD81-5158-4bd8-A37C-A621BC0E143B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01817 456 NtEnumerateKey (350, 2526, Node, 288, ... {LastWrite={0x6006b3e0,0x1c73999}, TitleIdx=0, Name= (350, 2526, Node, 288, ... {LastWrite={0x6006b3e0,0x1c73999}, TitleIdx=0, Name="{fe1290f0-cfbd-11cf-a330-00aa00c16e65}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01818 456 NtEnumerateKey (350, 2525, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2525, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{FDFE9681-74A3-11D0-AFA7-00AA00B67A42}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01819 456 NtEnumerateKey (350, 2524, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 2524, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{FDE424F3-AA10-471D-8A0A-6875C17B5914}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01820 456 NtEnumerateKey (350, 2523, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name= (350, 2523, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name="{FDD384CC-78C6-4E6D-8694-1DACBEE57F96}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 2523, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name="{FDD384CC-78C6-4E6D-8694-1DACBEE57F96}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 01821 456 NtEnumerateKey (350, 2522, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2522, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{fd8d3a5f-6066-11d1-8c13-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01822 456 NtEnumerateKey (350, 2521, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 2521, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{fd86b5d0-12c6-11ce-bd31-00aa004bbb1f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01823 456 NtEnumerateKey (350, 2520, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2520, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CED-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01824 456 NtEnumerateKey (350, 2519, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2519, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CEB-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01825 456 NtEnumerateKey (350, 2518, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2518, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CEA-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01826 456 NtEnumerateKey (350, 2517, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2517, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE9-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01827 456 NtEnumerateKey (350, 2516, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2516, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE8-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01828 456 NtEnumerateKey (350, 2515, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2515, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE7-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01829 456 NtEnumerateKey (350, 2514, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2514, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE6-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01830 456 NtEnumerateKey (350, 2513, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2513, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE3-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01831 456 NtEnumerateKey (350, 2512, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 2512, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{FD853CE2-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01832 456 NtEnumerateKey (350, 2511, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2511, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CE1-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01833 456 NtEnumerateKey (350, 2510, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2510, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CE0-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01834 456 NtEnumerateKey (350, 2509, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2509, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CDF-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01835 456 NtEnumerateKey (350, 2508, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2508, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CDE-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01836 456 NtEnumerateKey (350, 2507, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2507, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CDD-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01837 456 NtEnumerateKey (350, 2506, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2506, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CDC-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01838 456 NtEnumerateKey (350, 2505, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name= (350, 2505, Node, 288, ... {LastWrite={0x7496fc20,0x1c73999}, TitleIdx=0, Name="{FD853CDB-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01839 456 NtEnumerateKey (350, 2504, Node, 288, ... {LastWrite={0x749499c6,0x1c73999}, TitleIdx=0, Name= (350, 2504, Node, 288, ... {LastWrite={0x749499c6,0x1c73999}, TitleIdx=0, Name="{FD853CD9-7F86-11d0-8252-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01840 456 NtEnumerateKey (350, 2503, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2503, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{FD78D554-4C6E-11D0-970D-00A0C9191601}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01841 456 NtEnumerateKey (350, 2502, Node, 288, ... {LastWrite={0xef564020,0x1c76daf}, TitleIdx=0, Name= (350, 2502, Node, 288, ... {LastWrite={0xef564020,0x1c76daf}, TitleIdx=0, Name="{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01842 456 NtEnumerateKey (350, 2501, Node, 288, ... {LastWrite={0x25e96220,0x1c73999}, TitleIdx=0, Name= (350, 2501, Node, 288, ... {LastWrite={0x25e96220,0x1c73999}, TitleIdx=0, Name="{FD4F53E0-65DC-11D1-AB64-00C04FD9159E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01843 456 NtEnumerateKey (350, 2500, Node, 288, ... {LastWrite={0x631254d6,0x1c73999}, TitleIdx=0, Name= (350, 2500, Node, 288, ... {LastWrite={0x631254d6,0x1c73999}, TitleIdx=0, Name="{FD179533-D86E-11D0-89D6-00A0C90833E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01844 456 NtEnumerateKey (350, 2499, Node, 288, ... {LastWrite={0x6e500b2c,0x1c73999}, TitleIdx=0, Name= (350, 2499, Node, 288, ... {LastWrite={0x6e500b2c,0x1c73999}, TitleIdx=0, Name="{FCDECE00-A39D-11D0-ABE7-00AA0064D470}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01845 456 NtEnumerateKey (350, 2498, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 2498, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{FCC152B7-F372-11D0-8E00-00C04FD7C08B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01846 456 NtEnumerateKey (350, 2497, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2497, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{fcbf906f-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01847 456 NtEnumerateKey (350, 2496, Node, 288, ... {LastWrite={0x6b3d4328,0x1c73999}, TitleIdx=0, Name= (350, 2496, Node, 288, ... {LastWrite={0x6b3d4328,0x1c73999}, TitleIdx=0, Name="{FC7D9F02-3F9E-11D3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01848 456 NtEnumerateKey (350, 2495, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name= (350, 2495, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name="{FC7D9F01-3F9E-11D3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01849 456 NtEnumerateKey (350, 2494, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name= (350, 2494, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name="{FC7D9E09-3F9E-11d3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01850 456 NtEnumerateKey (350, 2493, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name= (350, 2493, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name="{FC7D9E08-3F9E-11d3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01851 456 NtEnumerateKey (350, 2492, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name= (350, 2492, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name="{FC7D9E06-3F9E-11d3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01852 456 NtEnumerateKey (350, 2491, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name= (350, 2491, Node, 288, ... {LastWrite={0x6b3ae0ce,0x1c73999}, TitleIdx=0, Name="{FC7D9E02-3F9E-11d3-93C0-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01853 456 NtEnumerateKey (350, 2490, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name= (350, 2490, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name="{FC715823-C5FB-11D1-9EEF-00A0C90347FF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01854 456 NtEnumerateKey (350, 2489, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name= (350, 2489, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name="{FC5B8A24-DB05-4A01-8388-22EDF6C2BBBA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01855 456 NtEnumerateKey (350, 2488, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name= (350, 2488, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name="{FC48CC30-4F3E-4fa1-803B-AD0E196A83B1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01856 456 NtEnumerateKey (350, 2487, Node, 288, ... {LastWrite={0x76e17e9c,0x1c73999}, TitleIdx=0, Name= (350, 2487, Node, 288, ... {LastWrite={0x76e17e9c,0x1c73999}, TitleIdx=0, Name="{FC2AAD0F-D03A-453b-91A6-77CADEE26282}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01857 456 NtEnumerateKey (350, 2486, Node, 288, ... {LastWrite={0x5fba68a0,0x1c73999}, TitleIdx=0, Name= (350, 2486, Node, 288, ... {LastWrite={0x5fba68a0,0x1c73999}, TitleIdx=0, Name="{fc220ad8-a72a-4ee8-926e-0b7ad152a020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01858 456 NtEnumerateKey (350, 2485, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name= (350, 2485, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name="{FC1880CF-83B9-43A7-A066-C44CE8C82583}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01859 456 NtEnumerateKey (350, 2484, Node, 288, ... {LastWrite={0x57a02ac4,0x1c73999}, TitleIdx=0, Name= (350, 2484, Node, 288, ... {LastWrite={0x57a02ac4,0x1c73999}, TitleIdx=0, Name="{FBF23B42-E3F0-101B-8488-00AA003E56F8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01860 456 NtEnumerateKey (350, 2483, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 2483, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{FBF23B41-E3F0-101B-8488-00AA003E56F8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01861 456 NtEnumerateKey (350, 2482, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name= (350, 2482, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name="{FBF23B40-E3F0-101B-8488-00AA003E56F8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01862 456 NtEnumerateKey (350, 2481, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name= (350, 2481, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name="{fbeb8a05-beee-4442-804e-409d6c4515e9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01863 456 NtEnumerateKey (350, 2480, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name= (350, 2480, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name="{FB7199AB-79BF-11d2-8D94-0000F875C541}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01864 456 NtEnumerateKey (350, 2479, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name= (350, 2479, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name="{FB2FF4EB-337E-11D1-9B37-00C04FB9514E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01865 456 NtEnumerateKey (350, 2478, Node, 288, ... {LastWrite={0xaea3d6ae,0x1c738c7}, TitleIdx=0, Name= (350, 2478, Node, 288, ... {LastWrite={0xaea3d6ae,0x1c738c7}, TitleIdx=0, Name="{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01866 456 NtEnumerateKey (350, 2477, Node, 288, ... {LastWrite={0x700de2ea,0x1c73999}, TitleIdx=0, Name= (350, 2477, Node, 288, ... {LastWrite={0x700de2ea,0x1c73999}, TitleIdx=0, Name="{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01867 456 NtEnumerateKey (350, 2476, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 2476, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{FADCBBF9-F8C1-4c5b-989C-E77C7264BD30}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01868 456 NtEnumerateKey (350, 2475, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2475, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{FAC1D9C0-0296-11D1-A840-00A0C92C9D5D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01869 456 NtEnumerateKey (350, 2474, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name= (350, 2474, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name="{FA7C375B-66A7-4280-879D-FD459C84BB02}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01870 456 NtEnumerateKey (350, 2473, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name= (350, 2473, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name="{FA77A74E-E109-11D0-AD6E-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01871 456 NtEnumerateKey (350, 2472, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 2472, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{FA3E1D55-16DF-446d-872E-BD04D4F39C93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01872 456 NtEnumerateKey (350, 2471, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 2471, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{FA06375D-F0A4-4A47-AD8D-148595F1E0B8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01873 456 NtEnumerateKey (350, 2470, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name= (350, 2470, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name="{F9EFBEC2-4302-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01874 456 NtEnumerateKey (350, 2469, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name= (350, 2469, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name="{F9AE8981-7E52-11d0-8964-00C04FD611D7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01875 456 NtEnumerateKey (350, 2468, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name= (350, 2468, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name="{F9AE8980-7E52-11d0-8964-00C04FD611D7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01876 456 NtEnumerateKey (350, 2467, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name= (350, 2467, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name="{F9A4D260-0342-4672-8007-0882F75DAFC7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01877 456 NtEnumerateKey (350, 2466, Node, 288, ... {LastWrite={0x201e6b74,0x1c73999}, TitleIdx=0, Name= (350, 2466, Node, 288, ... {LastWrite={0x201e6b74,0x1c73999}, TitleIdx=0, Name="{F9A3F405-B068-11CF-858C-95A235C0163A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01878 456 NtEnumerateKey (350, 2465, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name= (350, 2465, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{F99D135A-C07C-449E-965C-7DBB7C554A51}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01879 456 NtEnumerateKey (350, 2464, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 2464, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{F97B8A60-31AD-11CF-B2DE-00DD01101B85}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01880 456 NtEnumerateKey (350, 2463, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 2463, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{F963C5CF-A659-4A93-9638-CAF3CD277D13}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01881 456 NtEnumerateKey (350, 2462, Node, 288, ... {LastWrite={0x267f9646,0x1c73999}, TitleIdx=0, Name= (350, 2462, Node, 288, ... {LastWrite={0x267f9646,0x1c73999}, TitleIdx=0, Name="{f95e1664-7979-44f2-a040-496e7f500043}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01882 456 NtEnumerateKey (350, 2461, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name= (350, 2461, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name="{F94159A3-88DA-42bd-ABD4-7576168F4D71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01883 456 NtEnumerateKey (350, 2460, Node, 288, ... {LastWrite={0x60982352,0x1c73999}, TitleIdx=0, Name= (350, 2460, Node, 288, ... {LastWrite={0x60982352,0x1c73999}, TitleIdx=0, Name="{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01884 456 NtEnumerateKey (350, 2459, Node, 288, ... {LastWrite={0x6095c0f8,0x1c73999}, TitleIdx=0, Name= (350, 2459, Node, 288, ... {LastWrite={0x6095c0f8,0x1c73999}, TitleIdx=0, Name="{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01885 456 NtEnumerateKey (350, 2458, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2458, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{f92e8c40-3d33-11d2-b1aa-080036a75b03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01886 456 NtEnumerateKey (350, 2457, Node, 288, ... {LastWrite={0x72729f44,0x1c73999}, TitleIdx=0, Name= (350, 2457, Node, 288, ... {LastWrite={0x72729f44,0x1c73999}, TitleIdx=0, Name="{f89e9e58-bd2f-4008-9ac2-0f816c09f4ee}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01887 456 NtEnumerateKey (350, 2456, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name= (350, 2456, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name="{f83cbf45-1c37-4ca1-a78a-28bcb91642ec}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01888 456 NtEnumerateKey (350, 2455, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 2455, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{F8388A40-D5BB-11D0-BE5A-0080C706568E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01889 456 NtEnumerateKey (350, 2454, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2454, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{F8383852-FCD3-11d1-A6B9-006097DF5BD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01890 456 NtEnumerateKey (350, 2453, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2453, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01891 456 NtEnumerateKey (350, 2452, Node, 288, ... {LastWrite={0x6e147062,0x1c73999}, TitleIdx=0, Name= (350, 2452, Node, 288, ... {LastWrite={0x6e147062,0x1c73999}, TitleIdx=0, Name="{F7F4A1B6-8E87-452f-A2D7-3077F508DBC0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01892 456 NtEnumerateKey (350, 2451, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 2451, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01893 456 NtEnumerateKey (350, 2450, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name= (350, 2450, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name="{F7A4F1DA-96C3-4BCF-BEB3-1D9FFDE89EE9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01894 456 NtEnumerateKey (350, 2449, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name= (350, 2449, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name="{F778C6B4-C08B-11D2-976C-00C04F79DB19}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01895 456 NtEnumerateKey (350, 2448, Node, 288, ... {LastWrite={0x931fe190,0x1c7399c}, TitleIdx=0, Name= (350, 2448, Node, 288, ... {LastWrite={0x931fe190,0x1c7399c}, TitleIdx=0, Name="{F6FD0A13-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01896 456 NtEnumerateKey (350, 2447, Node, 288, ... {LastWrite={0x931d7f36,0x1c7399c}, TitleIdx=0, Name= (350, 2447, Node, 288, ... {LastWrite={0x931d7f36,0x1c7399c}, TitleIdx=0, Name="{F6FD0A11-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01897 456 NtEnumerateKey (350, 2446, Node, 288, ... {LastWrite={0x931fe190,0x1c7399c}, TitleIdx=0, Name= (350, 2446, Node, 288, ... {LastWrite={0x931fe190,0x1c7399c}, TitleIdx=0, Name="{F6FD0A0F-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01898 456 NtEnumerateKey (350, 2445, Node, 288, ... {LastWrite={0x9324a644,0x1c7399c}, TitleIdx=0, Name= (350, 2445, Node, 288, ... {LastWrite={0x9324a644,0x1c7399c}, TitleIdx=0, Name="{F6FD0A0E-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01899 456 NtEnumerateKey (350, 2444, Node, 288, ... {LastWrite={0x932243ea,0x1c7399c}, TitleIdx=0, Name= (350, 2444, Node, 288, ... {LastWrite={0x932243ea,0x1c7399c}, TitleIdx=0, Name="{F6FD0A01-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01900 456 NtEnumerateKey (350, 2443, Node, 288, ... {LastWrite={0x932243ea,0x1c7399c}, TitleIdx=0, Name= (350, 2443, Node, 288, ... {LastWrite={0x932243ea,0x1c7399c}, TitleIdx=0, Name="{F6FD0A00-43F0-11D1-BE58-00A0C90A4335}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01901 456 NtEnumerateKey (350, 2442, Node, 288, ... {LastWrite={0x5f66f652,0x1c73999}, TitleIdx=0, Name= (350, 2442, Node, 288, ... {LastWrite={0x5f66f652,0x1c73999}, TitleIdx=0, Name="{F6D90F16-9C73-11D3-B32E-00C04F990BB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01902 456 NtEnumerateKey (350, 2441, Node, 288, ... {LastWrite={0x5f6493f8,0x1c73999}, TitleIdx=0, Name= (350, 2441, Node, 288, ... {LastWrite={0x5f6493f8,0x1c73999}, TitleIdx=0, Name="{F6D90F14-9C73-11D3-B32E-00C04F990BB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01903 456 NtEnumerateKey (350, 2440, Node, 288, ... {LastWrite={0x5f5d6cea,0x1c73999}, TitleIdx=0, Name= (350, 2440, Node, 288, ... {LastWrite={0x5f5d6cea,0x1c73999}, TitleIdx=0, Name="{F6D90F12-9C73-11D3-B32E-00C04F990BB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01904 456 NtEnumerateKey (350, 2439, Node, 288, ... {LastWrite={0x5f58a836,0x1c73999}, TitleIdx=0, Name= (350, 2439, Node, 288, ... {LastWrite={0x5f58a836,0x1c73999}, TitleIdx=0, Name="{F6D90F11-9C73-11D3-B32E-00C04F990BB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01905 456 NtEnumerateKey (350, 2438, Node, 288, ... {LastWrite={0x5f5645dc,0x1c73999}, TitleIdx=0, Name= (350, 2438, Node, 288, ... {LastWrite={0x5f5645dc,0x1c73999}, TitleIdx=0, Name="{F6D90F10-9C73-11D3-B32E-00C04F990BB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01906 456 NtEnumerateKey (350, 2437, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name= (350, 2437, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name="{F6B9C580-F60F-479F-886D-A01D09175673}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01907 456 NtEnumerateKey (350, 2436, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name= (350, 2436, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name="{F6402585-08FB-498E-877D-2D8EDF05219F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01908 456 NtEnumerateKey (350, 2435, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 2435, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{F61FFEC1-754F-11d0-80CA-00AA005B4383}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01909 456 NtEnumerateKey (350, 2434, Node, 288, ... {LastWrite={0x2188d0e4,0x1c73999}, TitleIdx=0, Name= (350, 2434, Node, 288, ... {LastWrite={0x2188d0e4,0x1c73999}, TitleIdx=0, Name="{F618C514-DFB8-11D1-A2CF-00805FC79235}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01910 456 NtEnumerateKey (350, 2433, Node, 288, ... {LastWrite={0x26570e4c,0x1c73999}, TitleIdx=0, Name= (350, 2433, Node, 288, ... {LastWrite={0x26570e4c,0x1c73999}, TitleIdx=0, Name="{F5F75737-2843-4F22-933D-C76A97CDA62F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01911 456 NtEnumerateKey (350, 2432, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2432, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{f5d1badf-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01912 456 NtEnumerateKey (350, 2431, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2431, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121F4-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01913 456 NtEnumerateKey (350, 2430, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2430, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121F3-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01914 456 NtEnumerateKey (350, 2429, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2429, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121F0-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01915 456 NtEnumerateKey (350, 2428, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2428, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121EF-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01916 456 NtEnumerateKey (350, 2427, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2427, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121EE-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01917 456 NtEnumerateKey (350, 2426, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2426, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F5D121ED-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01918 456 NtEnumerateKey (350, 2425, Node, 288, ... {LastWrite={0x63610270,0x1c73999}, TitleIdx=0, Name= (350, 2425, Node, 288, ... {LastWrite={0x63610270,0x1c73999}, TitleIdx=0, Name="{F5BE8BD2-7DE6-11D0-91FE-00C04FD701A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01919 456 NtEnumerateKey (350, 2424, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 2424, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{F5B63656-069D-4E80-B4FD-9E0DB16604D8}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 2424, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{F5B63656-069D-4E80-B4FD-9E0DB16604D8}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 01920 456 NtEnumerateKey (350, 2423, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name= (350, 2423, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name="{F5A55D36-8750-432C-AB52-AD49A016EABC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01921 456 NtEnumerateKey (350, 2422, Node, 288, ... {LastWrite={0x25e96220,0x1c73999}, TitleIdx=0, Name= (350, 2422, Node, 288, ... {LastWrite={0x25e96220,0x1c73999}, TitleIdx=0, Name="{F55C5B4C-517D-11D1-AB57-00C04FD9159E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01922 456 NtEnumerateKey (350, 2421, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 2421, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{F5175861-2688-11d0-9C5E-00AA00A45957}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01923 456 NtEnumerateKey (350, 2420, Node, 288, ... {LastWrite={0x6df571d0,0x1c73999}, TitleIdx=0, Name= (350, 2420, Node, 288, ... {LastWrite={0x6df571d0,0x1c73999}, TitleIdx=0, Name="{F515306E-0156-11d2-81EA-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01924 456 NtEnumerateKey (350, 2419, Node, 288, ... {LastWrite={0x6df571d0,0x1c73999}, TitleIdx=0, Name= (350, 2419, Node, 288, ... {LastWrite={0x6df571d0,0x1c73999}, TitleIdx=0, Name="{F515306D-0156-11d2-81EA-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01925 456 NtEnumerateKey (350, 2418, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2418, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f41-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01926 456 NtEnumerateKey (350, 2417, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2417, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f40-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01927 456 NtEnumerateKey (350, 2416, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2416, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f3f-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01928 456 NtEnumerateKey (350, 2415, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2415, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f39-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01929 456 NtEnumerateKey (350, 2414, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 2414, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{f5078f37-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01930 456 NtEnumerateKey (350, 2413, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 2413, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{f5078f36-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01931 456 NtEnumerateKey (350, 2412, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2412, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f35-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01932 456 NtEnumerateKey (350, 2411, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 2411, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{f5078f34-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01933 456 NtEnumerateKey (350, 2410, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2410, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f33-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01934 456 NtEnumerateKey (350, 2409, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2409, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f32-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01935 456 NtEnumerateKey (350, 2408, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name= (350, 2408, Node, 288, ... {LastWrite={0x5f8ab998,0x1c73999}, TitleIdx=0, Name="{f5078f31-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01936 456 NtEnumerateKey (350, 2407, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name= (350, 2407, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name="{f5078f29-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01937 456 NtEnumerateKey (350, 2406, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name= (350, 2406, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name="{f5078f28-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01938 456 NtEnumerateKey (350, 2405, Node, 288, ... {LastWrite={0x5f707fba,0x1c73999}, TitleIdx=0, Name= (350, 2405, Node, 288, ... {LastWrite={0x5f707fba,0x1c73999}, TitleIdx=0, Name="{f5078f27-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01939 456 NtEnumerateKey (350, 2404, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name= (350, 2404, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name="{f5078f26-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01940 456 NtEnumerateKey (350, 2403, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name= (350, 2403, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name="{f5078f25-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01941 456 NtEnumerateKey (350, 2402, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name= (350, 2402, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name="{f5078f22-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01942 456 NtEnumerateKey (350, 2401, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name= (350, 2401, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name="{f5078f21-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01943 456 NtEnumerateKey (350, 2400, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name= (350, 2400, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name="{f5078f20-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01944 456 NtEnumerateKey (350, 2399, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name= (350, 2399, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name="{f5078f1f-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01945 456 NtEnumerateKey (350, 2398, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name= (350, 2398, Node, 288, ... {LastWrite={0x5f4f1ece,0x1c73999}, TitleIdx=0, Name="{f5078f1e-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01946 456 NtEnumerateKey (350, 2397, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name= (350, 2397, Node, 288, ... {LastWrite={0x5f518128,0x1c73999}, TitleIdx=0, Name="{f5078f1d-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01947 456 NtEnumerateKey (350, 2396, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name= (350, 2396, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name="{f5078f1c-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01948 456 NtEnumerateKey (350, 2395, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name= (350, 2395, Node, 288, ... {LastWrite={0x5f4cbc74,0x1c73999}, TitleIdx=0, Name="{f5078f1b-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01949 456 NtEnumerateKey (350, 2394, Node, 288, ... {LastWrite={0x5f5fcf44,0x1c73999}, TitleIdx=0, Name= (350, 2394, Node, 288, ... {LastWrite={0x5f5fcf44,0x1c73999}, TitleIdx=0, Name="{f5078f19-c551-11d3-89b9-0000f81fe221}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01950 456 NtEnumerateKey (350, 2393, Node, 288, ... {LastWrite={0xce6aaee6,0x1c7a31a}, TitleIdx=0, Name= (350, 2393, Node, 288, ... {LastWrite={0xce6aaee6,0x1c7a31a}, TitleIdx=0, Name="{F4817E4B-04B6-11D3-8862-00C04F72F303}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 2393, Node, 288, ... {LastWrite={0xce6aaee6,0x1c7a31a}, TitleIdx=0, Name="{F4817E4B-04B6-11D3-8862-00C04F72F303}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 01951 456 NtEnumerateKey (350, 2392, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 2392, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{F46316E4-FB1B-46eb-AEDF-9520BFBB916A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01952 456 NtEnumerateKey (350, 2391, Node, 288, ... {LastWrite={0x5fcd7b70,0x1c73999}, TitleIdx=0, Name= (350, 2391, Node, 288, ... {LastWrite={0x5fcd7b70,0x1c73999}, TitleIdx=0, Name="{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01953 456 NtEnumerateKey (350, 2390, Node, 288, ... {LastWrite={0x5fcd7b70,0x1c73999}, TitleIdx=0, Name= (350, 2390, Node, 288, ... {LastWrite={0x5fcd7b70,0x1c73999}, TitleIdx=0, Name="{f414c261-6ac0-11cf-b6d1-00aa00bbbb58}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01954 456 NtEnumerateKey (350, 2389, Node, 288, ... {LastWrite={0x5fcb1916,0x1c73999}, TitleIdx=0, Name= (350, 2389, Node, 288, ... {LastWrite={0x5fcb1916,0x1c73999}, TitleIdx=0, Name="{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01955 456 NtEnumerateKey (350, 2388, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name= (350, 2388, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name="{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01956 456 NtEnumerateKey (350, 2387, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name= (350, 2387, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name="{f3da0dc0-9cc8-11d0-a599-00c04fd64437}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01957 456 NtEnumerateKey (350, 2386, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2386, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{F3D3F924-11FC-11D3-BB97-00C04F8EE6C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01958 456 NtEnumerateKey (350, 2385, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 2385, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{F3CFF120-9C41-11D1-863D-0060089F6007}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01959 456 NtEnumerateKey (350, 2384, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name= (350, 2384, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name="{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01960 456 NtEnumerateKey (350, 2383, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name= (350, 2383, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name="{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01961 456 NtEnumerateKey (350, 2382, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name= (350, 2382, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name="{F3A614DC-ABE0-11d2-A441-00C04F795683}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01962 456 NtEnumerateKey (350, 2381, Node, 288, ... {LastWrite={0x5e952762,0x1c73999}, TitleIdx=0, Name= (350, 2381, Node, 288, ... {LastWrite={0x5e952762,0x1c73999}, TitleIdx=0, Name="{f39a0dc0-9cc8-11d0-a599-00c04fd64433}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01963 456 NtEnumerateKey (350, 2380, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2380, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01964 456 NtEnumerateKey (350, 2379, Node, 288, ... {LastWrite={0x758304ee,0x1c73999}, TitleIdx=0, Name= (350, 2379, Node, 288, ... {LastWrite={0x758304ee,0x1c73999}, TitleIdx=0, Name="{f371728a-6052-4d47-827c-d039335dfe0a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01965 456 NtEnumerateKey (350, 2378, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 2378, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{F3368374-CF19-11d0-B93D-00A0C90312e1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01966 456 NtEnumerateKey (350, 2377, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name= (350, 2377, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name="{F3364BA0-65B9-11CE-A9BA-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01967 456 NtEnumerateKey (350, 2376, Node, 288, ... {LastWrite={0x25748ee6,0x1c73999}, TitleIdx=0, Name= (350, 2376, Node, 288, ... {LastWrite={0x25748ee6,0x1c73999}, TitleIdx=0, Name="{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01968 456 NtEnumerateKey (350, 2375, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 2375, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{F2C3FAAE-C8AC-11D0-BCDB-00C04FD8D5B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01969 456 NtEnumerateKey (350, 2374, Node, 288, ... {LastWrite={0x767af97e,0x1c73999}, TitleIdx=0, Name= (350, 2374, Node, 288, ... {LastWrite={0x767af97e,0x1c73999}, TitleIdx=0, Name="{F2BF2C90-405F-11D3-BB39-00A0C93CA73A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01970 456 NtEnumerateKey (350, 2373, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2373, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{f270c64a-ffb8-4ae4-85fe-3a75e5347966}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01971 456 NtEnumerateKey (350, 2372, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 2372, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{f26a669a-bcbb-4e37-abf9-7325da15f931}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01972 456 NtEnumerateKey (350, 2371, Node, 288, ... {LastWrite={0x6b4b9144,0x1c73999}, TitleIdx=0, Name= (350, 2371, Node, 288, ... {LastWrite={0x6b4b9144,0x1c73999}, TitleIdx=0, Name="{F25BC7B7-C60D-4FB9-AAE4-3CA0F6C7038A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01973 456 NtEnumerateKey (350, 2370, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 2370, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{f2468580-af8a-11d0-8212-00c04fc32c45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01974 456 NtEnumerateKey (350, 2369, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name= (350, 2369, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name="{F1E752C3-FD72-11D0-AEF6-00C04FB6DD2C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01975 456 NtEnumerateKey (350, 2368, Node, 288, ... {LastWrite={0x777c7776,0x1c73999}, TitleIdx=0, Name= (350, 2368, Node, 288, ... {LastWrite={0x777c7776,0x1c73999}, TitleIdx=0, Name="{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01976 456 NtEnumerateKey (350, 2367, Node, 288, ... {LastWrite={0xae9a4d46,0x1c738c7}, TitleIdx=0, Name= (350, 2367, Node, 288, ... {LastWrite={0xae9a4d46,0x1c738c7}, TitleIdx=0, Name="{F1ABE2B5-C073-4dba-B6EB-FD7A5111DD8F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01977 456 NtEnumerateKey (350, 2366, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name= (350, 2366, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name="{F17E8672-C3B4-11D1-870B-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01978 456 NtEnumerateKey (350, 2365, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name= (350, 2365, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name="{F14E6B48-FBCA-4d32-BD79-7829D4F7E43B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01979 456 NtEnumerateKey (350, 2364, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name= (350, 2364, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name="{F137E241-0092-4575-976A-D3E33980BB26}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01980 456 NtEnumerateKey (350, 2363, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 2363, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{F117831B-C052-11d1-B1C0-00C04FC2F3EF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01981 456 NtEnumerateKey (350, 2362, Node, 288, ... {LastWrite={0x6274f9a2,0x1c73999}, TitleIdx=0, Name= (350, 2362, Node, 288, ... {LastWrite={0x6274f9a2,0x1c73999}, TitleIdx=0, Name="{F1029E5B-CB5B-11D0-8D59-00C04FD91AC0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01982 456 NtEnumerateKey (350, 2361, Node, 288, ... {LastWrite={0x6db9d706,0x1c73999}, TitleIdx=0, Name= (350, 2361, Node, 288, ... {LastWrite={0x6db9d706,0x1c73999}, TitleIdx=0, Name="{f0a45e65-84a6-4543-baf7-491d38de8e8b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01983 456 NtEnumerateKey (350, 2360, Node, 288, ... {LastWrite={0x2616aece,0x1c73999}, TitleIdx=0, Name= (350, 2360, Node, 288, ... {LastWrite={0x2616aece,0x1c73999}, TitleIdx=0, Name="{F0975AFE-5C7F-11D2-8B74-00104B2AFB41}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01984 456 NtEnumerateKey (350, 2359, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name= (350, 2359, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name="{F088DE73-BDD0-4E3C-81F8-6D32F4FE9D28}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01985 456 NtEnumerateKey (350, 2358, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 2358, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{f07f3920-7b8c-11cf-9be8-00aa004b9986}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01986 456 NtEnumerateKey (350, 2357, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name= (350, 2357, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name="{F0285374-DFF1-11D3-B433-00C04F8ECD78}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01987 456 NtEnumerateKey (350, 2356, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 2356, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{F020E586-5264-11d1-A532-0000F8757D7E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01988 456 NtEnumerateKey (350, 2355, Node, 288, ... {LastWrite={0x1df08530,0x1c73999}, TitleIdx=0, Name= (350, 2355, Node, 288, ... {LastWrite={0x1df08530,0x1c73999}, TitleIdx=0, Name="{F0152790-D56E-4445-850E-4F3117DB740C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01989 456 NtEnumerateKey (350, 2354, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name= (350, 2354, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name="{F00B4404-F8F1-11CE-A5B6-00AA00680C3F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01990 456 NtEnumerateKey (350, 2353, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name= (350, 2353, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name="{effc2928-37b1-11d2-a3c1-00c04fb1782a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01991 456 NtEnumerateKey (350, 2352, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name= (350, 2352, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name="{EFE6629C-81F7-4281-BD91-C9D604A95AF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01992 456 NtEnumerateKey (350, 2351, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name= (350, 2351, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name="{EFCA3D92-DFD8-4672-A603-7420894BAD98}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01993 456 NtEnumerateKey (350, 2350, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name= (350, 2350, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name="{EFA24E64-B078-11d0-89E4-00C04FC9E26E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01994 456 NtEnumerateKey (350, 2349, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 2349, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{EFA24E63-B078-11d0-89E4-00C04FC9E26E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01995 456 NtEnumerateKey (350, 2348, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name= (350, 2348, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name="{EFA24E62-B078-11d0-89E4-00C04FC9E26E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01996 456 NtEnumerateKey (350, 2347, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name= (350, 2347, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name="{EFA24E61-B078-11d0-89E4-00C04FC9E26E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01997 456 NtEnumerateKey (350, 2346, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name= (350, 2346, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name="{EF985E71-D5C7-42D4-BA4D-2D073E2E96F4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01998 456 NtEnumerateKey (350, 2345, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2345, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 01999 456 NtEnumerateKey (350, 2344, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name= (350, 2344, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name="{ef636393-f343-11d0-9477-00c04fd36226}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02000 456 NtEnumerateKey (350, 2343, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name= (350, 2343, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name="{ef636392-f343-11d0-9477-00c04fd36226}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02001 456 NtEnumerateKey (350, 2342, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name= (350, 2342, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name="{ef636391-f343-11d0-9477-00c04fd36226}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02002 456 NtEnumerateKey (350, 2341, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name= (350, 2341, Node, 288, ... {LastWrite={0x5857bfd6,0x1c73999}, TitleIdx=0, Name="{ef636390-f343-11d0-9477-00c04fd36226}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02003 456 NtEnumerateKey (350, 2340, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name= (350, 2340, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name="{ef43ecfe-2ab9-4632-bf21-58909dd177f0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02004 456 NtEnumerateKey (350, 2339, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name= (350, 2339, Node, 288, ... {LastWrite={0x9850f1fc,0x1c738c7}, TitleIdx=0, Name="{EF411752-3736-4CB4-9C8C-8EF4CCB58EFE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02005 456 NtEnumerateKey (350, 2338, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name= (350, 2338, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name="{EF3E932C-D40B-4F51-8CCF-3F98F1B29D5D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02006 456 NtEnumerateKey (350, 2337, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name= (350, 2337, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name="{EF114C90-CD1D-484E-96E5-09CFAF912A21}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02007 456 NtEnumerateKey (350, 2336, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name= (350, 2336, Node, 288, ... {LastWrite={0x6bd83c02,0x1c73999}, TitleIdx=0, Name="{EF011F79-4000-406D-87AF-BFFB3FC39D57}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02008 456 NtEnumerateKey (350, 2335, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 2335, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{eeed4c20-7f1b-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02009 456 NtEnumerateKey (350, 2334, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name= (350, 2334, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name="{EED36461-9EA5-11D3-9BD1-0080C7150A74}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02010 456 NtEnumerateKey (350, 2333, Node, 288, ... {LastWrite={0x253691c2,0x1c73999}, TitleIdx=0, Name= (350, 2333, Node, 288, ... {LastWrite={0x253691c2,0x1c73999}, TitleIdx=0, Name="{eec97550-47a9-11cf-b952-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02011 456 NtEnumerateKey (350, 2332, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2332, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{EEC6993A-B3FD-11D2-A916-00C04FB98638}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02012 456 NtEnumerateKey (350, 2331, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name= (350, 2331, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name="{EEBD2F15-87EE-4f93-856F-6AD7E31787B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02013 456 NtEnumerateKey (350, 2330, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name= (350, 2330, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name="{EE4DA6A4-8C52-4a63-BBB8-97C93D7E1B6C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02014 456 NtEnumerateKey (350, 2329, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name= (350, 2329, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name="{EE0B9CA0-A81E-11D3-9BD1-0080C7150A74}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02015 456 NtEnumerateKey (350, 2328, Node, 288, ... {LastWrite={0x5fde2be6,0x1c73999}, TitleIdx=0, Name= (350, 2328, Node, 288, ... {LastWrite={0x5fde2be6,0x1c73999}, TitleIdx=0, Name="{EE09B103-97E0-11CF-978F-00A02463E06F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02016 456 NtEnumerateKey (350, 2327, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name= (350, 2327, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name="{ed9d80b9-d157-457b-9192-0e7280313bf0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02017 456 NtEnumerateKey (350, 2326, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name= (350, 2326, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name="{ED999FF5-223A-4052-8ECE-0B10C8DBAA39}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02018 456 NtEnumerateKey (350, 2325, Node, 288, ... {LastWrite={0x5e7d4fde,0x1c73999}, TitleIdx=0, Name= (350, 2325, Node, 288, ... {LastWrite={0x5e7d4fde,0x1c73999}, TitleIdx=0, Name="{ED8C108E-4349-11D2-91A4-00C04F7969E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02019 456 NtEnumerateKey (350, 2324, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 2324, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{ED51D12E-511F-4999-8DCD-C2BAC91BE86E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02020 456 NtEnumerateKey (350, 2323, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name= (350, 2323, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name="{ED3DC730-31E5-4108-AD8A-3962C930425E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02021 456 NtEnumerateKey (350, 2322, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name= (350, 2322, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name="{ECF03A33-103D-11d2-854D-006008059367}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02022 456 NtEnumerateKey (350, 2321, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name= (350, 2321, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name="{ECF03A32-103D-11d2-854D-006008059367}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02023 456 NtEnumerateKey (350, 2320, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name= (350, 2320, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name="{ECDB03D2-6E99-11d2-875F-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02024 456 NtEnumerateKey (350, 2319, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 2319, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{ECD4FC4F-521C-11D0-B792-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02025 456 NtEnumerateKey (350, 2318, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2318, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{ECD4FC4E-521C-11D0-B792-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02026 456 NtEnumerateKey (350, 2317, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2317, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{ECD4FC4D-521C-11D0-B792-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02027 456 NtEnumerateKey (350, 2316, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2316, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{ECD4FC4C-521C-11D0-B792-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02028 456 NtEnumerateKey (350, 2315, Node, 288, ... {LastWrite={0x6d797788,0x1c73999}, TitleIdx=0, Name= (350, 2315, Node, 288, ... {LastWrite={0x6d797788,0x1c73999}, TitleIdx=0, Name="{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02029 456 NtEnumerateKey (350, 2314, Node, 288, ... {LastWrite={0x21414a58,0x1c73999}, TitleIdx=0, Name= (350, 2314, Node, 288, ... {LastWrite={0x21414a58,0x1c73999}, TitleIdx=0, Name="{ecabb0c8-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02030 456 NtEnumerateKey (350, 2313, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name= (350, 2313, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name="{ecabb0c7-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02031 456 NtEnumerateKey (350, 2312, Node, 288, ... {LastWrite={0x70366ae4,0x1c73999}, TitleIdx=0, Name= (350, 2312, Node, 288, ... {LastWrite={0x70366ae4,0x1c73999}, TitleIdx=0, Name="{ECABB0C6-7F19-11D2-978E-0000F8757E2A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02032 456 NtEnumerateKey (350, 2311, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2311, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabb0c5-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02033 456 NtEnumerateKey (350, 2310, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2310, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabb0c4-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02034 456 NtEnumerateKey (350, 2309, Node, 288, ... {LastWrite={0x21b61d92,0x1c73999}, TitleIdx=0, Name= (350, 2309, Node, 288, ... {LastWrite={0x21b61d92,0x1c73999}, TitleIdx=0, Name="{ECABB0C3-7F19-11D2-978E-0000F8757E2A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02035 456 NtEnumerateKey (350, 2308, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name= (350, 2308, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name="{ecabb0c0-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02036 456 NtEnumerateKey (350, 2307, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2307, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabb0bf-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02037 456 NtEnumerateKey (350, 2306, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2306, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabb0be-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02038 456 NtEnumerateKey (350, 2305, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2305, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabb0bd-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02039 456 NtEnumerateKey (350, 2304, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2304, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabb0ac-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02040 456 NtEnumerateKey (350, 2303, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 2303, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{ecabb0ab-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02041 456 NtEnumerateKey (350, 2302, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 2302, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{ecabb0aa-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02042 456 NtEnumerateKey (350, 2301, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name= (350, 2301, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name="{ecabb0a8-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02043 456 NtEnumerateKey (350, 2300, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2300, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafd0-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02044 456 NtEnumerateKey (350, 2299, Node, 288, ... {LastWrite={0x212e3788,0x1c73999}, TitleIdx=0, Name= (350, 2299, Node, 288, ... {LastWrite={0x212e3788,0x1c73999}, TitleIdx=0, Name="{ecabafcf-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02045 456 NtEnumerateKey (350, 2298, Node, 288, ... {LastWrite={0x21414a58,0x1c73999}, TitleIdx=0, Name= (350, 2298, Node, 288, ... {LastWrite={0x21414a58,0x1c73999}, TitleIdx=0, Name="{ecabafce-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02046 456 NtEnumerateKey (350, 2297, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name= (350, 2297, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name="{ecabafcd-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02047 456 NtEnumerateKey (350, 2296, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2296, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafcc-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02048 456 NtEnumerateKey (350, 2295, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2295, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabafcb-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02049 456 NtEnumerateKey (350, 2294, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2294, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabafca-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02050 456 NtEnumerateKey (350, 2293, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2293, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabafc9-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02051 456 NtEnumerateKey (350, 2292, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2292, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabafc7-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02052 456 NtEnumerateKey (350, 2291, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2291, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabafc6-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02053 456 NtEnumerateKey (350, 2290, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2290, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabafc4-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02054 456 NtEnumerateKey (350, 2289, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name= (350, 2289, Node, 288, ... {LastWrite={0x213ee7fe,0x1c73999}, TitleIdx=0, Name="{ecabafc3-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02055 456 NtEnumerateKey (350, 2288, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2288, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabafc2-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02056 456 NtEnumerateKey (350, 2287, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2287, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafc0-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02057 456 NtEnumerateKey (350, 2286, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2286, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafbf-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02058 456 NtEnumerateKey (350, 2285, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2285, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafbe-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02059 456 NtEnumerateKey (350, 2284, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2284, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabafbc-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02060 456 NtEnumerateKey (350, 2283, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 2283, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{ecabafb9-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02061 456 NtEnumerateKey (350, 2282, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2282, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafb7-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02062 456 NtEnumerateKey (350, 2281, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2281, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafb6-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02063 456 NtEnumerateKey (350, 2280, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name= (350, 2280, Node, 288, ... {LastWrite={0x213a234a,0x1c73999}, TitleIdx=0, Name="{ecabafb5-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02064 456 NtEnumerateKey (350, 2279, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 2279, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{ecabafb4-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02065 456 NtEnumerateKey (350, 2278, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 2278, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{ecabafb3-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02066 456 NtEnumerateKey (350, 2277, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2277, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafb2-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02067 456 NtEnumerateKey (350, 2276, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2276, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafb1-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02068 456 NtEnumerateKey (350, 2275, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2275, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafb0-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02069 456 NtEnumerateKey (350, 2274, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name= (350, 2274, Node, 288, ... {LastWrite={0x213c85a4,0x1c73999}, TitleIdx=0, Name="{ecabafaf-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02070 456 NtEnumerateKey (350, 2273, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2273, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafae-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02071 456 NtEnumerateKey (350, 2272, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name= (350, 2272, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name="{ecabafad-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02072 456 NtEnumerateKey (350, 2271, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2271, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafac-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02073 456 NtEnumerateKey (350, 2270, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name= (350, 2270, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name="{ecabafab-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02074 456 NtEnumerateKey (350, 2269, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name= (350, 2269, Node, 288, ... {LastWrite={0x213099e2,0x1c73999}, TitleIdx=0, Name="{ecabafaa-7f19-11d2-978e-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02075 456 NtEnumerateKey (350, 2268, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 2268, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{ecabaec0-7f19-11d2-978E-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02076 456 NtEnumerateKey (350, 2267, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 2267, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{ecabaebf-7f19-11d2-978E-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02077 456 NtEnumerateKey (350, 2266, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 2266, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{ecabaebd-7f19-11d2-978E-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02078 456 NtEnumerateKey (350, 2265, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 2265, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{ecabaebc-7f19-11d2-978E-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02079 456 NtEnumerateKey (350, 2264, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 2264, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{ecabaebb-7f19-11d2-978E-0000f8757e2a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02080 456 NtEnumerateKey (350, 2263, Node, 288, ... {LastWrite={0x6dfefb38,0x1c73999}, TitleIdx=0, Name= (350, 2263, Node, 288, ... {LastWrite={0x6dfefb38,0x1c73999}, TitleIdx=0, Name="{EC9BA17D-60B5-462B-A6D8-14B89057E22A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02081 456 NtEnumerateKey (350, 2262, Node, 288, ... {LastWrite={0x2a5d27f6,0x1c7852f}, TitleIdx=0, Name= (350, 2262, Node, 288, ... {LastWrite={0x2a5d27f6,0x1c7852f}, TitleIdx=0, Name="{EC22770D-3343-4C56-8A8D-3E560475F655}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02082 456 NtEnumerateKey (350, 2261, Node, 288, ... {LastWrite={0x72cad646,0x1c73999}, TitleIdx=0, Name= (350, 2261, Node, 288, ... {LastWrite={0x72cad646,0x1c73999}, TitleIdx=0, Name="{EBFE7BA0-628D-11D2-AE0F-006097B01411}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02083 456 NtEnumerateKey (350, 2260, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name= (350, 2260, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name="{EBF2320A-2502-11D3-8BD1-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02084 456 NtEnumerateKey (350, 2259, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 2259, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{EBB2FF12-861A-42b6-B815-B1AF4D944916}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02085 456 NtEnumerateKey (350, 2258, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2258, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{EBB08C45-6C4A-4FDC-AE53-4EB8C4C7DB8E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02086 456 NtEnumerateKey (350, 2257, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2257, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{eba96b18-2168-11d3-898c-00e02c074f6b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02087 456 NtEnumerateKey (350, 2256, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name= (350, 2256, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name="{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02088 456 NtEnumerateKey (350, 2255, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name= (350, 2255, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name="{EB87E1BD-3233-11D2-AEC9-00C04FB68820}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02089 456 NtEnumerateKey (350, 2254, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name= (350, 2254, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name="{EB56EAE8-BA51-11d2-B121-00805FC73204}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02090 456 NtEnumerateKey (350, 2253, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name= (350, 2253, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name="{EAFDF8B3-3BE5-4E05-BF86-1E486B2FEF9D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02091 456 NtEnumerateKey (350, 2252, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name= (350, 2252, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name="{EAC8A024-21E2-4523-AD73-A71A0AA2F56A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02092 456 NtEnumerateKey (350, 2251, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name= (350, 2251, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name="{EAB841A0-9550-11CF-8C16-00805F1408F3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02093 456 NtEnumerateKey (350, 2250, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 2250, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{EAB22AC3-30C1-11CF-A7EB-0000C05BAE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02094 456 NtEnumerateKey (350, 2249, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 2249, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{EA7BAE71-FB3B-11CD-A903-00AA00510EA3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02095 456 NtEnumerateKey (350, 2248, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 2248, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{EA7BAE70-FB3B-11CD-A903-00AA00510EA3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02096 456 NtEnumerateKey (350, 2247, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name= (350, 2247, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name="{EA678830-235D-11d2-A8B6-0000F8084F96}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02097 456 NtEnumerateKey (350, 2246, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name= (350, 2246, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name="{EA502722-A23D-11D1-A7D3-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02098 456 NtEnumerateKey (350, 2245, Node, 288, ... {LastWrite={0x25ccc5e8,0x1c73999}, TitleIdx=0, Name= (350, 2245, Node, 288, ... {LastWrite={0x25ccc5e8,0x1c73999}, TitleIdx=0, Name="{EA231B91-099E-4D02-9EE7-73976D6A085F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02099 456 NtEnumerateKey (350, 2244, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name= (350, 2244, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name="{E9C8B700-88B1-11d2-8C1F-00C04FA31009}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02100 456 NtEnumerateKey (350, 2243, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2243, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{e949da38-c39d-4460-8ea7-a39152c56836}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02101 456 NtEnumerateKey (350, 2242, Node, 288, ... {LastWrite={0x1fe53304,0x1c73999}, TitleIdx=0, Name= (350, 2242, Node, 288, ... {LastWrite={0x1fe53304,0x1c73999}, TitleIdx=0, Name="{E9376CC6-121A-447e-81CF-D8BCC200007C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02102 456 NtEnumerateKey (350, 2241, Node, 288, ... {LastWrite={0x617aa2b8,0x1c73999}, TitleIdx=0, Name= (350, 2241, Node, 288, ... {LastWrite={0x617aa2b8,0x1c73999}, TitleIdx=0, Name="{E9225296-C759-11d1-A02B-00C04FB6809F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02103 456 NtEnumerateKey (350, 2240, Node, 288, ... {LastWrite={0x6d6664b8,0x1c73999}, TitleIdx=0, Name= (350, 2240, Node, 288, ... {LastWrite={0x6d6664b8,0x1c73999}, TitleIdx=0, Name="{E9218AE7-9E91-11D1-BF60-0080C7846BC0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02104 456 NtEnumerateKey (350, 2239, Node, 288, ... {LastWrite={0x585098c8,0x1c73999}, TitleIdx=0, Name= (350, 2239, Node, 288, ... {LastWrite={0x585098c8,0x1c73999}, TitleIdx=0, Name="{e8cc4cbf-fdff-11d0-b865-00a0c9081c1d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02105 456 NtEnumerateKey (350, 2238, Node, 288, ... {LastWrite={0x585098c8,0x1c73999}, TitleIdx=0, Name= (350, 2238, Node, 288, ... {LastWrite={0x585098c8,0x1c73999}, TitleIdx=0, Name="{e8cc4cbe-fdff-11d0-b865-00a0c9081c1d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02106 456 NtEnumerateKey (350, 2237, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 2237, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02107 456 NtEnumerateKey (350, 2236, Node, 288, ... {LastWrite={0x5e52658a,0x1c73999}, TitleIdx=0, Name= (350, 2236, Node, 288, ... {LastWrite={0x5e52658a,0x1c73999}, TitleIdx=0, Name="{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02108 456 NtEnumerateKey (350, 2235, Node, 288, ... {LastWrite={0x5ddff4aa,0x1c73999}, TitleIdx=0, Name= (350, 2235, Node, 288, ... {LastWrite={0x5ddff4aa,0x1c73999}, TitleIdx=0, Name="{e84fda7c-1d6a-45f6-b725-cb260c236066}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02109 456 NtEnumerateKey (350, 2234, Node, 288, ... {LastWrite={0x21650d9e,0x1c73999}, TitleIdx=0, Name= (350, 2234, Node, 288, ... {LastWrite={0x21650d9e,0x1c73999}, TitleIdx=0, Name="{E846F0A0-D367-11D1-8286-00A0C9231C29}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02110 456 NtEnumerateKey (350, 2233, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name= (350, 2233, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name="{E80353D3-677D-11d2-875E-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02111 456 NtEnumerateKey (350, 2232, Node, 288, ... {LastWrite={0x6e7d57da,0x1c73999}, TitleIdx=0, Name= (350, 2232, Node, 288, ... {LastWrite={0x6e7d57da,0x1c73999}, TitleIdx=0, Name="{E7FF1300-96A5-11D3-AC85-00C04FC2C602}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02112 456 NtEnumerateKey (350, 2231, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 2231, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02113 456 NtEnumerateKey (350, 2230, Node, 288, ... {LastWrite={0x96345d40,0x1c7853a}, TitleIdx=0, Name= (350, 2230, Node, 288, ... {LastWrite={0x96345d40,0x1c7853a}, TitleIdx=0, Name="{E7D06080-238B-11D3-80D7-00104B1F6CEA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02114 456 NtEnumerateKey (350, 2229, Node, 288, ... {LastWrite={0x59272c6c,0x1c73999}, TitleIdx=0, Name= (350, 2229, Node, 288, ... {LastWrite={0x59272c6c,0x1c73999}, TitleIdx=0, Name="{E7772804-3287-418E-9072-CF2B47238981}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 2229, Node, 288, ... {LastWrite={0x59272c6c,0x1c73999}, TitleIdx=0, Name="{E7772804-3287-418E-9072-CF2B47238981}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02115 456 NtEnumerateKey (350, 2228, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name= (350, 2228, Node, 288, ... {LastWrite={0x5abc7c30,0x1c73999}, TitleIdx=0, Name="{E773F1AF-3A65-4866-857D-846FC9C4598A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02116 456 NtEnumerateKey (350, 2227, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 2227, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{e760e244-abb3-4c3c-b925-0781c8ceb46c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02117 456 NtEnumerateKey (350, 2226, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name= (350, 2226, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name="{E7220659-8771-4CF3-8F29-BCDFFA7848C9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02118 456 NtEnumerateKey (350, 2225, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name= (350, 2225, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name="{E71B4063-3E59-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02119 456 NtEnumerateKey (350, 2224, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 2224, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{E70C92A9-4BFD-11d1-8A95-00C04FB951F3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02120 456 NtEnumerateKey (350, 2223, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 2223, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02121 456 NtEnumerateKey (350, 2222, Node, 288, ... {LastWrite={0x6e0884a0,0x1c73999}, TitleIdx=0, Name= (350, 2222, Node, 288, ... {LastWrite={0x6e0884a0,0x1c73999}, TitleIdx=0, Name="{E6E73D20-0C8A-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02122 456 NtEnumerateKey (350, 2221, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name= (350, 2221, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name="{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02123 456 NtEnumerateKey (350, 2220, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name= (350, 2220, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name="{e5df9d10-3b52-11d1-83e8-00a0c90dc849}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02124 456 NtEnumerateKey (350, 2219, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 2219, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{E5B4EAA0-B2CA-11CE-8D2B-0000E202599C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02125 456 NtEnumerateKey (350, 2218, Node, 288, ... {LastWrite={0x7006bbdc,0x1c73999}, TitleIdx=0, Name= (350, 2218, Node, 288, ... {LastWrite={0x7006bbdc,0x1c73999}, TitleIdx=0, Name="{E579AB5F-1CC4-44b4-BED9-DE0991FF0623}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02126 456 NtEnumerateKey (350, 2217, Node, 288, ... {LastWrite={0x5b65c326,0x1c73999}, TitleIdx=0, Name= (350, 2217, Node, 288, ... {LastWrite={0x5b65c326,0x1c73999}, TitleIdx=0, Name="{E56829C9-2D59-11d2-BE38-3078302C2030}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02127 456 NtEnumerateKey (350, 2216, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2216, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E4BCAC13-7F99-4908-9A8E-74E3BF24B6E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02128 456 NtEnumerateKey (350, 2215, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name= (350, 2215, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name="{E4B29F9D-D390-480b-92FD-7DDB47101D71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02129 456 NtEnumerateKey (350, 2214, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name= (350, 2214, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name="{E49741E9-93A8-4AB1-8E96-BF4482282E9C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02130 456 NtEnumerateKey (350, 2213, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2213, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{E436EBB8-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02131 456 NtEnumerateKey (350, 2212, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2212, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{E436EBB7-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02132 456 NtEnumerateKey (350, 2211, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2211, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{E436EBB6-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02133 456 NtEnumerateKey (350, 2210, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2210, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{E436EBB5-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02134 456 NtEnumerateKey (350, 2209, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2209, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{E436EBB3-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02135 456 NtEnumerateKey (350, 2208, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2208, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{E436EBB2-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02136 456 NtEnumerateKey (350, 2207, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2207, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{E436EBB1-524F-11CE-9F53-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02137 456 NtEnumerateKey (350, 2206, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name= (350, 2206, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name="{E423AF7C-FC2D-11d2-B126-00805FC73204}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02138 456 NtEnumerateKey (350, 2205, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name= (350, 2205, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name="{E4206432-01A1-4BEE-B3E1-3702C8EDC574}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02139 456 NtEnumerateKey (350, 2204, Node, 288, ... {LastWrite={0x58745c0e,0x1c73999}, TitleIdx=0, Name= (350, 2204, Node, 288, ... {LastWrite={0x58745c0e,0x1c73999}, TitleIdx=0, Name="{E3E1D967-0829-48AC-B3AD-C5AE4CA171C4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02140 456 NtEnumerateKey (350, 2203, Node, 288, ... {LastWrite={0x58745c0e,0x1c73999}, TitleIdx=0, Name= (350, 2203, Node, 288, ... {LastWrite={0x58745c0e,0x1c73999}, TitleIdx=0, Name="{E3E1D966-0829-48AC-B3AD-C5AE4CA171C4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02141 456 NtEnumerateKey (350, 2202, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2202, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E3BF1126-BA29-4850-AF33-5BDB654F4774}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02142 456 NtEnumerateKey (350, 2201, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 2201, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02143 456 NtEnumerateKey (350, 2200, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name= (350, 2200, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name="{E3A3B1D9-5675-43c0-BF04-37BE11939FB7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02144 456 NtEnumerateKey (350, 2199, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 2199, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{E369A160-F3C2-11D0-91D4-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02145 456 NtEnumerateKey (350, 2198, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name= (350, 2198, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name="{E31E87C4-86EA-4940-9B8A-5BD5D179A737}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02146 456 NtEnumerateKey (350, 2197, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 2197, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{E30629D2-27E5-11CE-875D-00608CB78066}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02147 456 NtEnumerateKey (350, 2196, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 2196, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{E30629D1-27E5-11CE-875D-00608CB78066}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02148 456 NtEnumerateKey (350, 2195, Node, 288, ... {LastWrite={0x265970a6,0x1c73999}, TitleIdx=0, Name= (350, 2195, Node, 288, ... {LastWrite={0x265970a6,0x1c73999}, TitleIdx=0, Name="{E2CBCB87-9C07-4523-A78F-061499C83987}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02149 456 NtEnumerateKey (350, 2194, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 2194, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{e2b07466-5250-4fc2-8949-46bf91f8cad0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02150 456 NtEnumerateKey (350, 2193, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2193, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E2AE5372-5D40-11D2-960E-00C04F8EE628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02151 456 NtEnumerateKey (350, 2192, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 2192, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{E2510970-F137-11CE-8B67-00AA00A3F1A6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02152 456 NtEnumerateKey (350, 2191, Node, 288, ... {LastWrite={0xaee1d3d2,0x1c738c7}, TitleIdx=0, Name= (350, 2191, Node, 288, ... {LastWrite={0xaee1d3d2,0x1c738c7}, TitleIdx=0, Name="{E211B736-43FD-11D1-9EFB-0000F8757FCD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02153 456 NtEnumerateKey (350, 2190, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name= (350, 2190, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name="{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02154 456 NtEnumerateKey (350, 2189, Node, 288, ... {LastWrite={0x93165828,0x1c7399c}, TitleIdx=0, Name= (350, 2189, Node, 288, ... {LastWrite={0x93165828,0x1c7399c}, TitleIdx=0, Name="{E1D2BF42-A96B-11d1-9C6B-0000F875AC61}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02155 456 NtEnumerateKey (350, 2188, Node, 288, ... {LastWrite={0x931b1cdc,0x1c7399c}, TitleIdx=0, Name= (350, 2188, Node, 288, ... {LastWrite={0x931b1cdc,0x1c7399c}, TitleIdx=0, Name="{E1D2BF40-A96B-11d1-9C6B-0000F875AC61}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02156 456 NtEnumerateKey (350, 2187, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name= (350, 2187, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name="{E1A59E35-4202-42e3-81EC-75D33A5CA04C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02157 456 NtEnumerateKey (350, 2186, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name= (350, 2186, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name="{E18AF75A-08AF-11D3-B64A-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02158 456 NtEnumerateKey (350, 2185, Node, 288, ... {LastWrite={0x5aae2e14,0x1c73999}, TitleIdx=0, Name= (350, 2185, Node, 288, ... {LastWrite={0x5aae2e14,0x1c73999}, TitleIdx=0, Name="{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02159 456 NtEnumerateKey (350, 2184, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2184, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E16C0594-128F-11D1-97E4-00C04FB9618A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02160 456 NtEnumerateKey (350, 2183, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2183, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E16C0593-128F-11D1-97E4-00C04FB9618A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02161 456 NtEnumerateKey (350, 2182, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 2182, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{E1618F52-BF15-484A-86D2-183400E66A2B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02162 456 NtEnumerateKey (350, 2181, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 2181, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{E13EF4E4-D2F2-11d0-9816-00C04FD91972}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02163 456 NtEnumerateKey (350, 2180, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2180, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E13B6688-3F39-11D0-96F6-00A0C9191601}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02164 456 NtEnumerateKey (350, 2179, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2179, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{E13B6686-3F39-11D0-96F6-00A0C9191601}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02165 456 NtEnumerateKey (350, 2178, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name= (350, 2178, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name="{E137B0D0-7A93-11D2-8CEA-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02166 456 NtEnumerateKey (350, 2177, Node, 288, ... {LastWrite={0x634203de,0x1c73999}, TitleIdx=0, Name= (350, 2177, Node, 288, ... {LastWrite={0x634203de,0x1c73999}, TitleIdx=0, Name="{E126F8FF-A7AF-11D0-B88A-00C04FD424B9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02167 456 NtEnumerateKey (350, 2176, Node, 288, ... {LastWrite={0x6e7630cc,0x1c73999}, TitleIdx=0, Name= (350, 2176, Node, 288, ... {LastWrite={0x6e7630cc,0x1c73999}, TitleIdx=0, Name="{E1211353-8E94-11D1-8808-00C04FC2C602}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02168 456 NtEnumerateKey (350, 2175, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 2175, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{E10A508F-1699-40ba-A0DD-9DEB2D4DCAC3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02169 456 NtEnumerateKey (350, 2174, Node, 288, ... {LastWrite={0x6e631dfc,0x1c73999}, TitleIdx=0, Name= (350, 2174, Node, 288, ... {LastWrite={0x6e631dfc,0x1c73999}, TitleIdx=0, Name="{E0FA581D-2188-11D2-A739-00C04FA377A1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02170 456 NtEnumerateKey (350, 2173, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name= (350, 2173, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name="{E0F158E1-CB04-11d0-BD4E-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02171 456 NtEnumerateKey (350, 2172, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2172, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{E0E11A09-5CB8-4B6C-8332-E00720A168F2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02172 456 NtEnumerateKey (350, 2171, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 2171, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{E0DD6CAB-2D10-11d2-8F1A-0000F87ABD16}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02173 456 NtEnumerateKey (350, 2170, Node, 288, ... {LastWrite={0x253691c2,0x1c73999}, TitleIdx=0, Name= (350, 2170, Node, 288, ... {LastWrite={0x253691c2,0x1c73999}, TitleIdx=0, Name="{e0ca5340-4534-11cf-b952-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02174 456 NtEnumerateKey (350, 2169, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name= (350, 2169, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name="{E0B8F398-BB08-4298-87F0-34502693902E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02175 456 NtEnumerateKey (350, 2168, Node, 288, ... {LastWrite={0x76f22f12,0x1c73999}, TitleIdx=0, Name= (350, 2168, Node, 288, ... {LastWrite={0x76f22f12,0x1c73999}, TitleIdx=0, Name="{e0a56635-2fea-4d6b-8afe-0bbb823502cf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02176 456 NtEnumerateKey (350, 2167, Node, 288, ... {LastWrite={0x6ffad01a,0x1c73999}, TitleIdx=0, Name= (350, 2167, Node, 288, ... {LastWrite={0x6ffad01a,0x1c73999}, TitleIdx=0, Name="{DFE49CFE-CD09-11D2-9643-00C04f79ADF0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02177 456 NtEnumerateKey (350, 2166, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name= (350, 2166, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name="{DFD74844-990B-4410-9DA0-2848EFA85D14}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02178 456 NtEnumerateKey (350, 2165, Node, 288, ... {LastWrite={0x58876ede,0x1c73999}, TitleIdx=0, Name= (350, 2165, Node, 288, ... {LastWrite={0x58876ede,0x1c73999}, TitleIdx=0, Name="{dfc8bdc0-e378-11d0-9b30-0080c7e9fe95}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02179 456 NtEnumerateKey (350, 2164, Node, 288, ... {LastWrite={0x586d3500,0x1c73999}, TitleIdx=0, Name= (350, 2164, Node, 288, ... {LastWrite={0x586d3500,0x1c73999}, TitleIdx=0, Name="{DFA22B8E-E68D-11d0-97E4-00C04FC2AD98}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02180 456 NtEnumerateKey (350, 2163, Node, 288, ... {LastWrite={0x6d0bcb5c,0x1c73999}, TitleIdx=0, Name= (350, 2163, Node, 288, ... {LastWrite={0x6d0bcb5c,0x1c73999}, TitleIdx=0, Name="{DF0DAEF2-A289-11D1-8697-006008B0E5D2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02181 456 NtEnumerateKey (350, 2162, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2162, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{DF0B3D60-548F-101B-8E65-08002B2BD119}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02182 456 NtEnumerateKey (350, 2161, Node, 288, ... {LastWrite={0x5f1121aa,0x1c73999}, TitleIdx=0, Name= (350, 2161, Node, 288, ... {LastWrite={0x5f1121aa,0x1c73999}, TitleIdx=0, Name="{dee35071-506b-11cf-b1aa-00aa00b8de95}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02183 456 NtEnumerateKey (350, 2160, Node, 288, ... {LastWrite={0x5f1121aa,0x1c73999}, TitleIdx=0, Name= (350, 2160, Node, 288, ... {LastWrite={0x5f1121aa,0x1c73999}, TitleIdx=0, Name="{dee35070-506b-11cf-b1aa-00aa00b8de95}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02184 456 NtEnumerateKey (350, 2159, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name= (350, 2159, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name="{DEA8AFA2-CC85-11D0-9CE2-0080C7221EBD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02185 456 NtEnumerateKey (350, 2158, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name= (350, 2158, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name="{DEA8AFA1-CC85-11D0-9CE2-0080C7221EBD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02186 456 NtEnumerateKey (350, 2157, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name= (350, 2157, Node, 288, ... {LastWrite={0xf293c050,0x1c73998}, TitleIdx=0, Name="{DEA8AFA0-CC85-11D0-9CE2-0080C7221EBD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02187 456 NtEnumerateKey (350, 2156, Node, 288, ... {LastWrite={0x58319a36,0x1c73999}, TitleIdx=0, Name= (350, 2156, Node, 288, ... {LastWrite={0x58319a36,0x1c73999}, TitleIdx=0, Name="{DE88C160-FF2C-11D1-BB6F-00C04FAE22DA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02188 456 NtEnumerateKey (350, 2155, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name= (350, 2155, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name="{DE75D012-7A65-11D2-8CEA-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02189 456 NtEnumerateKey (350, 2154, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 2154, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{DE4874D2-FEEE-11d1-A0B0-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02190 456 NtEnumerateKey (350, 2153, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 2153, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{DE4874D1-FEEE-11d1-A0B0-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02191 456 NtEnumerateKey (350, 2152, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 2152, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{DDE5783A-88B9-11d2-84AD-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02192 456 NtEnumerateKey (350, 2151, Node, 288, ... {LastWrite={0x76789724,0x1c73999}, TitleIdx=0, Name= (350, 2151, Node, 288, ... {LastWrite={0x76789724,0x1c73999}, TitleIdx=0, Name="{DDDA102E-0E17-11D3-A2E2-00C04F79F88E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02193 456 NtEnumerateKey (350, 2150, Node, 288, ... {LastWrite={0x5df3077a,0x1c73999}, TitleIdx=0, Name= (350, 2150, Node, 288, ... {LastWrite={0x5df3077a,0x1c73999}, TitleIdx=0, Name="{DD522ACC-F821-461A-A407-50B198B896DC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02194 456 NtEnumerateKey (350, 2149, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 2149, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{DD313E04-FEFF-11d1-8ECD-0000F87A470C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02195 456 NtEnumerateKey (350, 2148, Node, 288, ... {LastWrite={0x58a66d70,0x1c73999}, TitleIdx=0, Name= (350, 2148, Node, 288, ... {LastWrite={0x58a66d70,0x1c73999}, TitleIdx=0, Name="{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02196 456 NtEnumerateKey (350, 2147, Node, 288, ... {LastWrite={0x6e16d2bc,0x1c73999}, TitleIdx=0, Name= (350, 2147, Node, 288, ... {LastWrite={0x6e16d2bc,0x1c73999}, TitleIdx=0, Name="{DD13DE77-D3BA-42D4-B5C6-7745FA4E2D4B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02197 456 NtEnumerateKey (350, 2146, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 2146, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{DCF33DF4-B510-439F-832A-16B6B514F2A7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02198 456 NtEnumerateKey (350, 2145, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2145, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{dccc0bed-6066-11d1-8c13-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02199 456 NtEnumerateKey (350, 2144, Node, 288, ... {LastWrite={0x726dda90,0x1c73999}, TitleIdx=0, Name= (350, 2144, Node, 288, ... {LastWrite={0x726dda90,0x1c73999}, TitleIdx=0, Name="{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02200 456 NtEnumerateKey (350, 2143, Node, 288, ... {LastWrite={0x255a5508,0x1c73999}, TitleIdx=0, Name= (350, 2143, Node, 288, ... {LastWrite={0x255a5508,0x1c73999}, TitleIdx=0, Name="{DC923725-0FDD-45E1-AE74-EA09182E739B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02201 456 NtEnumerateKey (350, 2142, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2142, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{DC626A64-D684-4627-83CB-44420ABDBD1A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02202 456 NtEnumerateKey (350, 2141, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2141, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{DBFCA500-8C31-11D0-AA2C-00A0C92749A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02203 456 NtEnumerateKey (350, 2140, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 2140, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{DBD71B6B-F717-4A61-A914-2337BC50B0D6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02204 456 NtEnumerateKey (350, 2139, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2139, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{DBCE2480-C732-101B-BE72-BA78E9AD5B27}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02205 456 NtEnumerateKey (350, 2138, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name= (350, 2138, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name="{DB5D1FF5-09D7-11D1-BB10-00C04FC9A3A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02206 456 NtEnumerateKey (350, 2137, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name= (350, 2137, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name="{DB5D1FF4-09D7-11D1-BB10-00C04FC9A3A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02207 456 NtEnumerateKey (350, 2136, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name= (350, 2136, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name="{DAFD8210-5711-4B91-9FE3-F75B7AE279BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02208 456 NtEnumerateKey (350, 2135, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2135, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{DA93E903-C843-11D2-A084-00C04F8EF9B5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02209 456 NtEnumerateKey (350, 2134, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name= (350, 2134, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name="{DA825E1B-6830-43D7-835D-0B5AD82956A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02210 456 NtEnumerateKey (350, 2133, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name= (350, 2133, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name="{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02211 456 NtEnumerateKey (350, 2132, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name= (350, 2132, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name="{D9F9C262-6231-11D3-8B1D-00C04FB6BD3D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02212 456 NtEnumerateKey (350, 2131, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2131, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D9F6EE60-58C9-458B-88E1-2F908FD7F87C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02213 456 NtEnumerateKey (350, 2130, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 2130, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{d99f7670-7f1a-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02214 456 NtEnumerateKey (350, 2129, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 2129, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{D969A300-E7FF-11d0-A93B-00A0C90F2719}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02215 456 NtEnumerateKey (350, 2128, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 2128, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{d912f8cf-0396-4915-884e-fb425d32943b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02216 456 NtEnumerateKey (350, 2127, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name= (350, 2127, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name="{D8BD2030-6FC9-11D0-864F-00AA006809D9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02217 456 NtEnumerateKey (350, 2126, Node, 288, ... {LastWrite={0x603fec50,0x1c73999}, TitleIdx=0, Name= (350, 2126, Node, 288, ... {LastWrite={0x603fec50,0x1c73999}, TitleIdx=0, Name="{D86A8E9B-F53F-45AD-8C49-0A0A5230DE28}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02218 456 NtEnumerateKey (350, 2125, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name= (350, 2125, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name="{d851f103-8c90-4321-aff0-58ba5bd421c2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02219 456 NtEnumerateKey (350, 2124, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 2124, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{D82BE2B0-5764-11D0-A96E-00C04FD705A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02220 456 NtEnumerateKey (350, 2123, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 2123, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{D7FCB63B-5C55-11D1-8F00-00C04FC2C17B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02221 456 NtEnumerateKey (350, 2122, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2122, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E086-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02222 456 NtEnumerateKey (350, 2121, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2121, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E084-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02223 456 NtEnumerateKey (350, 2120, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2120, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E082-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02224 456 NtEnumerateKey (350, 2119, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2119, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E080-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02225 456 NtEnumerateKey (350, 2118, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2118, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E07E-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02226 456 NtEnumerateKey (350, 2117, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2117, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E07C-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02227 456 NtEnumerateKey (350, 2116, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2116, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E07A-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02228 456 NtEnumerateKey (350, 2115, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2115, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E079-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02229 456 NtEnumerateKey (350, 2114, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2114, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E075-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02230 456 NtEnumerateKey (350, 2113, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2113, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7D6E073-DCCD-11d0-AA4B-0060970DEBAE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02231 456 NtEnumerateKey (350, 2112, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2112, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D7B70EE0-4340-11CF-B063-0020AFC2CD35}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02232 456 NtEnumerateKey (350, 2111, Node, 288, ... {LastWrite={0x630ff27c,0x1c73999}, TitleIdx=0, Name= (350, 2111, Node, 288, ... {LastWrite={0x630ff27c,0x1c73999}, TitleIdx=0, Name="{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02233 456 NtEnumerateKey (350, 2110, Node, 288, ... {LastWrite={0x7689479a,0x1c73999}, TitleIdx=0, Name= (350, 2110, Node, 288, ... {LastWrite={0x7689479a,0x1c73999}, TitleIdx=0, Name="{D79CF2ED-9CF3-46dd-979F-B9938CA3CA73}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02234 456 NtEnumerateKey (350, 2109, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 2109, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{D76E2820-1563-11CF-AC98-00AA004C0FA9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02235 456 NtEnumerateKey (350, 2108, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 2108, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{D71EE747-F455-4804-9DF6-2ED81025F2C1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02236 456 NtEnumerateKey (350, 2107, Node, 288, ... {LastWrite={0x603b279c,0x1c73999}, TitleIdx=0, Name= (350, 2107, Node, 288, ... {LastWrite={0x603b279c,0x1c73999}, TitleIdx=0, Name="{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02237 456 NtEnumerateKey (350, 2106, Node, 288, ... {LastWrite={0x5dfef33c,0x1c73999}, TitleIdx=0, Name= (350, 2106, Node, 288, ... {LastWrite={0x5dfef33c,0x1c73999}, TitleIdx=0, Name="{D707877E-4D9C-11d2-8784-F6E920524153}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02238 456 NtEnumerateKey (350, 2105, Node, 288, ... {LastWrite={0x6019c6b0,0x1c73999}, TitleIdx=0, Name= (350, 2105, Node, 288, ... {LastWrite={0x6019c6b0,0x1c73999}, TitleIdx=0, Name="{D6FEDB1D-CF21-4BD9-AF3B-C5468E9C6684}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02239 456 NtEnumerateKey (350, 2104, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2104, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D6AD10F3-70AB-41E1-96B3-4C36E35D333C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02240 456 NtEnumerateKey (350, 2103, Node, 288, ... {LastWrite={0x71da08c4,0x1c73999}, TitleIdx=0, Name= (350, 2103, Node, 288, ... {LastWrite={0x71da08c4,0x1c73999}, TitleIdx=0, Name="{D68BD5B0-D6AA-11d0-9EDA-00A02488FCDE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02241 456 NtEnumerateKey (350, 2102, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 2102, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{D68AF00A-29CB-43FA-8504-CE99A996D9EA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02242 456 NtEnumerateKey (350, 2101, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 2101, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{D677D09E-B2C5-4487-803A-F469964F4B33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02243 456 NtEnumerateKey (350, 2100, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name= (350, 2100, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name="{D66D6F99-CDAA-11D0-B822-00C04FC9B31F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02244 456 NtEnumerateKey (350, 2099, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name= (350, 2099, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name="{D63A5850-8F16-11CF-9F47-00AA00BF345C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02245 456 NtEnumerateKey (350, 2098, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name= (350, 2098, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name="{D6277990-4C6A-11CF-8D87-00AA0060F5BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02246 456 NtEnumerateKey (350, 2097, Node, 288, ... {LastWrite={0x71f442a2,0x1c73999}, TitleIdx=0, Name= (350, 2097, Node, 288, ... {LastWrite={0x71f442a2,0x1c73999}, TitleIdx=0, Name="{D61A27C6-8F53-11D0-BFA0-00A024151983}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02247 456 NtEnumerateKey (350, 2096, Node, 288, ... {LastWrite={0xf1ef3e0e,0x1c73998}, TitleIdx=0, Name= (350, 2096, Node, 288, ... {LastWrite={0xf1ef3e0e,0x1c73998}, TitleIdx=0, Name="{D6015EC3-FA16-4813-9CA1-DA204574F5DA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02248 456 NtEnumerateKey (350, 2095, Node, 288, ... {LastWrite={0x5a74f5a4,0x1c73999}, TitleIdx=0, Name= (350, 2095, Node, 288, ... {LastWrite={0x5a74f5a4,0x1c73999}, TitleIdx=0, Name="{D5DE8D20-5BB8-11D1-A1E3-00A0C90F2731}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02249 456 NtEnumerateKey (350, 2094, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name= (350, 2094, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name="{D5C66BE1-C209-11d1-8DEC-00C04FC2E0C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02250 456 NtEnumerateKey (350, 2093, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name= (350, 2093, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name="{D5978650-5B9F-11D1-8DD2-00AA004ABD5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02251 456 NtEnumerateKey (350, 2092, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name= (350, 2092, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name="{D5978640-5B9F-11D1-8DD2-00AA004ABD5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02252 456 NtEnumerateKey (350, 2091, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name= (350, 2091, Node, 288, ... {LastWrite={0x5f4be31e,0x1c7399c}, TitleIdx=0, Name="{D5978630-5B9F-11D1-8DD2-00AA004ABD5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02253 456 NtEnumerateKey (350, 2090, Node, 288, ... {LastWrite={0x5f471e6a,0x1c7399c}, TitleIdx=0, Name= (350, 2090, Node, 288, ... {LastWrite={0x5f471e6a,0x1c7399c}, TitleIdx=0, Name="{D5978620-5B9F-11D1-8DD2-00AA004ABD5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02254 456 NtEnumerateKey (350, 2089, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name= (350, 2089, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name="{D5778AE7-43DE-11D0-9171-00AA00C18068}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02255 456 NtEnumerateKey (350, 2088, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name= (350, 2088, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name="{D5753BBB-C5A8-4F50-9D81-210BAB0C5FB6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02256 456 NtEnumerateKey (350, 2087, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name= (350, 2087, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name="{D54EEE56-AAAB-11D0-9E1D-00A0C922E6EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02257 456 NtEnumerateKey (350, 2086, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name= (350, 2086, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name="{D524927D-6C08-46BF-86AF-391534D779D3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02258 456 NtEnumerateKey (350, 2085, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 2085, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{D51BD5AE-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02259 456 NtEnumerateKey (350, 2084, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2084, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A5-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02260 456 NtEnumerateKey (350, 2083, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2083, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A4-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02261 456 NtEnumerateKey (350, 2082, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2082, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A3-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02262 456 NtEnumerateKey (350, 2081, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2081, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A2-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02263 456 NtEnumerateKey (350, 2080, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2080, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A1-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02264 456 NtEnumerateKey (350, 2079, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 2079, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{D51BD5A0-7548-11CF-A520-0080C77EF58A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02265 456 NtEnumerateKey (350, 2078, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 2078, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{D502D4A3-03E6-4EAE-A14E-69606CA63430}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02266 456 NtEnumerateKey (350, 2077, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2077, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D485DDC0-49C6-11d1-8E56-00A0C92C9D5D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02267 456 NtEnumerateKey (350, 2076, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name= (350, 2076, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name="{D45FD31E-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02268 456 NtEnumerateKey (350, 2075, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name= (350, 2075, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name="{D45FD31D-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02269 456 NtEnumerateKey (350, 2074, Node, 288, ... {LastWrite={0x637d9ea8,0x1c73999}, TitleIdx=0, Name= (350, 2074, Node, 288, ... {LastWrite={0x637d9ea8,0x1c73999}, TitleIdx=0, Name="{D45FD31C-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02270 456 NtEnumerateKey (350, 2073, Node, 288, ... {LastWrite={0x635ea016,0x1c73999}, TitleIdx=0, Name= (350, 2073, Node, 288, ... {LastWrite={0x635ea016,0x1c73999}, TitleIdx=0, Name="{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02271 456 NtEnumerateKey (350, 2072, Node, 288, ... {LastWrite={0x636a8bd8,0x1c73999}, TitleIdx=0, Name= (350, 2072, Node, 288, ... {LastWrite={0x636a8bd8,0x1c73999}, TitleIdx=0, Name="{D45FD301-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02272 456 NtEnumerateKey (350, 2071, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name= (350, 2071, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name="{D45FD300-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02273 456 NtEnumerateKey (350, 2070, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name= (350, 2070, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name="{D45FD2FF-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02274 456 NtEnumerateKey (350, 2069, Node, 288, ... {LastWrite={0x636cee32,0x1c73999}, TitleIdx=0, Name= (350, 2069, Node, 288, ... {LastWrite={0x636cee32,0x1c73999}, TitleIdx=0, Name="{D45FD2FC-5C6E-11D1-9EC1-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02275 456 NtEnumerateKey (350, 2068, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name= (350, 2068, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name="{D45CF2C7-48CF-4234-86E2-4559C32FAD1A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02276 456 NtEnumerateKey (350, 2067, Node, 288, ... {LastWrite={0x5dfef33c,0x1c73999}, TitleIdx=0, Name= (350, 2067, Node, 288, ... {LastWrite={0x5dfef33c,0x1c73999}, TitleIdx=0, Name="{D4480A50-BA28-11d1-8E75-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02277 456 NtEnumerateKey (350, 2066, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name= (350, 2066, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name="{D3F5B8E6-9B78-4A4C-94EA-CA2397B663D3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02278 456 NtEnumerateKey (350, 2065, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name= (350, 2065, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name="{D3EDC72C-8125-11D3-9A79-00C04F8EFB70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02279 456 NtEnumerateKey (350, 2064, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name= (350, 2064, Node, 288, ... {LastWrite={0x98535456,0x1c738c7}, TitleIdx=0, Name="{D3E34B21-9D75-101A-8C3D-00AA001A1652}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02280 456 NtEnumerateKey (350, 2063, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name= (350, 2063, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name="{D3952B77-2D22-4B72-8DF4-BA267A9C12D0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02281 456 NtEnumerateKey (350, 2062, Node, 288, ... {LastWrite={0x5f50a7d2,0x1c7399c}, TitleIdx=0, Name= (350, 2062, Node, 288, ... {LastWrite={0x5f50a7d2,0x1c7399c}, TitleIdx=0, Name="{D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02282 456 NtEnumerateKey (350, 2061, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2061, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{D3588AB0-0781-11CE-B03A-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02283 456 NtEnumerateKey (350, 2060, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name= (350, 2060, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name="{D31B6A3F-9350-40DE-A3FC-A7EDEB9B7C63}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02284 456 NtEnumerateKey (350, 2059, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name= (350, 2059, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name="{D30BCC65-60E8-11D1-A7CE-00A0C913F73C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02285 456 NtEnumerateKey (350, 2058, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name= (350, 2058, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name="{D2D79DF7-3400-11d0-B40B-00AA005FF586}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02286 456 NtEnumerateKey (350, 2057, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name= (350, 2057, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name="{D2D79DF5-3400-11d0-B40B-00AA005FF586}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02287 456 NtEnumerateKey (350, 2056, Node, 288, ... {LastWrite={0x2673aa84,0x1c73999}, TitleIdx=0, Name= (350, 2056, Node, 288, ... {LastWrite={0x2673aa84,0x1c73999}, TitleIdx=0, Name="{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02288 456 NtEnumerateKey (350, 2055, Node, 288, ... {LastWrite={0x58319a36,0x1c73999}, TitleIdx=0, Name= (350, 2055, Node, 288, ... {LastWrite={0x58319a36,0x1c73999}, TitleIdx=0, Name="{D2D139E3-B6CA-11d1-9F31-00C04FC29D52}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02289 456 NtEnumerateKey (350, 2054, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name= (350, 2054, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name="{D2AC2898-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02290 456 NtEnumerateKey (350, 2053, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name= (350, 2053, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name="{D2AC2897-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02291 456 NtEnumerateKey (350, 2052, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name= (350, 2052, Node, 288, ... {LastWrite={0x6ba165ec,0x1c73999}, TitleIdx=0, Name="{D2AC2896-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02292 456 NtEnumerateKey (350, 2051, Node, 288, ... {LastWrite={0x6b9a3ede,0x1c73999}, TitleIdx=0, Name= (350, 2051, Node, 288, ... {LastWrite={0x6b9a3ede,0x1c73999}, TitleIdx=0, Name="{D2AC2894-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02293 456 NtEnumerateKey (350, 2050, Node, 288, ... {LastWrite={0x6bb21662,0x1c73999}, TitleIdx=0, Name= (350, 2050, Node, 288, ... {LastWrite={0x6bb21662,0x1c73999}, TitleIdx=0, Name="{D2AC2892-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02294 456 NtEnumerateKey (350, 2049, Node, 288, ... {LastWrite={0x6b9f0392,0x1c73999}, TitleIdx=0, Name= (350, 2049, Node, 288, ... {LastWrite={0x6b9f0392,0x1c73999}, TitleIdx=0, Name="{D2AC2890-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02295 456 NtEnumerateKey (350, 2048, Node, 288, ... {LastWrite={0x6b9f0392,0x1c73999}, TitleIdx=0, Name= (350, 2048, Node, 288, ... {LastWrite={0x6b9f0392,0x1c73999}, TitleIdx=0, Name="{D2AC288F-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02296 456 NtEnumerateKey (350, 2047, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name= (350, 2047, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name="{D2AC288E-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02297 456 NtEnumerateKey (350, 2046, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name= (350, 2046, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name="{D2AC288D-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02298 456 NtEnumerateKey (350, 2045, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name= (350, 2045, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name="{D2AC288C-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02299 456 NtEnumerateKey (350, 2044, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name= (350, 2044, Node, 288, ... {LastWrite={0x6bb93d70,0x1c73999}, TitleIdx=0, Name="{D2AC288B-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02300 456 NtEnumerateKey (350, 2043, Node, 288, ... {LastWrite={0x6bb6db16,0x1c73999}, TitleIdx=0, Name= (350, 2043, Node, 288, ... {LastWrite={0x6bb6db16,0x1c73999}, TitleIdx=0, Name="{D2AC288A-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02301 456 NtEnumerateKey (350, 2042, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name= (350, 2042, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name="{D2AC2888-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02302 456 NtEnumerateKey (350, 2041, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name= (350, 2041, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name="{D2AC2887-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02303 456 NtEnumerateKey (350, 2040, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name= (350, 2040, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name="{D2AC2886-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02304 456 NtEnumerateKey (350, 2039, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name= (350, 2039, Node, 288, ... {LastWrite={0x6baaef54,0x1c73999}, TitleIdx=0, Name="{D2AC2885-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02305 456 NtEnumerateKey (350, 2038, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name= (350, 2038, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name="{D2AC2884-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02306 456 NtEnumerateKey (350, 2037, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name= (350, 2037, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name="{D2AC2883-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02307 456 NtEnumerateKey (350, 2036, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name= (350, 2036, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name="{D2AC2882-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02308 456 NtEnumerateKey (350, 2035, Node, 288, ... {LastWrite={0x6ba62aa0,0x1c73999}, TitleIdx=0, Name= (350, 2035, Node, 288, ... {LastWrite={0x6ba62aa0,0x1c73999}, TitleIdx=0, Name="{D2AC2881-B39B-11D1-8704-00600893B1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02309 456 NtEnumerateKey (350, 2034, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name= (350, 2034, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name="{D2923B86-15F1-46FF-A19A-DE825F919576}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02310 456 NtEnumerateKey (350, 2033, Node, 288, ... {LastWrite={0x597d0114,0x1c73999}, TitleIdx=0, Name= (350, 2033, Node, 288, ... {LastWrite={0x597d0114,0x1c73999}, TitleIdx=0, Name="{D27CDB70-AE6D-11cf-96B8-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02311 456 NtEnumerateKey (350, 2032, Node, 288, ... {LastWrite={0x597d0114,0x1c73999}, TitleIdx=0, Name= (350, 2032, Node, 288, ... {LastWrite={0x597d0114,0x1c73999}, TitleIdx=0, Name="{D27CDB6E-AE6D-11cf-96B8-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02312 456 NtEnumerateKey (350, 2031, Node, 288, ... {LastWrite={0x2624fcea,0x1c73999}, TitleIdx=0, Name= (350, 2031, Node, 288, ... {LastWrite={0x2624fcea,0x1c73999}, TitleIdx=0, Name="{D269BF5C-D9C1-11D3-B38F-00105A1F473A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02313 456 NtEnumerateKey (350, 2030, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 2030, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{D25E0260-AAB7-48CB-A192-4D73D2FD375F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02314 456 NtEnumerateKey (350, 2029, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name= (350, 2029, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name="{d2423620-51a0-11d2-9caf-0060b0ec3d39}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02315 456 NtEnumerateKey (350, 2028, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name= (350, 2028, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name="{D21C0432-07CD-11D3-BD3F-00C04F6EA5AE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02316 456 NtEnumerateKey (350, 2027, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name= (350, 2027, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name="{D20EA4E1-3957-11d2-A40B-0C5020524153}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02317 456 NtEnumerateKey (350, 2026, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name= (350, 2026, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name="{D20EA4E1-3957-11d2-A40B-0C5020524152}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02318 456 NtEnumerateKey (350, 2025, Node, 288, ... {LastWrite={0x6de25f00,0x1c73999}, TitleIdx=0, Name= (350, 2025, Node, 288, ... {LastWrite={0x6de25f00,0x1c73999}, TitleIdx=0, Name="{D1FE6762-FC48-11D0-883A-3C8B00C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02319 456 NtEnumerateKey (350, 2024, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name= (350, 2024, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name="{D1EB6D20-8923-11d0-9D97-00A0C90A43CB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02320 456 NtEnumerateKey (350, 2023, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name= (350, 2023, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name="{D1C5A1E7-CC47-4E32-BDD2-4B3C5FC50AF5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02321 456 NtEnumerateKey (350, 2022, Node, 288, ... {LastWrite={0x60129fa2,0x1c73999}, TitleIdx=0, Name= (350, 2022, Node, 288, ... {LastWrite={0x60129fa2,0x1c73999}, TitleIdx=0, Name="{D1AE835C-9D92-492F-80B4-43356F75038C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02322 456 NtEnumerateKey (350, 2021, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 2021, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{D17506C3-6B26-11D0-8914-00C04FC2A0CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02323 456 NtEnumerateKey (350, 2020, Node, 288, ... {LastWrite={0xae8e6184,0x1c738c7}, TitleIdx=0, Name= (350, 2020, Node, 288, ... {LastWrite={0xae8e6184,0x1c738c7}, TitleIdx=0, Name="{D1621129-45C4-41AD-A1D1-AF7EAFABEEDC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02324 456 NtEnumerateKey (350, 2019, Node, 288, ... {LastWrite={0xae493d52,0x1c738c7}, TitleIdx=0, Name= (350, 2019, Node, 288, ... {LastWrite={0xae493d52,0x1c738c7}, TitleIdx=0, Name="{D13E3F25-1688-45A0-9743-759EB35CDF9A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02325 456 NtEnumerateKey (350, 2018, Node, 288, ... {LastWrite={0x7555b840,0x1c73999}, TitleIdx=0, Name= (350, 2018, Node, 288, ... {LastWrite={0x7555b840,0x1c73999}, TitleIdx=0, Name="{D1063C57-F968-4d6e-BAB7-EE8C8782D53E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02326 456 NtEnumerateKey (350, 2017, Node, 288, ... {LastWrite={0x76e8a5aa,0x1c73999}, TitleIdx=0, Name= (350, 2017, Node, 288, ... {LastWrite={0x76e8a5aa,0x1c73999}, TitleIdx=0, Name="{D058BFC9-55D4-11D3-9A62-00C04F8EFB70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02327 456 NtEnumerateKey (350, 2016, Node, 288, ... {LastWrite={0x76e8a5aa,0x1c73999}, TitleIdx=0, Name= (350, 2016, Node, 288, ... {LastWrite={0x76e8a5aa,0x1c73999}, TitleIdx=0, Name="{D058BFC5-55D4-11D3-9A62-00C04F8EFB70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02328 456 NtEnumerateKey (350, 2015, Node, 288, ... {LastWrite={0x21a30ac2,0x1c73999}, TitleIdx=0, Name= (350, 2015, Node, 288, ... {LastWrite={0x21a30ac2,0x1c73999}, TitleIdx=0, Name="{D0565000-9DF4-11D1-A281-00C04FCA0AA7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02329 456 NtEnumerateKey (350, 2014, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name= (350, 2014, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name="{D02AAC50-027E-11D3-9D8E-00C04F72D980}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02330 456 NtEnumerateKey (350, 2013, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 2013, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{D01BC8E2-70AD-4976-9612-21B37ED5C8E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02331 456 NtEnumerateKey (350, 2012, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name= (350, 2012, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name="{CFF49D53-EE51-49F2-A807-7E3DF4EA36E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02332 456 NtEnumerateKey (350, 2011, Node, 288, ... {LastWrite={0x5dcce1da,0x1c73999}, TitleIdx=0, Name= (350, 2011, Node, 288, ... {LastWrite={0x5dcce1da,0x1c73999}, TitleIdx=0, Name="{CFCCC7A0-A282-11D1-9082-006008059382}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02333 456 NtEnumerateKey (350, 2010, Node, 288, ... {LastWrite={0x5e788b2a,0x1c73999}, TitleIdx=0, Name= (350, 2010, Node, 288, ... {LastWrite={0x5e788b2a,0x1c73999}, TitleIdx=0, Name="{CFC399AF-D876-11d0-9C10-00C04FC99C8E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02334 456 NtEnumerateKey (350, 2009, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 2009, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{CFBFAE00-17A6-11D0-99CB-00C04FD64497}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02335 456 NtEnumerateKey (350, 2008, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 2008, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{cfb16474-0a2e-48dc-88ce-8c0adb7e5e46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02336 456 NtEnumerateKey (350, 2007, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 2007, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{CFADAC85-E12C-11D1-B34C-00C04F990D54}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02337 456 NtEnumerateKey (350, 2006, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name= (350, 2006, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name="{CF948561-EDE8-11CE-941E-008029004347}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02338 456 NtEnumerateKey (350, 2005, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name= (350, 2005, Node, 288, ... {LastWrite={0x2595efd2,0x1c73999}, TitleIdx=0, Name="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02339 456 NtEnumerateKey (350, 2004, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 2004, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{CF49D4E0-1115-11CE-B03A-0020AF0BA770}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02340 456 NtEnumerateKey (350, 2003, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name= (350, 2003, Node, 288, ... {LastWrite={0x9855b6b0,0x1c738c7}, TitleIdx=0, Name="{CF3D2E50-53F2-11D2-960C-00C04F8EE628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02341 456 NtEnumerateKey (350, 2002, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 2002, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{CF0F2F7C-F7BF-11d0-900D-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02342 456 NtEnumerateKey (350, 2001, Node, 288, ... {LastWrite={0x6b957a2a,0x1c73999}, TitleIdx=0, Name= (350, 2001, Node, 288, ... {LastWrite={0x6b957a2a,0x1c73999}, TitleIdx=0, Name="{CEBC955E-58AF-11D2-A30A-00A0C903492B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02343 456 NtEnumerateKey (350, 2000, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 2000, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{CE69CC1E-1EC0-4847-9C0D-D2F2D80D07CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02344 456 NtEnumerateKey (350, 1999, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name= (350, 1999, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name="{CE682BA0-C554-43f7-99C6-2F00FE46C8BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02345 456 NtEnumerateKey (350, 1998, Node, 288, ... {LastWrite={0x777c7776,0x1c73999}, TitleIdx=0, Name= (350, 1998, Node, 288, ... {LastWrite={0x777c7776,0x1c73999}, TitleIdx=0, Name="{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02346 456 NtEnumerateKey (350, 1997, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1997, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{CE292861-FC88-11D0-9E69-00C04FD7C15B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02347 456 NtEnumerateKey (350, 1996, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name= (350, 1996, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name="{CDEBB919-379A-488A-8765-F53CFD36DE40}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02348 456 NtEnumerateKey (350, 1995, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name= (350, 1995, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name="{CDE2B192-1DED-11d3-A1D1-005004602752}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02349 456 NtEnumerateKey (350, 1994, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name= (350, 1994, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name="{CDBEC9C0-7A68-11D1-88F9-0080C7D771BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02350 456 NtEnumerateKey (350, 1993, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 1993, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{CDBD8D00-C193-11D0-BD4E-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02351 456 NtEnumerateKey (350, 1992, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 1992, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{CDA42200-BD88-11d0-BD4E-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02352 456 NtEnumerateKey (350, 1991, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1991, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{CD8743A1-3736-11D0-9E69-00C04FD7C15B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02353 456 NtEnumerateKey (350, 1990, Node, 288, ... {LastWrite={0x602f3bda,0x1c73999}, TitleIdx=0, Name= (350, 1990, Node, 288, ... {LastWrite={0x602f3bda,0x1c73999}, TitleIdx=0, Name="{CD6C7868-5864-11D0-ABF0-0020AF6B0B7A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02354 456 NtEnumerateKey (350, 1989, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name= (350, 1989, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name="{CD3AFA96-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02355 456 NtEnumerateKey (350, 1988, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name= (350, 1988, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name="{CD3AFA95-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02356 456 NtEnumerateKey (350, 1987, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name= (350, 1987, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name="{CD3AFA94-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02357 456 NtEnumerateKey (350, 1986, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1986, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA93-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02358 456 NtEnumerateKey (350, 1985, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1985, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA92-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02359 456 NtEnumerateKey (350, 1984, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name= (350, 1984, Node, 288, ... {LastWrite={0x76b69448,0x1c73999}, TitleIdx=0, Name="{CD3AFA91-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02360 456 NtEnumerateKey (350, 1983, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1983, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA90-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02361 456 NtEnumerateKey (350, 1982, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1982, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA8F-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02362 456 NtEnumerateKey (350, 1981, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1981, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA8C-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02363 456 NtEnumerateKey (350, 1980, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name= (350, 1980, Node, 288, ... {LastWrite={0x76b431ee,0x1c73999}, TitleIdx=0, Name="{CD3AFA89-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02364 456 NtEnumerateKey (350, 1979, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name= (350, 1979, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name="{CD3AFA88-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02365 456 NtEnumerateKey (350, 1978, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name= (350, 1978, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name="{CD3AFA84-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02366 456 NtEnumerateKey (350, 1977, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name= (350, 1977, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name="{CD3AFA83-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02367 456 NtEnumerateKey (350, 1976, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name= (350, 1976, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name="{CD3AFA7B-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02368 456 NtEnumerateKey (350, 1975, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name= (350, 1975, Node, 288, ... {LastWrite={0x76b1cf94,0x1c73999}, TitleIdx=0, Name="{CD3AFA7A-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02369 456 NtEnumerateKey (350, 1974, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1974, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA78-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02370 456 NtEnumerateKey (350, 1973, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1973, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA77-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02371 456 NtEnumerateKey (350, 1972, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1972, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA76-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02372 456 NtEnumerateKey (350, 1971, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1971, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA74-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02373 456 NtEnumerateKey (350, 1970, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1970, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA73-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02374 456 NtEnumerateKey (350, 1969, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name= (350, 1969, Node, 288, ... {LastWrite={0x76af6d3a,0x1c73999}, TitleIdx=0, Name="{CD3AFA72-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02375 456 NtEnumerateKey (350, 1968, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name= (350, 1968, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name="{CD3AFA71-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02376 456 NtEnumerateKey (350, 1967, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name= (350, 1967, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name="{CD3AFA70-B84F-48F0-9393-7EDC34128127}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02377 456 NtEnumerateKey (350, 1966, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1966, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{CD1ABFC8-6C5E-4A8D-B90B-2A3B153B886D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02378 456 NtEnumerateKey (350, 1965, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 1965, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{CD184336-9128-11D1-AD9B-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02379 456 NtEnumerateKey (350, 1964, Node, 288, ... {LastWrite={0x756ff21e,0x1c73999}, TitleIdx=0, Name= (350, 1964, Node, 288, ... {LastWrite={0x756ff21e,0x1c73999}, TitleIdx=0, Name="{CD12A3CE-9C42-11D2-BEED-0060082F2054}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02380 456 NtEnumerateKey (350, 1963, Node, 288, ... {LastWrite={0x6dc82522,0x1c73999}, TitleIdx=0, Name= (350, 1963, Node, 288, ... {LastWrite={0x6dc82522,0x1c73999}, TitleIdx=0, Name="{CD00007F-8B95-11D1-82DB-00C04FB1625D}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1963, Node, 288, ... {LastWrite={0x6dc82522,0x1c73999}, TitleIdx=0, Name="{CD00007F-8B95-11D1-82DB-00C04FB1625D}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02381 456 NtEnumerateKey (350, 1962, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name= (350, 1962, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name="{CD000012-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02382 456 NtEnumerateKey (350, 1961, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name= (350, 1961, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name="{CD000011-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02383 456 NtEnumerateKey (350, 1960, Node, 288, ... {LastWrite={0x6dd1ae8a,0x1c73999}, TitleIdx=0, Name= (350, 1960, Node, 288, ... {LastWrite={0x6dd1ae8a,0x1c73999}, TitleIdx=0, Name="{CD000010-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02384 456 NtEnumerateKey (350, 1959, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name= (350, 1959, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name="{CD000009-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02385 456 NtEnumerateKey (350, 1958, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name= (350, 1958, Node, 288, ... {LastWrite={0x6dcf4c30,0x1c73999}, TitleIdx=0, Name="{CD000008-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02386 456 NtEnumerateKey (350, 1957, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name= (350, 1957, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name="{CD000007-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02387 456 NtEnumerateKey (350, 1956, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name= (350, 1956, Node, 288, ... {LastWrite={0x6dcce9d6,0x1c73999}, TitleIdx=0, Name="{CD000006-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02388 456 NtEnumerateKey (350, 1955, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name= (350, 1955, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name="{CD000005-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02389 456 NtEnumerateKey (350, 1954, Node, 288, ... {LastWrite={0x6dd1ae8a,0x1c73999}, TitleIdx=0, Name= (350, 1954, Node, 288, ... {LastWrite={0x6dd1ae8a,0x1c73999}, TitleIdx=0, Name="{CD000004-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02390 456 NtEnumerateKey (350, 1953, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name= (350, 1953, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name="{CD000002-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02391 456 NtEnumerateKey (350, 1952, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name= (350, 1952, Node, 288, ... {LastWrite={0x6dca877c,0x1c73999}, TitleIdx=0, Name="{CD000001-8B95-11D1-82DB-00C04FB1625D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02392 456 NtEnumerateKey (350, 1951, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name= (350, 1951, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name="{CCE92A90-F11A-11d1-8FAF-00600895E7D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02393 456 NtEnumerateKey (350, 1950, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1950, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{CCBA37FC-982B-433B-8AC2-455E616A8559}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02394 456 NtEnumerateKey (350, 1949, Node, 288, ... {LastWrite={0x587de576,0x1c73999}, TitleIdx=0, Name= (350, 1949, Node, 288, ... {LastWrite={0x587de576,0x1c73999}, TitleIdx=0, Name="{CCB4EC60-B9DC-11D1-AC80-00A0C9034873}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02395 456 NtEnumerateKey (350, 1948, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1948, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{CC9072AB-C000-49D8-A5AA-00266C8DBB9B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02396 456 NtEnumerateKey (350, 1947, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 1947, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{CC7BFB43-F175-11d1-A392-00E0291F3959}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02397 456 NtEnumerateKey (350, 1946, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 1946, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{CC7BFB42-F175-11d1-A392-00E0291F3959}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02398 456 NtEnumerateKey (350, 1945, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1945, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{CC785860-B2CA-11CE-8D2B-0000E202599C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02399 456 NtEnumerateKey (350, 1944, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 1944, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{CC6EEFFB-43F6-46c5-9619-51D571967F7D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02400 456 NtEnumerateKey (350, 1943, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1943, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{CC58E281-8AA1-11D1-B3F1-00AA003761C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02401 456 NtEnumerateKey (350, 1942, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1942, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{CC58E280-8AA1-11D1-B3F1-00AA003761C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02402 456 NtEnumerateKey (350, 1941, Node, 288, ... {LastWrite={0x76efccb8,0x1c73999}, TitleIdx=0, Name= (350, 1941, Node, 288, ... {LastWrite={0x76efccb8,0x1c73999}, TitleIdx=0, Name="{CC3D0210-9655-11d3-BA86-0000F80855E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02403 456 NtEnumerateKey (350, 1940, Node, 288, ... {LastWrite={0x5f30203c,0x1c73999}, TitleIdx=0, Name= (350, 1940, Node, 288, ... {LastWrite={0x5f30203c,0x1c73999}, TitleIdx=0, Name="{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02404 456 NtEnumerateKey (350, 1939, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name= (350, 1939, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name="{CC1101F2-79DC-11D2-8CE6-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02405 456 NtEnumerateKey (350, 1938, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 1938, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{CBE3FAA0-CC75-11D0-B465-00001A1818E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02406 456 NtEnumerateKey (350, 1937, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name= (350, 1937, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name="{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02407 456 NtEnumerateKey (350, 1936, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name= (350, 1936, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name="{CBA27036-DF06-44EA-BD80-AFE9F671CB76}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02408 456 NtEnumerateKey (350, 1935, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 1935, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{CB8555CC-9128-11D1-AD9B-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02409 456 NtEnumerateKey (350, 1934, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name= (350, 1934, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name="{CB632C76-8DD4-11D1-ADDF-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02410 456 NtEnumerateKey (350, 1933, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name= (350, 1933, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name="{CB46E850-FC2F-11D2-B126-00805FC73204}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1933, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name="{CB46E850-FC2F-11D2-B126-00805FC73204}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02411 456 NtEnumerateKey (350, 1932, Node, 288, ... {LastWrite={0x214f9874,0x1c73999}, TitleIdx=0, Name= (350, 1932, Node, 288, ... {LastWrite={0x214f9874,0x1c73999}, TitleIdx=0, Name="{CB39A782-E5E4-11D1-8CC0-00C04FC3261D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02412 456 NtEnumerateKey (350, 1931, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 1931, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{CAE80521-F685-11d1-AF32-00C04FA31B90}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02413 456 NtEnumerateKey (350, 1930, Node, 288, ... {LastWrite={0x76cc0972,0x1c73999}, TitleIdx=0, Name= (350, 1930, Node, 288, ... {LastWrite={0x76cc0972,0x1c73999}, TitleIdx=0, Name="{CA9067FF-777D-4B65-AA5F-C0B27E3EC75D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02414 456 NtEnumerateKey (350, 1929, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 1929, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{CA38D8DB-C75D-11D1-8F99-00600895E7D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02415 456 NtEnumerateKey (350, 1928, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 1928, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{CA38D8DA-C75D-11D1-8F99-00600895E7D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02416 456 NtEnumerateKey (350, 1927, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1927, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{C9E37C15-DF92-4727-85D6-72E5EEB6995A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02417 456 NtEnumerateKey (350, 1926, Node, 288, ... {LastWrite={0x962d3632,0x1c7853a}, TitleIdx=0, Name= (350, 1926, Node, 288, ... {LastWrite={0x962d3632,0x1c7853a}, TitleIdx=0, Name="{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02418 456 NtEnumerateKey (350, 1925, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 1925, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02419 456 NtEnumerateKey (350, 1924, Node, 288, ... {LastWrite={0x6020edbe,0x1c73999}, TitleIdx=0, Name= (350, 1924, Node, 288, ... {LastWrite={0x6020edbe,0x1c73999}, TitleIdx=0, Name="{C96401D1-0E17-11D3-885B-00C04F72C717}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02420 456 NtEnumerateKey (350, 1923, Node, 288, ... {LastWrite={0x6020edbe,0x1c73999}, TitleIdx=0, Name= (350, 1923, Node, 288, ... {LastWrite={0x6020edbe,0x1c73999}, TitleIdx=0, Name="{C96401CF-0E17-11D3-885B-00C04F72C717}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02421 456 NtEnumerateKey (350, 1922, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name= (350, 1922, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name="{C96401CC-0E17-11D3-885B-00C04F72C717}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02422 456 NtEnumerateKey (350, 1921, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name= (350, 1921, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name="{c8b522d1-5cf3-11ce-ade5-00aa0044773d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02423 456 NtEnumerateKey (350, 1920, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name= (350, 1920, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name="{c8b522d0-5cf3-11ce-ade5-00aa0044773d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02424 456 NtEnumerateKey (350, 1919, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name= (350, 1919, Node, 288, ... {LastWrite={0x588047d0,0x1c73999}, TitleIdx=0, Name="{C8B522CF-5CF3-11CE-ADE5-00AA0044773D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02425 456 NtEnumerateKey (350, 1918, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name= (350, 1918, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name="{c8b522cd-5cf3-11ce-ade5-00aa0044773d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02426 456 NtEnumerateKey (350, 1917, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name= (350, 1917, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name="{c8b522cc-5cf3-11ce-ade5-00aa0044773d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02427 456 NtEnumerateKey (350, 1916, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name= (350, 1916, Node, 288, ... {LastWrite={0x5861493e,0x1c73999}, TitleIdx=0, Name="{c8b522cb-5cf3-11ce-ade5-00aa0044773d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02428 456 NtEnumerateKey (350, 1915, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name= (350, 1915, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name="{C83B5610-E0DF-11D0-9E00-00AA00AF3494}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02429 456 NtEnumerateKey (350, 1914, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1914, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{c827f149-55c1-4d28-935e-57e47caed973}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02430 456 NtEnumerateKey (350, 1913, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name= (350, 1913, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name="{C7B6C04A-CBB5-11d0-BB4C-00C04FC2F410}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02431 456 NtEnumerateKey (350, 1912, Node, 288, ... {LastWrite={0x260139a4,0x1c73999}, TitleIdx=0, Name= (350, 1912, Node, 288, ... {LastWrite={0x260139a4,0x1c73999}, TitleIdx=0, Name="{C7A3A54B-0250-11D3-9CD1-00105A1F4801}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02432 456 NtEnumerateKey (350, 1911, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 1911, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{c79d1575-b8c6-4862-a284-788836518b97}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02433 456 NtEnumerateKey (350, 1910, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1910, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{C79A574C-63BE-44b9-801F-283F87F898BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02434 456 NtEnumerateKey (350, 1909, Node, 288, ... {LastWrite={0x5cc90188,0x1c73999}, TitleIdx=0, Name= (350, 1909, Node, 288, ... {LastWrite={0x5cc90188,0x1c73999}, TitleIdx=0, Name="{c733e4af-576e-11d0-b28c-00c04fd7cd22}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02435 456 NtEnumerateKey (350, 1908, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1908, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{C71566F2-561E-11D1-AD87-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02436 456 NtEnumerateKey (350, 1907, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name= (350, 1907, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name="{C70EB77F-EFD4-4678-A27B-BF1648F30D04}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02437 456 NtEnumerateKey (350, 1906, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name= (350, 1906, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name="{C6CC49B0-CE17-11D0-8833-00A0C903B83C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02438 456 NtEnumerateKey (350, 1905, Node, 288, ... {LastWrite={0x6eb1cb96,0x1c73999}, TitleIdx=0, Name= (350, 1905, Node, 288, ... {LastWrite={0x6eb1cb96,0x1c73999}, TitleIdx=0, Name="{C6B14B32-76AA-4A86-A7AC-5C79AAF58DA7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02439 456 NtEnumerateKey (350, 1904, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name= (350, 1904, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name="{C69E8F43-D5C8-11D0-A520-145405C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02440 456 NtEnumerateKey (350, 1903, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name= (350, 1903, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name="{C69E8F42-D5C8-11D0-A520-145405C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02441 456 NtEnumerateKey (350, 1902, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name= (350, 1902, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name="{C69E8F41-D5C8-11D0-A520-145405C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02442 456 NtEnumerateKey (350, 1901, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name= (350, 1901, Node, 288, ... {LastWrite={0x770541e2,0x1c73999}, TitleIdx=0, Name="{C69E8F40-D5C8-11D0-A520-145405C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02443 456 NtEnumerateKey (350, 1900, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name= (350, 1900, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name="{C65CF02D-749C-46F0-B2BF-3E65875A5C70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02444 456 NtEnumerateKey (350, 1899, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1899, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{C647B5C0-157C-11D0-BD23-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02445 456 NtEnumerateKey (350, 1898, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 1898, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{C6365470-F667-11d1-9067-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02446 456 NtEnumerateKey (350, 1897, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name= (350, 1897, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name="{C624BA95-FBCB-4409-8C03-8CCEEC533EF1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02447 456 NtEnumerateKey (350, 1896, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name= (350, 1896, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name="{C5B86F32-69EE-11d2-875F-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02448 456 NtEnumerateKey (350, 1895, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name= (350, 1895, Node, 288, ... {LastWrite={0x60f78162,0x1c73999}, TitleIdx=0, Name="{C5B19592-145E-11d3-9F04-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02449 456 NtEnumerateKey (350, 1894, Node, 288, ... {LastWrite={0x756b2d6a,0x1c73999}, TitleIdx=0, Name= (350, 1894, Node, 288, ... {LastWrite={0x756b2d6a,0x1c73999}, TitleIdx=0, Name="{C5A7D9B0-3428-4390-B7A2-8C685F93C084}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02450 456 NtEnumerateKey (350, 1893, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name= (350, 1893, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name="{c5a40261-cd64-4ccf-84cb-c394da41d590}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02451 456 NtEnumerateKey (350, 1892, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1892, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{C59938DA-9B20-11D0-9CE3-00C04FC9BCC4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02452 456 NtEnumerateKey (350, 1891, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name= (350, 1891, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name="{C5702CD6-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02453 456 NtEnumerateKey (350, 1890, Node, 288, ... {LastWrite={0x6e9eb8c6,0x1c73999}, TitleIdx=0, Name= (350, 1890, Node, 288, ... {LastWrite={0x6e9eb8c6,0x1c73999}, TitleIdx=0, Name="{C5702CD0-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02454 456 NtEnumerateKey (350, 1889, Node, 288, ... {LastWrite={0x6e9c566c,0x1c73999}, TitleIdx=0, Name= (350, 1889, Node, 288, ... {LastWrite={0x6e9c566c,0x1c73999}, TitleIdx=0, Name="{C5702CCF-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02455 456 NtEnumerateKey (350, 1888, Node, 288, ... {LastWrite={0x6e9c566c,0x1c73999}, TitleIdx=0, Name= (350, 1888, Node, 288, ... {LastWrite={0x6e9c566c,0x1c73999}, TitleIdx=0, Name="{C5702CCE-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02456 456 NtEnumerateKey (350, 1887, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name= (350, 1887, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name="{C5702CCD-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02457 456 NtEnumerateKey (350, 1886, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name= (350, 1886, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name="{C5702CCC-9B79-11D3-B654-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02458 456 NtEnumerateKey (350, 1885, Node, 288, ... {LastWrite={0x5fe7b54e,0x1c73999}, TitleIdx=0, Name= (350, 1885, Node, 288, ... {LastWrite={0x5fe7b54e,0x1c73999}, TitleIdx=0, Name="{C5598E60-B307-11D1-B27D-006008C3FBFB}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1885, Node, 288, ... {LastWrite={0x5fe7b54e,0x1c73999}, TitleIdx=0, Name="{C5598E60-B307-11D1-B27D-006008C3FBFB}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02459 456 NtEnumerateKey (350, 1884, Node, 288, ... {LastWrite={0x5cbab36c,0x1c73999}, TitleIdx=0, Name= (350, 1884, Node, 288, ... {LastWrite={0x5cbab36c,0x1c73999}, TitleIdx=0, Name="{C54515D0-F2E5-4BDD-AA86-1E4F23E480E7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02460 456 NtEnumerateKey (350, 1883, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name= (350, 1883, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name="{C533ADF1-0C80-11D1-8C54-00A02468F316}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02461 456 NtEnumerateKey (350, 1882, Node, 288, ... {LastWrite={0x6f07a03e,0x1c73999}, TitleIdx=0, Name= (350, 1882, Node, 288, ... {LastWrite={0x6f07a03e,0x1c73999}, TitleIdx=0, Name="{C51F670A-7D1A-494E-931D-886BFDB2B438}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02462 456 NtEnumerateKey (350, 1881, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 1881, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02463 456 NtEnumerateKey (350, 1880, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1880, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{C4D81943-0607-11D2-A392-00E0291F3959}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02464 456 NtEnumerateKey (350, 1879, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1879, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{C4D81942-0607-11D2-A392-00E0291F3959}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02465 456 NtEnumerateKey (350, 1878, Node, 288, ... {LastWrite={0x63ceae9c,0x1c73999}, TitleIdx=0, Name= (350, 1878, Node, 288, ... {LastWrite={0x63ceae9c,0x1c73999}, TitleIdx=0, Name="{C4D2D8E0-D1DD-11CE-940F-008029004347}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02466 456 NtEnumerateKey (350, 1877, Node, 288, ... {LastWrite={0x25938d78,0x1c73999}, TitleIdx=0, Name= (350, 1877, Node, 288, ... {LastWrite={0x25938d78,0x1c73999}, TitleIdx=0, Name="{C49E32C6-BC8B-11D2-85D4-00105A1F8304}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02467 456 NtEnumerateKey (350, 1876, Node, 288, ... {LastWrite={0x260860b2,0x1c73999}, TitleIdx=0, Name= (350, 1876, Node, 288, ... {LastWrite={0x260860b2,0x1c73999}, TitleIdx=0, Name="{C486ABD2-27F6-11D3-865E-00C04F63049B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02468 456 NtEnumerateKey (350, 1875, Node, 288, ... {LastWrite={0x267ad192,0x1c73999}, TitleIdx=0, Name= (350, 1875, Node, 288, ... {LastWrite={0x267ad192,0x1c73999}, TitleIdx=0, Name="{C4819C8D-9AB8-4B2F-B8AE-C77DABF553D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02469 456 NtEnumerateKey (350, 1874, Node, 288, ... {LastWrite={0x63c52534,0x1c73999}, TitleIdx=0, Name= (350, 1874, Node, 288, ... {LastWrite={0x63c52534,0x1c73999}, TitleIdx=0, Name="{C47195EC-CD7A-11D1-8EA3-00C04F9900D7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02470 456 NtEnumerateKey (350, 1873, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 1873, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{C46C1BF4-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02471 456 NtEnumerateKey (350, 1872, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name= (350, 1872, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name="{C46C1BF2-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02472 456 NtEnumerateKey (350, 1871, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 1871, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{C46C1BF0-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02473 456 NtEnumerateKey (350, 1870, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 1870, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{C46C1BEE-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02474 456 NtEnumerateKey (350, 1869, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 1869, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{C46C1BEC-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02475 456 NtEnumerateKey (350, 1868, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name= (350, 1868, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name="{C46C1BE6-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02476 456 NtEnumerateKey (350, 1867, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name= (350, 1867, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name="{C46C1BE4-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02477 456 NtEnumerateKey (350, 1866, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 1866, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{C46C1BE2-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02478 456 NtEnumerateKey (350, 1865, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name= (350, 1865, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name="{C46C1BE0-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02479 456 NtEnumerateKey (350, 1864, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 1864, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{C46C1BDE-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02480 456 NtEnumerateKey (350, 1863, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name= (350, 1863, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name="{C46C1BDC-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02481 456 NtEnumerateKey (350, 1862, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 1862, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{C46C1BDA-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02482 456 NtEnumerateKey (350, 1861, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 1861, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{C46C1BD8-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02483 456 NtEnumerateKey (350, 1860, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name= (350, 1860, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name="{C46C1BD6-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02484 456 NtEnumerateKey (350, 1859, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 1859, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{C46C1BD4-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02485 456 NtEnumerateKey (350, 1858, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 1858, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{C46C1BD2-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02486 456 NtEnumerateKey (350, 1857, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name= (350, 1857, Node, 288, ... {LastWrite={0x62e04374,0x1c73999}, TitleIdx=0, Name="{C46C1BD0-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02487 456 NtEnumerateKey (350, 1856, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 1856, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{C46C1BCE-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02488 456 NtEnumerateKey (350, 1855, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 1855, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{C46C1BCC-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02489 456 NtEnumerateKey (350, 1854, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name= (350, 1854, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name="{C46C1BCA-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02490 456 NtEnumerateKey (350, 1853, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name= (350, 1853, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name="{C46C1BC8-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02491 456 NtEnumerateKey (350, 1852, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 1852, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{C46C1BC6-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02492 456 NtEnumerateKey (350, 1851, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name= (350, 1851, Node, 288, ... {LastWrite={0x62e50828,0x1c73999}, TitleIdx=0, Name="{C46C1BC4-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02493 456 NtEnumerateKey (350, 1850, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name= (350, 1850, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name="{C46C1BC1-3C52-11D0-9200-848C1D000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02494 456 NtEnumerateKey (350, 1849, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 1849, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{C41FF872-07B1-4926-819B-8C94E6B1FBB9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02495 456 NtEnumerateKey (350, 1848, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 1848, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{C40FBD00-88B9-11d2-84AD-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02496 456 NtEnumerateKey (350, 1847, Node, 288, ... {LastWrite={0x6063af96,0x1c73999}, TitleIdx=0, Name= (350, 1847, Node, 288, ... {LastWrite={0x6063af96,0x1c73999}, TitleIdx=0, Name="{C40D66A0-E90C-46C6-AA3B-473E38C72BF2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02497 456 NtEnumerateKey (350, 1846, Node, 288, ... {LastWrite={0x2a5d27f6,0x1c7852f}, TitleIdx=0, Name= (350, 1846, Node, 288, ... {LastWrite={0x2a5d27f6,0x1c7852f}, TitleIdx=0, Name="{C406F816-318D-4F7D-81CB-BA93CA7B70D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02498 456 NtEnumerateKey (350, 1845, Node, 288, ... {LastWrite={0x6f02db8a,0x1c73999}, TitleIdx=0, Name= (350, 1845, Node, 288, ... {LastWrite={0x6f02db8a,0x1c73999}, TitleIdx=0, Name="{C4001F96-2DEE-4C33-B807-F829889A8CCD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02499 456 NtEnumerateKey (350, 1844, Node, 288, ... {LastWrite={0x63ceae9c,0x1c73999}, TitleIdx=0, Name= (350, 1844, Node, 288, ... {LastWrite={0x63ceae9c,0x1c73999}, TitleIdx=0, Name="{C3E5D3D3-1A03-11CF-942D-008029004347}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02500 456 NtEnumerateKey (350, 1843, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name= (350, 1843, Node, 288, ... {LastWrite={0x63cc4c42,0x1c73999}, TitleIdx=0, Name="{C3E5D3D2-1A03-11CF-942D-008029004347}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02501 456 NtEnumerateKey (350, 1842, Node, 288, ... {LastWrite={0x6dfefb38,0x1c73999}, TitleIdx=0, Name= (350, 1842, Node, 288, ... {LastWrite={0x6dfefb38,0x1c73999}, TitleIdx=0, Name="{C3BDF740-0B58-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02502 456 NtEnumerateKey (350, 1841, Node, 288, ... {LastWrite={0x62c144e2,0x1c73999}, TitleIdx=0, Name= (350, 1841, Node, 288, ... {LastWrite={0x62c144e2,0x1c73999}, TitleIdx=0, Name="{C3701884-B39B-11D1-9D68-00C04FC30DF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02503 456 NtEnumerateKey (350, 1840, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name= (350, 1840, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name="{C3480C0A-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02504 456 NtEnumerateKey (350, 1839, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name= (350, 1839, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name="{C3480816-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02505 456 NtEnumerateKey (350, 1838, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name= (350, 1838, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name="{C348041F-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02506 456 NtEnumerateKey (350, 1837, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name= (350, 1837, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name="{C348041D-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02507 456 NtEnumerateKey (350, 1836, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name= (350, 1836, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name="{C3480419-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02508 456 NtEnumerateKey (350, 1835, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1835, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C3480416-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02509 456 NtEnumerateKey (350, 1834, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name= (350, 1834, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name="{C3480415-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02510 456 NtEnumerateKey (350, 1833, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1833, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C3480414-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02511 456 NtEnumerateKey (350, 1832, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1832, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C3480413-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02512 456 NtEnumerateKey (350, 1831, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1831, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C3480410-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02513 456 NtEnumerateKey (350, 1830, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name= (350, 1830, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name="{C348040E-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02514 456 NtEnumerateKey (350, 1829, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1829, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C348040C-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02515 456 NtEnumerateKey (350, 1828, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1828, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C348040B-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02516 456 NtEnumerateKey (350, 1827, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name= (350, 1827, Node, 288, ... {LastWrite={0x6384c5b6,0x1c73999}, TitleIdx=0, Name="{C3480409-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02517 456 NtEnumerateKey (350, 1826, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name= (350, 1826, Node, 288, ... {LastWrite={0x63898a6a,0x1c73999}, TitleIdx=0, Name="{C3480408-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02518 456 NtEnumerateKey (350, 1825, Node, 288, ... {LastWrite={0x6382635c,0x1c73999}, TitleIdx=0, Name= (350, 1825, Node, 288, ... {LastWrite={0x6382635c,0x1c73999}, TitleIdx=0, Name="{C3480407-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02519 456 NtEnumerateKey (350, 1824, Node, 288, ... {LastWrite={0x6382635c,0x1c73999}, TitleIdx=0, Name= (350, 1824, Node, 288, ... {LastWrite={0x6382635c,0x1c73999}, TitleIdx=0, Name="{C3480406-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02520 456 NtEnumerateKey (350, 1823, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name= (350, 1823, Node, 288, ... {LastWrite={0x63872810,0x1c73999}, TitleIdx=0, Name="{C3480405-A7F8-11D1-AA75-00C04FA34D72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02521 456 NtEnumerateKey (350, 1822, Node, 288, ... {LastWrite={0x252d085a,0x1c73999}, TitleIdx=0, Name= (350, 1822, Node, 288, ... {LastWrite={0x252d085a,0x1c73999}, TitleIdx=0, Name="{c3278e90-bea7-11cd-b579-08002b30bfeb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02522 456 NtEnumerateKey (350, 1821, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 1821, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{C2FEEEAC-CFCD-11D1-8B05-00600806D9B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02523 456 NtEnumerateKey (350, 1820, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 1820, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{C2FBB631-2971-11d1-A18C-00C04FD75D13}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02524 456 NtEnumerateKey (350, 1819, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 1819, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{C2FBB630-2971-11d1-A18C-00C04FD75D13}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02525 456 NtEnumerateKey (350, 1818, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 1818, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{C2BE6971-DF9E-11D1-8B87-00C04FD7A924}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02526 456 NtEnumerateKey (350, 1817, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 1817, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{C2BB0409-E340-4732-8B9A-3F53C2A2D976}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02527 456 NtEnumerateKey (350, 1816, Node, 288, ... {LastWrite={0x6db9d706,0x1c73999}, TitleIdx=0, Name= (350, 1816, Node, 288, ... {LastWrite={0x6db9d706,0x1c73999}, TitleIdx=0, Name="{C2AEF40E-BE1F-4bae-A3D7-8F7531213DE8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02528 456 NtEnumerateKey (350, 1815, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1815, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{C23FC28D-C55F-4720-8B32-91F73C2BD5D1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02529 456 NtEnumerateKey (350, 1814, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 1814, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{C1F400A4-3F08-11D3-9F0B-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02530 456 NtEnumerateKey (350, 1813, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 1813, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{C1F400A0-3F08-11D3-9F0B-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02531 456 NtEnumerateKey (350, 1812, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name= (350, 1812, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name="{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02532 456 NtEnumerateKey (350, 1811, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 1811, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{C1C0FE00-F3C2-11D0-91D4-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02533 456 NtEnumerateKey (350, 1810, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 1810, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{C169CC11-1EC1-4847-9C0D-D2F2D80D07CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02534 456 NtEnumerateKey (350, 1809, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 1809, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{C1692211-1EC1-4847-9C0D-D2F2D80D07CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02535 456 NtEnumerateKey (350, 1808, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 1808, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{c15e6bf0-6351-4588-ac4f-ef7d5ec8c16e}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02536 456 NtEnumerateKey (350, 1807, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 1807, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{C1282A7B-9455-48dc-BBBB-46C2EB525AF5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02537 456 NtEnumerateKey (350, 1806, Node, 288, ... {LastWrite={0x252f6ab4,0x1c73999}, TitleIdx=0, Name= (350, 1806, Node, 288, ... {LastWrite={0x252f6ab4,0x1c73999}, TitleIdx=0, Name="{c1243ca0-bf96-11cd-b579-08002b30bfeb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02538 456 NtEnumerateKey (350, 1805, Node, 288, ... {LastWrite={0x2563de70,0x1c73999}, TitleIdx=0, Name= (350, 1805, Node, 288, ... {LastWrite={0x2563de70,0x1c73999}, TitleIdx=0, Name="{C10B4771-4DA0-11D2-A2F5-00C04F86FB7D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02539 456 NtEnumerateKey (350, 1804, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name= (350, 1804, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name="{C0E13E61-0CC6-11d1-BBB6-0060978B2AE6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02540 456 NtEnumerateKey (350, 1803, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name= (350, 1803, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name="{C0CD59AE-020D-11d1-81F2-00C04FC99D4C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02541 456 NtEnumerateKey (350, 1802, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name= (350, 1802, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name="{C0BC4B4A-A406-4EFC-932F-B8546B8100CC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02542 456 NtEnumerateKey (350, 1801, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name= (350, 1801, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name="{C0AA9D93-2EF5-47FB-960C-F90FC644B48E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02543 456 NtEnumerateKey (350, 1800, Node, 288, ... {LastWrite={0x586d3500,0x1c73999}, TitleIdx=0, Name= (350, 1800, Node, 288, ... {LastWrite={0x586d3500,0x1c73999}, TitleIdx=0, Name="{C0932C62-38E5-11d0-97AB-00C04FC2AD98}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02544 456 NtEnumerateKey (350, 1799, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name= (350, 1799, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name="{C04EFA90-E221-11D2-985E-00C04F575153}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1799, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name="{C04EFA90-E221-11D2-985E-00C04F575153}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02545 456 NtEnumerateKey (350, 1798, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name= (350, 1798, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name="{C04D65CF-B70D-11D0-B188-00AA0038C969}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02546 456 NtEnumerateKey (350, 1797, Node, 288, ... {LastWrite={0x72f5c09a,0x1c73999}, TitleIdx=0, Name= (350, 1797, Node, 288, ... {LastWrite={0x72f5c09a,0x1c73999}, TitleIdx=0, Name="{C0170539-0032-46BF-9223-A2463F000562}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02547 456 NtEnumerateKey (350, 1796, Node, 288, ... {LastWrite={0x5d5a70fa,0x1c73999}, TitleIdx=0, Name= (350, 1796, Node, 288, ... {LastWrite={0x5d5a70fa,0x1c73999}, TitleIdx=0, Name="{BFC880F1-7484-11d0-8309-00AA00B6015C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02548 456 NtEnumerateKey (350, 1795, Node, 288, ... {LastWrite={0x6db774ac,0x1c73999}, TitleIdx=0, Name= (350, 1795, Node, 288, ... {LastWrite={0x6db774ac,0x1c73999}, TitleIdx=0, Name="{BFB3EC07-A552-4f57-9CC5-06B02205C566}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02549 456 NtEnumerateKey (350, 1794, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name= (350, 1794, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name="{BF981FDD-B743-11D1-A69A-00C04FB9988E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02550 456 NtEnumerateKey (350, 1793, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1793, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{BF87B6E1-8C27-11D0-B3F0-00AA003761C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02551 456 NtEnumerateKey (350, 1792, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1792, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{BF87B6E0-8C27-11D0-B3F0-00AA003761C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02552 456 NtEnumerateKey (350, 1791, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name= (350, 1791, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name="{BF84C0C5-0C80-11D2-A497-00C04FB93209}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02553 456 NtEnumerateKey (350, 1790, Node, 288, ... {LastWrite={0x71eab93a,0x1c73999}, TitleIdx=0, Name= (350, 1790, Node, 288, ... {LastWrite={0x71eab93a,0x1c73999}, TitleIdx=0, Name="{BF83CC10-7020-11D1-9730-00A024D77700}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02554 456 NtEnumerateKey (350, 1789, Node, 288, ... {LastWrite={0x5b90ad7a,0x1c73999}, TitleIdx=0, Name= (350, 1789, Node, 288, ... {LastWrite={0x5b90ad7a,0x1c73999}, TitleIdx=0, Name="{bf50b68e-29b8-4386-ae9c-9734d5117cd5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02555 456 NtEnumerateKey (350, 1788, Node, 288, ... {LastWrite={0x5bb470c0,0x1c73999}, TitleIdx=0, Name= (350, 1788, Node, 288, ... {LastWrite={0x5bb470c0,0x1c73999}, TitleIdx=0, Name="{BF426F7E-7A5E-44D6-830C-A390EA9462A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02556 456 NtEnumerateKey (350, 1787, Node, 288, ... {LastWrite={0xef564020,0x1c76daf}, TitleIdx=0, Name= (350, 1787, Node, 288, ... {LastWrite={0xef564020,0x1c76daf}, TitleIdx=0, Name="{bf404da2-7d3b-11d3-b9e5-00c04f79e399}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02557 456 NtEnumerateKey (350, 1786, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1786, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{bf0eaea8-c122-11d2-94f4-00c04f72d8c4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02558 456 NtEnumerateKey (350, 1785, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 1785, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{BE9B3133-250B-44A5-A278-C532B7B7FF76}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02559 456 NtEnumerateKey (350, 1784, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1784, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{BE8E0170-72DC-11D2-952A-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02560 456 NtEnumerateKey (350, 1783, Node, 288, ... {LastWrite={0x25dfd8b8,0x1c73999}, TitleIdx=0, Name= (350, 1783, Node, 288, ... {LastWrite={0x25dfd8b8,0x1c73999}, TitleIdx=0, Name="{BE0A9830-2B8B-11D1-A949-0060181EBBAD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02561 456 NtEnumerateKey (350, 1782, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 1782, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{BE09F473-7FEB-11d2-9962-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02562 456 NtEnumerateKey (350, 1781, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1781, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{BDF9E8B8-6C66-4E45-BA15-E050393DD079}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02563 456 NtEnumerateKey (350, 1780, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1780, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{BDF23680-C1E5-11D2-9EF7-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02564 456 NtEnumerateKey (350, 1779, Node, 288, ... {LastWrite={0x931b1cdc,0x1c7399c}, TitleIdx=0, Name= (350, 1779, Node, 288, ... {LastWrite={0x931b1cdc,0x1c7399c}, TitleIdx=0, Name="{BDEADF04-C265-11d0-BCED-00A0C90AB50F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02565 456 NtEnumerateKey (350, 1778, Node, 288, ... {LastWrite={0x931d7f36,0x1c7399c}, TitleIdx=0, Name= (350, 1778, Node, 288, ... {LastWrite={0x931d7f36,0x1c7399c}, TitleIdx=0, Name="{BDEADF00-C265-11d0-BCED-00A0C90AB50F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02566 456 NtEnumerateKey (350, 1777, Node, 288, ... {LastWrite={0x63197be4,0x1c73999}, TitleIdx=0, Name= (350, 1777, Node, 288, ... {LastWrite={0x63197be4,0x1c73999}, TitleIdx=0, Name="{BDD307C3-7BC0-4542-9F8F-A9611FE6C1BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02567 456 NtEnumerateKey (350, 1776, Node, 288, ... {LastWrite={0x58044d88,0x1c73999}, TitleIdx=0, Name= (350, 1776, Node, 288, ... {LastWrite={0x58044d88,0x1c73999}, TitleIdx=0, Name="{BD96C556-65A3-11D0-983A-00C04FC29E36}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02568 456 NtEnumerateKey (350, 1775, Node, 288, ... {LastWrite={0x58044d88,0x1c73999}, TitleIdx=0, Name= (350, 1775, Node, 288, ... {LastWrite={0x58044d88,0x1c73999}, TitleIdx=0, Name="{BD96C556-65A3-11D0-983A-00C04FC29E33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02569 456 NtEnumerateKey (350, 1774, Node, 288, ... {LastWrite={0x25fc74f0,0x1c73999}, TitleIdx=0, Name= (350, 1774, Node, 288, ... {LastWrite={0x25fc74f0,0x1c73999}, TitleIdx=0, Name="{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02570 456 NtEnumerateKey (350, 1773, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1773, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BD84B381-8CA2-1069-AB1D-08000948F534}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02571 456 NtEnumerateKey (350, 1772, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1772, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BD84B380-8CA2-1069-AB1D-08000948F534}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02572 456 NtEnumerateKey (350, 1771, Node, 288, ... {LastWrite={0x5e4da0d6,0x1c73999}, TitleIdx=0, Name= (350, 1771, Node, 288, ... {LastWrite={0x5e4da0d6,0x1c73999}, TitleIdx=0, Name="{BD472F60-27FA-11cf-B8B4-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02573 456 NtEnumerateKey (350, 1770, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name= (350, 1770, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name="{BD323433-CE94-11CE-82DD-0800095A5B55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02574 456 NtEnumerateKey (350, 1769, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name= (350, 1769, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name="{BD323432-CE94-11CE-82DD-0800095A5B55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02575 456 NtEnumerateKey (350, 1768, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name= (350, 1768, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name="{BD323431-CE94-11CE-82DD-0800095A5B55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02576 456 NtEnumerateKey (350, 1767, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name= (350, 1767, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name="{BD323430-CE94-11CE-82DD-0800095A5B55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02577 456 NtEnumerateKey (350, 1766, Node, 288, ... {LastWrite={0x5eb6884e,0x1c73999}, TitleIdx=0, Name= (350, 1766, Node, 288, ... {LastWrite={0x5eb6884e,0x1c73999}, TitleIdx=0, Name="{BCFD624E-705A-11d2-A2AF-00C04FC30871}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02578 456 NtEnumerateKey (350, 1765, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name= (350, 1765, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name="{BCE9E2E7-1FDD-11d2-9A79-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02579 456 NtEnumerateKey (350, 1764, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name= (350, 1764, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name="{BCB80276-4807-11d2-9717-00C04F79E98B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02580 456 NtEnumerateKey (350, 1763, Node, 288, ... {LastWrite={0x6d6664b8,0x1c73999}, TitleIdx=0, Name= (350, 1763, Node, 288, ... {LastWrite={0x6d6664b8,0x1c73999}, TitleIdx=0, Name="{BC94D813-4D7F-11d2-A8C9-00AA00A71DCA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02581 456 NtEnumerateKey (350, 1762, Node, 288, ... {LastWrite={0xae257a0c,0x1c738c7}, TitleIdx=0, Name= (350, 1762, Node, 288, ... {LastWrite={0xae257a0c,0x1c738c7}, TitleIdx=0, Name="{BC7ACB90-622B-11D2-829D-00C04F8EC183}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02582 456 NtEnumerateKey (350, 1761, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name= (350, 1761, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name="{BBEC4F81-C2BC-43a7-BD95-9738EE9B6CCA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02583 456 NtEnumerateKey (350, 1760, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 1760, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{BBC73C94-337C-43CC-B52C-31EB9FA34013}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02584 456 NtEnumerateKey (350, 1759, Node, 288, ... {LastWrite={0x627034ee,0x1c73999}, TitleIdx=0, Name= (350, 1759, Node, 288, ... {LastWrite={0x627034ee,0x1c73999}, TitleIdx=0, Name="{BB918E32-2A5C-4986-AB40-1686A034390A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02585 456 NtEnumerateKey (350, 1758, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name= (350, 1758, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name="{BB847B8A-054A-11d2-A894-0000F8084F96}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02586 456 NtEnumerateKey (350, 1757, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name= (350, 1757, Node, 288, ... {LastWrite={0x63741540,0x1c73999}, TitleIdx=0, Name="{BB64DF2F-88E4-11D0-9E87-00C04FD7081F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02587 456 NtEnumerateKey (350, 1756, Node, 288, ... {LastWrite={0x60f9e3bc,0x1c73999}, TitleIdx=0, Name= (350, 1756, Node, 288, ... {LastWrite={0x60f9e3bc,0x1c73999}, TitleIdx=0, Name="{BB44391D-6ABD-422f-9E2E-385C9DFF51FC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02588 456 NtEnumerateKey (350, 1755, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name= (350, 1755, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name="{BB339A46-7C49-11d2-9BF3-00C04FA34789}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02589 456 NtEnumerateKey (350, 1754, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name= (350, 1754, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name="{BB314F91-A010-11d1-A75A-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02590 456 NtEnumerateKey (350, 1753, Node, 288, ... {LastWrite={0x1debc07c,0x1c73999}, TitleIdx=0, Name= (350, 1753, Node, 288, ... {LastWrite={0x1debc07c,0x1c73999}, TitleIdx=0, Name="{BB0D7187-3C44-11D2-BB98-3078302C2030}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02591 456 NtEnumerateKey (350, 1752, Node, 288, ... {LastWrite={0x21a30ac2,0x1c73999}, TitleIdx=0, Name= (350, 1752, Node, 288, ... {LastWrite={0x21a30ac2,0x1c73999}, TitleIdx=0, Name="{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02592 456 NtEnumerateKey (350, 1751, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 1751, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{BB023FC5-AA10-47CE-8A0A-6875C17B5914}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02593 456 NtEnumerateKey (350, 1750, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name= (350, 1750, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name="{BAE4D665-4EA1-11D3-8BDA-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02594 456 NtEnumerateKey (350, 1749, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name= (350, 1749, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name="{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02595 456 NtEnumerateKey (350, 1748, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 1748, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{bab33640-1280-11d2-aa30-00a0c91eedba}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02596 456 NtEnumerateKey (350, 1747, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name= (350, 1747, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{BA91CE53-BAEB-4F05-861C-0A2A0934F82E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02597 456 NtEnumerateKey (350, 1746, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name= (350, 1746, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name="{BA60F742-6F72-11d2-875F-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02598 456 NtEnumerateKey (350, 1745, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1745, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{BA4EAC04-AFCE-441A-A4F0-C4A97545425A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02599 456 NtEnumerateKey (350, 1744, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1744, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AE5-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02600 456 NtEnumerateKey (350, 1743, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1743, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AE3-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02601 456 NtEnumerateKey (350, 1742, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1742, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AE2-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02602 456 NtEnumerateKey (350, 1741, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1741, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AE1-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02603 456 NtEnumerateKey (350, 1740, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1740, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AE0-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02604 456 NtEnumerateKey (350, 1739, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1739, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126ADF-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02605 456 NtEnumerateKey (350, 1738, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1738, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126ADE-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02606 456 NtEnumerateKey (350, 1737, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1737, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126ADD-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02607 456 NtEnumerateKey (350, 1736, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1736, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126ADB-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02608 456 NtEnumerateKey (350, 1735, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1735, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD9-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02609 456 NtEnumerateKey (350, 1734, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1734, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD8-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02610 456 NtEnumerateKey (350, 1733, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1733, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD7-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02611 456 NtEnumerateKey (350, 1732, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1732, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD6-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02612 456 NtEnumerateKey (350, 1731, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1731, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD5-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02613 456 NtEnumerateKey (350, 1730, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1730, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD4-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02614 456 NtEnumerateKey (350, 1729, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1729, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD3-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02615 456 NtEnumerateKey (350, 1728, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1728, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD2-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02616 456 NtEnumerateKey (350, 1727, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1727, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{BA126AD1-2166-11D1-B1D0-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02617 456 NtEnumerateKey (350, 1726, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name= (350, 1726, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name="{B9F3EB85-B781-4AC1-8D90-93A05EE37D7D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02618 456 NtEnumerateKey (350, 1725, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name= (350, 1725, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name="{B9E84FFD-AD3C-40A4-B835-0882EBCBAAA8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02619 456 NtEnumerateKey (350, 1724, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1724, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F32E-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02620 456 NtEnumerateKey (350, 1723, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1723, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F325-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02621 456 NtEnumerateKey (350, 1722, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1722, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F324-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02622 456 NtEnumerateKey (350, 1721, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1721, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F323-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02623 456 NtEnumerateKey (350, 1720, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1720, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F322-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02624 456 NtEnumerateKey (350, 1719, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1719, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F321-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02625 456 NtEnumerateKey (350, 1718, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1718, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{B9D1F320-C401-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02626 456 NtEnumerateKey (350, 1717, Node, 288, ... {LastWrite={0x72dde916,0x1c73999}, TitleIdx=0, Name= (350, 1717, Node, 288, ... {LastWrite={0x72dde916,0x1c73999}, TitleIdx=0, Name="{B9C2E9C4-68C1-4D42-A7A1-E76A26982AD6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02627 456 NtEnumerateKey (350, 1716, Node, 288, ... {LastWrite={0x6b7da2a6,0x1c73999}, TitleIdx=0, Name= (350, 1716, Node, 288, ... {LastWrite={0x6b7da2a6,0x1c73999}, TitleIdx=0, Name="{B9B7D40C-0C41-4EAF-B0B5-6B41378C7F48}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02628 456 NtEnumerateKey (350, 1715, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1715, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{B9931692-A2B3-4FAB-BF33-9EC6F9FB96AC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02629 456 NtEnumerateKey (350, 1714, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name= (350, 1714, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name="{B977CB11-1FF5-11d2-9A7A-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02630 456 NtEnumerateKey (350, 1713, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name= (350, 1713, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name="{B96F67A2-30C2-47E8-BD85-70A2C948B50F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02631 456 NtEnumerateKey (350, 1712, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name= (350, 1712, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name="{B96D2802-4B41-4bc7-A6A4-55C5A12268CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02632 456 NtEnumerateKey (350, 1711, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1711, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{b958f73c-9bdd-11d0-852c-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02633 456 NtEnumerateKey (350, 1710, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1710, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{B93AE09F-D033-11D2-B503-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02634 456 NtEnumerateKey (350, 1709, Node, 288, ... {LastWrite={0x6eeb0406,0x1c73999}, TitleIdx=0, Name= (350, 1709, Node, 288, ... {LastWrite={0x6eeb0406,0x1c73999}, TitleIdx=0, Name="{B9240A2E-EE1A-4E1F-AD76-6536F9D3B176}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02635 456 NtEnumerateKey (350, 1708, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name= (350, 1708, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name="{B9162A23-45F9-47CC-80F5-FE0FE9B9E1A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02636 456 NtEnumerateKey (350, 1707, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name= (350, 1707, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name="{B90D0115-3AEA-45D3-801E-93913008D49E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02637 456 NtEnumerateKey (350, 1706, Node, 288, ... {LastWrite={0x5b76739c,0x1c73999}, TitleIdx=0, Name= (350, 1706, Node, 288, ... {LastWrite={0x5b76739c,0x1c73999}, TitleIdx=0, Name="{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1706, Node, 288, ... {LastWrite={0x5b76739c,0x1c73999}, TitleIdx=0, Name="{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02638 456 NtEnumerateKey (350, 1705, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name= (350, 1705, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name="{b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02639 456 NtEnumerateKey (350, 1704, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name= (350, 1704, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name="{B890AF56-AC8C-11D1-8CB7-00C04FC3261D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02640 456 NtEnumerateKey (350, 1703, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1703, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{B87BEB7B-8D29-423F-AE4D-6582C10175AC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02641 456 NtEnumerateKey (350, 1702, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 1702, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{B87799AF-2CE9-4DAA-93CF-65F002035369}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02642 456 NtEnumerateKey (350, 1701, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1701, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{b85ea052-9bdd-11d0-852c-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02643 456 NtEnumerateKey (350, 1700, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name= (350, 1700, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name="{B80AB0A0-7416-11D2-9EEB-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02644 456 NtEnumerateKey (350, 1699, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 1699, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{B7BBD408-F09C-4aa8-B65E-A00B8FE0F0B9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02645 456 NtEnumerateKey (350, 1698, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name= (350, 1698, Node, 288, ... {LastWrite={0x74a7ac96,0x1c73999}, TitleIdx=0, Name="{B7AAC060-2638-11d1-83A9-00C04FBD7C09}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02646 456 NtEnumerateKey (350, 1697, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 1697, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{B791A095-A4AC-4312-8894-5B7E8FF5B3CD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02647 456 NtEnumerateKey (350, 1696, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name= (350, 1696, Node, 288, ... {LastWrite={0x9858190a,0x1c738c7}, TitleIdx=0, Name="{b75ac000-9bdd-11d0-852c-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02648 456 NtEnumerateKey (350, 1695, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name= (350, 1695, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name="{B708457E-DB61-4C55-A92F-0D4B5E9B1224}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02649 456 NtEnumerateKey (350, 1694, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name= (350, 1694, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name="{B6FFC24C-7E13-11D0-9B47-00C04FC2F51D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02650 456 NtEnumerateKey (350, 1693, Node, 288, ... {LastWrite={0x604bd812,0x1c73999}, TitleIdx=0, Name= (350, 1693, Node, 288, ... {LastWrite={0x604bd812,0x1c73999}, TitleIdx=0, Name="{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02651 456 NtEnumerateKey (350, 1692, Node, 288, ... {LastWrite={0x604975b8,0x1c73999}, TitleIdx=0, Name= (350, 1692, Node, 288, ... {LastWrite={0x604975b8,0x1c73999}, TitleIdx=0, Name="{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02652 456 NtEnumerateKey (350, 1691, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 1691, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{B6D1062C-4FBE-11D1-8D85-006097C9A2B2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02653 456 NtEnumerateKey (350, 1690, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name= (350, 1690, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name="{B6B95945-83F8-4ee8-941F-B19FF4867455}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02654 456 NtEnumerateKey (350, 1689, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name= (350, 1689, Node, 288, ... {LastWrite={0x1f83729a,0x1c73999}, TitleIdx=0, Name="{B69003B3-C55E-4b48-836C-BC5946FC3B28}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02655 456 NtEnumerateKey (350, 1688, Node, 288, ... {LastWrite={0x6eb1cb96,0x1c73999}, TitleIdx=0, Name= (350, 1688, Node, 288, ... {LastWrite={0x6eb1cb96,0x1c73999}, TitleIdx=0, Name="{B64016F3-C9A2-4066-96F0-BD9563314726}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02656 456 NtEnumerateKey (350, 1687, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 1687, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{B6353564-96C4-11D2-8DDB-006097C9A2B2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02657 456 NtEnumerateKey (350, 1686, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name= (350, 1686, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name="{B62314FC-1215-4AEC-BCCD-AE51609BA291}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02658 456 NtEnumerateKey (350, 1685, Node, 288, ... {LastWrite={0x72134134,0x1c73999}, TitleIdx=0, Name= (350, 1685, Node, 288, ... {LastWrite={0x72134134,0x1c73999}, TitleIdx=0, Name="{B5F8FB3B-393F-4F7C-84CB-504924C2705A}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1685, Node, 288, ... {LastWrite={0x72134134,0x1c73999}, TitleIdx=0, Name="{B5F8FB3B-393F-4F7C-84CB-504924C2705A}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02659 456 NtEnumerateKey (350, 1684, Node, 288, ... {LastWrite={0x5a5f807a,0x1c73999}, TitleIdx=0, Name= (350, 1684, Node, 288, ... {LastWrite={0x5a5f807a,0x1c73999}, TitleIdx=0, Name="{b5f8350b-0548-48b1-a6ee-88bd00b4a5e7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02660 456 NtEnumerateKey (350, 1683, Node, 288, ... {LastWrite={0x6397d886,0x1c73999}, TitleIdx=0, Name= (350, 1683, Node, 288, ... {LastWrite={0x6397d886,0x1c73999}, TitleIdx=0, Name="{B5C45061-2729-11D1-A1D7-0080C88593A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02661 456 NtEnumerateKey (350, 1682, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name= (350, 1682, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name="{B5AF6951-FFBD-4E7B-A126-8F28F86E5D2E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02662 456 NtEnumerateKey (350, 1681, Node, 288, ... {LastWrite={0x634b8d46,0x1c73999}, TitleIdx=0, Name= (350, 1681, Node, 288, ... {LastWrite={0x634b8d46,0x1c73999}, TitleIdx=0, Name="{b5866878-bd99-11d0-b04b-00c04fd91550}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1681, Node, 288, ... {LastWrite={0x634b8d46,0x1c73999}, TitleIdx=0, Name="{b5866878-bd99-11d0-b04b-00c04fd91550}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02663 456 NtEnumerateKey (350, 1680, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name= (350, 1680, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name="{B57467A6-50B5-11D1-BF97-0000F8773501}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02664 456 NtEnumerateKey (350, 1679, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1679, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{B5607793-24AC-44c7-82E2-831726AA6CB7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02665 456 NtEnumerateKey (350, 1678, Node, 288, ... {LastWrite={0x5fd4a27e,0x1c73999}, TitleIdx=0, Name= (350, 1678, Node, 288, ... {LastWrite={0x5fd4a27e,0x1c73999}, TitleIdx=0, Name="{B54F3743-5B07-11cf-A4B0-00AA004A55E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02666 456 NtEnumerateKey (350, 1677, Node, 288, ... {LastWrite={0x5fd24024,0x1c73999}, TitleIdx=0, Name= (350, 1677, Node, 288, ... {LastWrite={0x5fd24024,0x1c73999}, TitleIdx=0, Name="{B54F3742-5B07-11cf-A4B0-00AA004A55E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02667 456 NtEnumerateKey (350, 1676, Node, 288, ... {LastWrite={0x5fd24024,0x1c73999}, TitleIdx=0, Name= (350, 1676, Node, 288, ... {LastWrite={0x5fd24024,0x1c73999}, TitleIdx=0, Name="{B54F3741-5B07-11cf-A4B0-00AA004A55E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02668 456 NtEnumerateKey (350, 1675, Node, 288, ... {LastWrite={0x6ddd9a4c,0x1c73999}, TitleIdx=0, Name= (350, 1675, Node, 288, ... {LastWrite={0x6ddd9a4c,0x1c73999}, TitleIdx=0, Name="{B50F5260-0C21-11D2-AB56-00A0C9082678}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02669 456 NtEnumerateKey (350, 1674, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name= (350, 1674, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name="{B4CA2971-DD2B-11D0-9DFA-00AA00AF3494}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02670 456 NtEnumerateKey (350, 1673, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name= (350, 1673, Node, 288, ... {LastWrite={0x6120095c,0x1c73999}, TitleIdx=0, Name="{B4CA2970-DD2B-11D0-9DFA-00AA00AF3494}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02671 456 NtEnumerateKey (350, 1672, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name= (350, 1672, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name="{B4B3AECB-DFD6-11d1-9DAA-00805F85CFE3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02672 456 NtEnumerateKey (350, 1671, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1671, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{B490264C-8D8F-40FD-B1BE-CD69AD779EC1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02673 456 NtEnumerateKey (350, 1670, Node, 288, ... {LastWrite={0x6f02db8a,0x1c73999}, TitleIdx=0, Name= (350, 1670, Node, 288, ... {LastWrite={0x6f02db8a,0x1c73999}, TitleIdx=0, Name="{B485447D-B180-420F-B2A5-E7BBCEA07EAD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02674 456 NtEnumerateKey (350, 1669, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 1669, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{B45FF030-4447-11D2-85DE-00C04FA35C89}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02675 456 NtEnumerateKey (350, 1668, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1668, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{B45AFEC0-2AE6-11D1-859E-00C04FC9E292}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02676 456 NtEnumerateKey (350, 1667, Node, 288, ... {LastWrite={0x6f1f77c2,0x1c73999}, TitleIdx=0, Name= (350, 1667, Node, 288, ... {LastWrite={0x6f1f77c2,0x1c73999}, TitleIdx=0, Name="{B3FF88A4-96EC-4CC1-983F-72BE0EBB368B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02677 456 NtEnumerateKey (350, 1666, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name= (350, 1666, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name="{B3EE7802-8224-4787-A1EA-F0DE16DEABD3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02678 456 NtEnumerateKey (350, 1665, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name= (350, 1665, Node, 288, ... {LastWrite={0x5e92c508,0x1c73999}, TitleIdx=0, Name="{b3cdae90-d170-11d0-802b-00c04fd75d13}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02679 456 NtEnumerateKey (350, 1664, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1664, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{b3ad3e13-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02680 456 NtEnumerateKey (350, 1663, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1663, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{b33143cb-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02681 456 NtEnumerateKey (350, 1662, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1662, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{B323F8E0-2E68-11D0-90EA-00AA0060F86C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02682 456 NtEnumerateKey (350, 1661, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1661, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{B2F586D4-5558-49D1-A07B-3249DBBB33C2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02683 456 NtEnumerateKey (350, 1660, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1660, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{B2F2E083-84FE-4a7e-80C3-4B50D10D646E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02684 456 NtEnumerateKey (350, 1659, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1659, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{B2E8D89A-7A99-4b43-9638-DF4FF83EAC11}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02685 456 NtEnumerateKey (350, 1658, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name= (350, 1658, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name="{B2DBA270-9F49-4513-AC13-76496D6EBA3A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02686 456 NtEnumerateKey (350, 1657, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1657, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{b2bed2eb-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02687 456 NtEnumerateKey (350, 1656, Node, 288, ... {LastWrite={0x76d7f534,0x1c73999}, TitleIdx=0, Name= (350, 1656, Node, 288, ... {LastWrite={0x76d7f534,0x1c73999}, TitleIdx=0, Name="{B2A7FD52-301F-4348-B93A-638C6DE49229}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02688 456 NtEnumerateKey (350, 1655, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1655, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{b2538919-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02689 456 NtEnumerateKey (350, 1654, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1654, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{B1E29D59-A675-11D2-8302-00C04F8EE6C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02690 456 NtEnumerateKey (350, 1653, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name= (350, 1653, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name="{B1B77C00-C3E4-11CF-AF79-00AA00B67A42}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02691 456 NtEnumerateKey (350, 1652, Node, 288, ... {LastWrite={0x6d72507a,0x1c73999}, TitleIdx=0, Name= (350, 1652, Node, 288, ... {LastWrite={0x6d72507a,0x1c73999}, TitleIdx=0, Name="{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02692 456 NtEnumerateKey (350, 1651, Node, 288, ... {LastWrite={0x5a36f880,0x1c73999}, TitleIdx=0, Name= (350, 1651, Node, 288, ... {LastWrite={0x5a36f880,0x1c73999}, TitleIdx=0, Name="{B196B286-BAB4-101A-B69C-00AA00341D07}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02693 456 NtEnumerateKey (350, 1650, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1650, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{B15B8DC0-C7E1-11d0-8680-00AA00BDCB71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02694 456 NtEnumerateKey (350, 1649, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name= (350, 1649, Node, 288, ... {LastWrite={0x6320a2f2,0x1c73999}, TitleIdx=0, Name="{B1549E58-3894-11D2-BB7F-00A0C999C4C1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02695 456 NtEnumerateKey (350, 1648, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name= (350, 1648, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name="{B138E92F-F502-4adc-89D9-134C8E580409}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02696 456 NtEnumerateKey (350, 1647, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 1647, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{B12AE898-D056-4378-A844-6D393FE37956}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02697 456 NtEnumerateKey (350, 1646, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name= (350, 1646, Node, 288, ... {LastWrite={0x6e99f412,0x1c73999}, TitleIdx=0, Name="{B0EDF163-910A-11D2-B632-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02698 456 NtEnumerateKey (350, 1645, Node, 288, ... {LastWrite={0x749e232e,0x1c73999}, TitleIdx=0, Name= (350, 1645, Node, 288, ... {LastWrite={0x749e232e,0x1c73999}, TitleIdx=0, Name="{B0D17FC2-7BC4-11d1-BDFA-00C04FA31009}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02699 456 NtEnumerateKey (350, 1644, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1644, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{b0b71247-4080-11d1-a3ac-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02700 456 NtEnumerateKey (350, 1643, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1643, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{B0A8F3CF-4333-4bab-8873-1CCB1CADA48B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02701 456 NtEnumerateKey (350, 1642, Node, 288, ... {LastWrite={0x6314b730,0x1c73999}, TitleIdx=0, Name= (350, 1642, Node, 288, ... {LastWrite={0x6314b730,0x1c73999}, TitleIdx=0, Name="{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02702 456 NtEnumerateKey (350, 1641, Node, 288, ... {LastWrite={0x26524998,0x1c73999}, TitleIdx=0, Name= (350, 1641, Node, 288, ... {LastWrite={0x26524998,0x1c73999}, TitleIdx=0, Name="{B0A2AB46-F612-4469-BEC4-7AB038BC476C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02703 456 NtEnumerateKey (350, 1640, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 1640, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{B091E540-83E3-11CF-A713-0020AFD79762}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02704 456 NtEnumerateKey (350, 1639, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name= (350, 1639, Node, 288, ... {LastWrite={0x6bbb9fca,0x1c73999}, TitleIdx=0, Name="{B0684266-B57F-11D2-97F9-00C04FA36E58}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02705 456 NtEnumerateKey (350, 1638, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1638, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{b0516ff0-7f1c-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02706 456 NtEnumerateKey (350, 1637, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name= (350, 1637, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name="{B0395DA5-6A15-4E44-9F36-9A9DC7A2F341}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02707 456 NtEnumerateKey (350, 1636, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1636, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{B0210780-89CD-11d0-AF08-00A0C925CD16}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02708 456 NtEnumerateKey (350, 1635, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 1635, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{B005E690-678D-11d1-B758-00A0C90564FE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02709 456 NtEnumerateKey (350, 1634, Node, 288, ... {LastWrite={0x6f07a03e,0x1c73999}, TitleIdx=0, Name= (350, 1634, Node, 288, ... {LastWrite={0x6f07a03e,0x1c73999}, TitleIdx=0, Name="{AFEBCA90-0FF9-48BD-BC98-95477A631BBB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02710 456 NtEnumerateKey (350, 1633, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name= (350, 1633, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name="{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02711 456 NtEnumerateKey (350, 1632, Node, 288, ... {LastWrite={0x5fa4f376,0x1c73999}, TitleIdx=0, Name= (350, 1632, Node, 288, ... {LastWrite={0x5fa4f376,0x1c73999}, TitleIdx=0, Name="{afba6b42-5692-48ea-8141-dc517dcf0ef1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02712 456 NtEnumerateKey (350, 1631, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name= (350, 1631, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name="{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02713 456 NtEnumerateKey (350, 1630, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 1630, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{afb40ffd-b609-40a3-9828-f88bbe11e4e3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02714 456 NtEnumerateKey (350, 1629, Node, 288, ... {LastWrite={0x62ec2f36,0x1c73999}, TitleIdx=0, Name= (350, 1629, Node, 288, ... {LastWrite={0x62ec2f36,0x1c73999}, TitleIdx=0, Name="{AF868304-AB0B-11D0-876A-00C04FC29D46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02715 456 NtEnumerateKey (350, 1628, Node, 288, ... {LastWrite={0x616eb6f6,0x1c73999}, TitleIdx=0, Name= (350, 1628, Node, 288, ... {LastWrite={0x616eb6f6,0x1c73999}, TitleIdx=0, Name="{AF7D8180-A8F9-11CF-9A46-00AA00B7DAD1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02716 456 NtEnumerateKey (350, 1627, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 1627, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{AF604EFE-8897-11D1-B944-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02717 456 NtEnumerateKey (350, 1626, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1626, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{AF4F6510-F982-11d0-8595-00AA004CD6D8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02718 456 NtEnumerateKey (350, 1625, Node, 288, ... {LastWrite={0x9318ba82,0x1c7399c}, TitleIdx=0, Name= (350, 1625, Node, 288, ... {LastWrite={0x9318ba82,0x1c7399c}, TitleIdx=0, Name="{AF320921-9381-11d1-9C3C-0000F875AC61}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02719 456 NtEnumerateKey (350, 1624, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name= (350, 1624, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name="{AF2AC6EE-2B16-4756-9475-F319E543EFAA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02720 456 NtEnumerateKey (350, 1623, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name= (350, 1623, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name="{AF279B30-86EB-11D1-81BF-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02721 456 NtEnumerateKey (350, 1622, Node, 288, ... {LastWrite={0x25cf2842,0x1c73999}, TitleIdx=0, Name= (350, 1622, Node, 288, ... {LastWrite={0x25cf2842,0x1c73999}, TitleIdx=0, Name="{AF134D0A-6706-4ACD-BA76-D0A852474C99}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02722 456 NtEnumerateKey (350, 1621, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name= (350, 1621, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name="{AED6483F-3304-11d2-86F1-006008B0E5D2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02723 456 NtEnumerateKey (350, 1620, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name= (350, 1620, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name="{AED6483E-3304-11d2-86F1-006008B0E5D2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02724 456 NtEnumerateKey (350, 1619, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name= (350, 1619, Node, 288, ... {LastWrite={0x6ba88cfa,0x1c73999}, TitleIdx=0, Name="{AED5F0A5-D972-483D-A384-649DFEB9C181}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02725 456 NtEnumerateKey (350, 1618, Node, 288, ... {LastWrite={0x6bc0647e,0x1c73999}, TitleIdx=0, Name= (350, 1618, Node, 288, ... {LastWrite={0x6bc0647e,0x1c73999}, TitleIdx=0, Name="{AEC17CE3-A514-11D1-AFA6-00AA0024D8B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02726 456 NtEnumerateKey (350, 1617, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1617, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{AEB84C83-95DC-11D0-B7FC-B61140119C4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02727 456 NtEnumerateKey (350, 1616, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name= (350, 1616, Node, 288, ... {LastWrite={0x5baae758,0x1c73999}, TitleIdx=0, Name="{AEB6717E-7E19-11d0-97EE-00C04FD91972}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02728 456 NtEnumerateKey (350, 1615, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name= (350, 1615, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name="{AE9472BF-B0C3-11D2-8D24-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02729 456 NtEnumerateKey (350, 1614, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name= (350, 1614, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name="{AE86C36D-808E-4B07-B799-56D7361C3835}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02730 456 NtEnumerateKey (350, 1613, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name= (350, 1613, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name="{AE7BFAFE-DCC8-4a73-92C8-CC300CA88859}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02731 456 NtEnumerateKey (350, 1612, Node, 288, ... {LastWrite={0x767d5bd8,0x1c73999}, TitleIdx=0, Name= (350, 1612, Node, 288, ... {LastWrite={0x767d5bd8,0x1c73999}, TitleIdx=0, Name="{AE3B6831-25A9-11d3-BD41-00C04F6EA5AE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02732 456 NtEnumerateKey (350, 1611, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 1611, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{AE24FDAE-03C6-11D1-8B76-0080C744F389}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02733 456 NtEnumerateKey (350, 1610, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name= (350, 1610, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name="{AE1E00AA-3FD5-403C-8A27-2BBDC30CD0E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02734 456 NtEnumerateKey (350, 1609, Node, 288, ... {LastWrite={0x760fafac,0x1c73999}, TitleIdx=0, Name= (350, 1609, Node, 288, ... {LastWrite={0x760fafac,0x1c73999}, TitleIdx=0, Name="{AE1A5813-5230-11D1-A6E0-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02735 456 NtEnumerateKey (350, 1608, Node, 288, ... {LastWrite={0x760fafac,0x1c73999}, TitleIdx=0, Name= (350, 1608, Node, 288, ... {LastWrite={0x760fafac,0x1c73999}, TitleIdx=0, Name="{AE1A5812-5230-11D1-A6E0-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02736 456 NtEnumerateKey (350, 1607, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1607, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{ADF95821-DED7-11D2-ACBE-0080C75E246E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02737 456 NtEnumerateKey (350, 1606, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name= (350, 1606, Node, 288, ... {LastWrite={0x60235018,0x1c73999}, TitleIdx=0, Name="{ADE6444B-C91F-4E37-92A4-5BB430A33340}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02738 456 NtEnumerateKey (350, 1605, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 1605, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{ADE424F3-AA10-471D-8A0A-687534555900}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02739 456 NtEnumerateKey (350, 1604, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 1604, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{add36aa8-751a-4579-a266-d66f5202ccbb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02740 456 NtEnumerateKey (350, 1603, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name= (350, 1603, Node, 288, ... {LastWrite={0x6e0fabae,0x1c73999}, TitleIdx=0, Name="{ADC6CB88-424C-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02741 456 NtEnumerateKey (350, 1602, Node, 288, ... {LastWrite={0x6e0ae6fa,0x1c73999}, TitleIdx=0, Name= (350, 1602, Node, 288, ... {LastWrite={0x6e0ae6fa,0x1c73999}, TitleIdx=0, Name="{ADC6CB86-424C-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02742 456 NtEnumerateKey (350, 1601, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name= (350, 1601, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name="{ADC6CB82-424C-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02743 456 NtEnumerateKey (350, 1600, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 1600, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{ADB9F5A4-E73E-49b8-99B6-2FA317EF9DBC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02744 456 NtEnumerateKey (350, 1599, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name= (350, 1599, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name="{ADB880A6-D8FF-11CF-9377-00AA003B7A11}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02745 456 NtEnumerateKey (350, 1598, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name= (350, 1598, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name="{ADB880A4-D8FF-11CF-9377-00AA003B7A11}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02746 456 NtEnumerateKey (350, 1597, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1597, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{adacedf4-9c34-430e-a65f-488f0ab491da}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02747 456 NtEnumerateKey (350, 1596, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 1596, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{AD4E63DA-C3EF-408F-8153-0FC7D5C29F72}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02748 456 NtEnumerateKey (350, 1595, Node, 288, ... {LastWrite={0x25adc756,0x1c73999}, TitleIdx=0, Name= (350, 1595, Node, 288, ... {LastWrite={0x25adc756,0x1c73999}, TitleIdx=0, Name="{AD1B46E8-0AAC-401B-A3B8-FCDCF8186F55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02749 456 NtEnumerateKey (350, 1594, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1594, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{acf35015-526e-4230-9596-becbe19f0ac9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02750 456 NtEnumerateKey (350, 1593, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name= (350, 1593, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name="{ACE10358-974C-11D1-A48D-00C04FB93753}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02751 456 NtEnumerateKey (350, 1592, Node, 288, ... {LastWrite={0x6fec81fe,0x1c73999}, TitleIdx=0, Name= (350, 1592, Node, 288, ... {LastWrite={0x6fec81fe,0x1c73999}, TitleIdx=0, Name="{ACADF079-CBCD-4032-83F2-FA47C4DB096F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02752 456 NtEnumerateKey (350, 1591, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name= (350, 1591, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name="{ACA97E00-0C7D-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02753 456 NtEnumerateKey (350, 1590, Node, 288, ... {LastWrite={0x617aa2b8,0x1c73999}, TitleIdx=0, Name= (350, 1590, Node, 288, ... {LastWrite={0x617aa2b8,0x1c73999}, TitleIdx=0, Name="{AC48FFE0-F8C4-11d1-A030-00C04FB6809F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02754 456 NtEnumerateKey (350, 1589, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 1589, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{AC1B0D5D-DD59-4FF0-93F8-A84373821606}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02755 456 NtEnumerateKey (350, 1588, Node, 288, ... {LastWrite={0x74babf66,0x1c73999}, TitleIdx=0, Name= (350, 1588, Node, 288, ... {LastWrite={0x74babf66,0x1c73999}, TitleIdx=0, Name="{abc00000-0000-0000-0000-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02756 456 NtEnumerateKey (350, 1587, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 1587, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02757 456 NtEnumerateKey (350, 1586, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name= (350, 1586, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name="{AB944620-79C6-11D1-88F9-0080C7D771BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02758 456 NtEnumerateKey (350, 1585, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name= (350, 1585, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name="{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02759 456 NtEnumerateKey (350, 1584, Node, 288, ... {LastWrite={0x2671482a,0x1c73999}, TitleIdx=0, Name= (350, 1584, Node, 288, ... {LastWrite={0x2671482a,0x1c73999}, TitleIdx=0, Name="{AB40A5C1-804B-40BD-9DFE-A640691C6956}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02760 456 NtEnumerateKey (350, 1583, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name= (350, 1583, Node, 288, ... {LastWrite={0x985a7b64,0x1c738c7}, TitleIdx=0, Name="{AB1890A0-E91F-11D2-BB91-00C04F8EE6C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02761 456 NtEnumerateKey (350, 1582, Node, 288, ... {LastWrite={0x59652990,0x1c73999}, TitleIdx=0, Name= (350, 1582, Node, 288, ... {LastWrite={0x59652990,0x1c73999}, TitleIdx=0, Name="{AB007EC8-E2D4-4664-ACD9-1D059681F3DE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02762 456 NtEnumerateKey (350, 1581, Node, 288, ... {LastWrite={0x25ee26d4,0x1c73999}, TitleIdx=0, Name= (350, 1581, Node, 288, ... {LastWrite={0x25ee26d4,0x1c73999}, TitleIdx=0, Name="{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02763 456 NtEnumerateKey (350, 1580, Node, 288, ... {LastWrite={0x5df3077a,0x1c73999}, TitleIdx=0, Name= (350, 1580, Node, 288, ... {LastWrite={0x5df3077a,0x1c73999}, TitleIdx=0, Name="{AAC41048-53E3-4867-A0AA-5FBCEAE7E5F5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02764 456 NtEnumerateKey (350, 1579, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1579, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{AABE54D4-6E88-4c46-A6B3-1DF790DD6E0D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02765 456 NtEnumerateKey (350, 1578, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1578, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{AA9BB1E0-9FE2-11D0-B257-00C04FC9E292}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02766 456 NtEnumerateKey (350, 1577, Node, 288, ... {LastWrite={0x9623acca,0x1c7853a}, TitleIdx=0, Name= (350, 1577, Node, 288, ... {LastWrite={0x9623acca,0x1c7853a}, TitleIdx=0, Name="{AA7E2087-CB55-11D2-8094-00104B1F9838}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02767 456 NtEnumerateKey (350, 1576, Node, 288, ... {LastWrite={0x96260f24,0x1c7853a}, TitleIdx=0, Name= (350, 1576, Node, 288, ... {LastWrite={0x96260f24,0x1c7853a}, TitleIdx=0, Name="{AA7E2086-CB55-11D2-8094-00104B1F9838}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02768 456 NtEnumerateKey (350, 1575, Node, 288, ... {LastWrite={0x2611ea1a,0x1c73999}, TitleIdx=0, Name= (350, 1575, Node, 288, ... {LastWrite={0x2611ea1a,0x1c73999}, TitleIdx=0, Name="{AA70DDF4-E11C-11D1-ABB0-00C04FD9159E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02769 456 NtEnumerateKey (350, 1574, Node, 288, ... {LastWrite={0x25ab64fc,0x1c73999}, TitleIdx=0, Name= (350, 1574, Node, 288, ... {LastWrite={0x25ab64fc,0x1c73999}, TitleIdx=0, Name="{AA527A40-4D9A-11D2-93AD-00805F853771}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02770 456 NtEnumerateKey (350, 1573, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name= (350, 1573, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name="{AA205A4D-681F-11D0-A243-08002B36FCA4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02771 456 NtEnumerateKey (350, 1572, Node, 288, ... {LastWrite={0x63d5d5aa,0x1c73999}, TitleIdx=0, Name= (350, 1572, Node, 288, ... {LastWrite={0x63d5d5aa,0x1c73999}, TitleIdx=0, Name="{AA000926-FFBE-11CF-8800-00A0C903B83C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02772 456 NtEnumerateKey (350, 1571, Node, 288, ... {LastWrite={0x7531f4fa,0x1c73999}, TitleIdx=0, Name= (350, 1571, Node, 288, ... {LastWrite={0x7531f4fa,0x1c73999}, TitleIdx=0, Name="{A9FC132B-096D-460B-B7D5-1DB0FAE0C062}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02773 456 NtEnumerateKey (350, 1570, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name= (350, 1570, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name="{A9CF0EAE-901A-4739-A481-E35B73E47F6D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02774 456 NtEnumerateKey (350, 1569, Node, 288, ... {LastWrite={0x6ddd9a4c,0x1c73999}, TitleIdx=0, Name= (350, 1569, Node, 288, ... {LastWrite={0x6ddd9a4c,0x1c73999}, TitleIdx=0, Name="{A9B48EAC-3ED8-11d2-8216-00C04FB687DA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02775 456 NtEnumerateKey (350, 1568, Node, 288, ... {LastWrite={0x5ef22318,0x1c73999}, TitleIdx=0, Name= (350, 1568, Node, 288, ... {LastWrite={0x5ef22318,0x1c73999}, TitleIdx=0, Name="{a9ae6c91-1d1b-11d2-b21a-00c04fa357fa}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02776 456 NtEnumerateKey (350, 1567, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1567, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{A98C8400-4181-11D1-A520-00A0D10129C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02777 456 NtEnumerateKey (350, 1566, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name= (350, 1566, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{A951B11A-C712-45B3-B884-2469A6243368}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1566, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{A951B11A-C712-45B3-B884-2469A6243368}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02778 456 NtEnumerateKey (350, 1565, Node, 288, ... {LastWrite={0x6dbc3960,0x1c73999}, TitleIdx=0, Name= (350, 1565, Node, 288, ... {LastWrite={0x6dbc3960,0x1c73999}, TitleIdx=0, Name="{a93bf5a1-443d-48fe-921a-244d3afa7ed4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02779 456 NtEnumerateKey (350, 1564, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name= (350, 1564, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name="{A9397D66-3ED3-11D1-8D99-00C04FC2E0C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02780 456 NtEnumerateKey (350, 1563, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1563, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A910187F-0C7A-45AC-92CC-59EDAFB77B53}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02781 456 NtEnumerateKey (350, 1562, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1562, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A907657F-6FDF-11D0-8EFB-00C04FD912B2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02782 456 NtEnumerateKey (350, 1561, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name= (350, 1561, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name="{A8DCF3D5-0780-4EF4-8A83-2CFFAACB8ACE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02783 456 NtEnumerateKey (350, 1560, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1560, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A8C680EB-3D32-11D2-9EE7-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02784 456 NtEnumerateKey (350, 1559, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name= (350, 1559, Node, 288, ... {LastWrite={0x60b25d30,0x1c73999}, TitleIdx=0, Name="{A888DF60-1E90-11CF-AC98-00AA004C0FA9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02785 456 NtEnumerateKey (350, 1558, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name= (350, 1558, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name="{A861C6E2-FCFC-11D2-8BC9-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02786 456 NtEnumerateKey (350, 1557, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name= (350, 1557, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name="{A860CE50-3910-11d0-86FC-00A0C913F750}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02787 456 NtEnumerateKey (350, 1556, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name= (350, 1556, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name="{A83EF168-CA8D-11D2-B33D-00104BCC4B4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02788 456 NtEnumerateKey (350, 1555, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name= (350, 1555, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name="{A7EE7F34-3BD1-427f-9231-F941E9B7E1FE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02789 456 NtEnumerateKey (350, 1554, Node, 288, ... {LastWrite={0x636cee32,0x1c73999}, TitleIdx=0, Name= (350, 1554, Node, 288, ... {LastWrite={0x636cee32,0x1c73999}, TitleIdx=0, Name="{A7B93C92-7B81-11D0-AC5F-00C04FD97575}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02790 456 NtEnumerateKey (350, 1553, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1553, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A779AF1A-009A-4C44-B9F0-8F0F4CF2AE49}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1553, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A779AF1A-009A-4C44-B9F0-8F0F4CF2AE49}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02791 456 NtEnumerateKey (350, 1552, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1552, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{A73BEEB2-B0B7-11D2-8853-0000F80883E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02792 456 NtEnumerateKey (350, 1551, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name= (350, 1551, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name="{A6FD9E45-6E44-43f9-8644-08598F5A74D9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02793 456 NtEnumerateKey (350, 1550, Node, 288, ... {LastWrite={0x2c888a16,0x1c73999}, TitleIdx=0, Name= (350, 1550, Node, 288, ... {LastWrite={0x2c888a16,0x1c73999}, TitleIdx=0, Name="{A6A6F92B-26B5-463B-AE0D-5F361B09C171}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02794 456 NtEnumerateKey (350, 1549, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1549, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{a5fda055-899d-4895-97ae-0cc4fe4e977f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02795 456 NtEnumerateKey (350, 1548, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 1548, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02796 456 NtEnumerateKey (350, 1547, Node, 288, ... {LastWrite={0x594aefb2,0x1c73999}, TitleIdx=0, Name= (350, 1547, Node, 288, ... {LastWrite={0x594aefb2,0x1c73999}, TitleIdx=0, Name="{A55737AB-5B26-4A21-99B7-6D0C606F515E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02797 456 NtEnumerateKey (350, 1546, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 1546, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{A506EF88-9EFC-4522-BFE1-A8E886A64D80}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02798 456 NtEnumerateKey (350, 1545, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name= (350, 1545, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name="{A5064426-D541-11D4-9523-00B0D022CA64}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02799 456 NtEnumerateKey (350, 1544, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name= (350, 1544, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name="{A5064424-D541-11D4-9523-00B0D022CA64}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02800 456 NtEnumerateKey (350, 1543, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name= (350, 1543, Node, 288, ... {LastWrite={0x5e8b9dfa,0x1c73999}, TitleIdx=0, Name="{A5064422-D541-11D4-9523-00B0D022CA64}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02801 456 NtEnumerateKey (350, 1542, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1542, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{a5062215-4681-11d1-a3b4-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02802 456 NtEnumerateKey (350, 1541, Node, 288, ... {LastWrite={0x6d0706a8,0x1c73999}, TitleIdx=0, Name= (350, 1541, Node, 288, ... {LastWrite={0x6d0706a8,0x1c73999}, TitleIdx=0, Name="{A4E91B6A-DCAE-11D2-A045-00C04F79DC55}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02803 456 NtEnumerateKey (350, 1540, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1540, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A4B544A1-438D-4B41-9325-869523E2D6C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02804 456 NtEnumerateKey (350, 1539, Node, 288, ... {LastWrite={0x58dae12c,0x1c73999}, TitleIdx=0, Name= (350, 1539, Node, 288, ... {LastWrite={0x58dae12c,0x1c73999}, TitleIdx=0, Name="{A4AD47C0-20EA-11D0-8796-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02805 456 NtEnumerateKey (350, 1538, Node, 288, ... {LastWrite={0x58fea472,0x1c73999}, TitleIdx=0, Name= (350, 1538, Node, 288, ... {LastWrite={0x58fea472,0x1c73999}, TitleIdx=0, Name="{a47401f6-a8a6-40ea-9c29-b8f6026c98b8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02806 456 NtEnumerateKey (350, 1537, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name= (350, 1537, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name="{A470F8CF-A1E8-4f65-8335-227475AA5C46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02807 456 NtEnumerateKey (350, 1536, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name= (350, 1536, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name="{A4463024-2B6F-11D0-BFBC-0020F8008024}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02808 456 NtEnumerateKey (350, 1535, Node, 288, ... {LastWrite={0x1de23714,0x1c73999}, TitleIdx=0, Name= (350, 1535, Node, 288, ... {LastWrite={0x1de23714,0x1c73999}, TitleIdx=0, Name="{a41a4187-5a86-4e26-b40a-856f9035d9cb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02809 456 NtEnumerateKey (350, 1534, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name= (350, 1534, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name="{A40D485C-C200-403e-8F50-67E5C079AE4D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02810 456 NtEnumerateKey (350, 1533, Node, 288, ... {LastWrite={0x265970a6,0x1c73999}, TitleIdx=0, Name= (350, 1533, Node, 288, ... {LastWrite={0x265970a6,0x1c73999}, TitleIdx=0, Name="{A3E41207-BE04-492A-AFF0-19E880FF7545}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02811 456 NtEnumerateKey (350, 1532, Node, 288, ... {LastWrite={0x5dc35872,0x1c73999}, TitleIdx=0, Name= (350, 1532, Node, 288, ... {LastWrite={0x5dc35872,0x1c73999}, TitleIdx=0, Name="{A3CCEDF7-2DE2-11D0-86F4-00A0C913F750}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02812 456 NtEnumerateKey (350, 1531, Node, 288, ... {LastWrite={0x260f87c0,0x1c73999}, TitleIdx=0, Name= (350, 1531, Node, 288, ... {LastWrite={0x260f87c0,0x1c73999}, TitleIdx=0, Name="{A3A16907-227B-11D3-865D-00C04F63049B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02813 456 NtEnumerateKey (350, 1530, Node, 288, ... {LastWrite={0x6b90b576,0x1c73999}, TitleIdx=0, Name= (350, 1530, Node, 288, ... {LastWrite={0x6b90b576,0x1c73999}, TitleIdx=0, Name="{A3863C2E-86EB-11D1-A9DB-00C04FB16F9E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02814 456 NtEnumerateKey (350, 1529, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name= (350, 1529, Node, 288, ... {LastWrite={0x59298ec6,0x1c73999}, TitleIdx=0, Name="{A32552C5-BA61-457A-B59A-A2561E125E33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02815 456 NtEnumerateKey (350, 1528, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name= (350, 1528, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name="{A2E30750-6C3D-11D3-B653-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02816 456 NtEnumerateKey (350, 1527, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name= (350, 1527, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name="{A2E3074E-6C3D-11D3-B653-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02817 456 NtEnumerateKey (350, 1526, Node, 288, ... {LastWrite={0x25cf2842,0x1c73999}, TitleIdx=0, Name= (350, 1526, Node, 288, ... {LastWrite={0x25cf2842,0x1c73999}, TitleIdx=0, Name="{A2B6D807-EE1E-40F6-BDF4-B4D6F552783E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02818 456 NtEnumerateKey (350, 1525, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 1525, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02819 456 NtEnumerateKey (350, 1524, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1524, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02820 456 NtEnumerateKey (350, 1523, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1523, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{A28D553A-A703-11D0-9CEC-00C04FC9BCC4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02821 456 NtEnumerateKey (350, 1522, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name= (350, 1522, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name="{A2551F60-705F-11CF-A424-00AA003735BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02822 456 NtEnumerateKey (350, 1521, Node, 288, ... {LastWrite={0xae33c828,0x1c738c7}, TitleIdx=0, Name= (350, 1521, Node, 288, ... {LastWrite={0xae33c828,0x1c738c7}, TitleIdx=0, Name="{A1F4E726-8CF1-11D1-BF92-0060081ED811}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02823 456 NtEnumerateKey (350, 1520, Node, 288, ... {LastWrite={0xae362a82,0x1c738c7}, TitleIdx=0, Name= (350, 1520, Node, 288, ... {LastWrite={0xae362a82,0x1c738c7}, TitleIdx=0, Name="{A1E75357-881A-419E-83E2-BB16DB197C68}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02824 456 NtEnumerateKey (350, 1519, Node, 288, ... {LastWrite={0x6e193516,0x1c73999}, TitleIdx=0, Name= (350, 1519, Node, 288, ... {LastWrite={0x6e193516,0x1c73999}, TitleIdx=0, Name="{A1BFB370-5A9F-4429-BB72-B13E2FEAEDEF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02825 456 NtEnumerateKey (350, 1518, Node, 288, ... {LastWrite={0x25fc74f0,0x1c73999}, TitleIdx=0, Name= (350, 1518, Node, 288, ... {LastWrite={0x25fc74f0,0x1c73999}, TitleIdx=0, Name="{A1B9E04A-3226-11D2-883E-00104B2AFB46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02826 456 NtEnumerateKey (350, 1517, Node, 288, ... {LastWrite={0x25a6a048,0x1c73999}, TitleIdx=0, Name= (350, 1517, Node, 288, ... {LastWrite={0x25a6a048,0x1c73999}, TitleIdx=0, Name="{A1B9E020-3226-11D2-883E-00104B2AFB46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02827 456 NtEnumerateKey (350, 1516, Node, 288, ... {LastWrite={0x580dd6f0,0x1c73999}, TitleIdx=0, Name= (350, 1516, Node, 288, ... {LastWrite={0x580dd6f0,0x1c73999}, TitleIdx=0, Name="{A1A6B99D-497F-11D1-9217-00C04FBBBFB3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02828 456 NtEnumerateKey (350, 1515, Node, 288, ... {LastWrite={0x6eb8f2a4,0x1c73999}, TitleIdx=0, Name= (350, 1515, Node, 288, ... {LastWrite={0x6eb8f2a4,0x1c73999}, TitleIdx=0, Name="{A1A2B1C4-0E3A-11D3-9D8E-00C04F72D980}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02829 456 NtEnumerateKey (350, 1514, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1514, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{A18FC4A7-FA91-4AED-B023-FA1A50A85162}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02830 456 NtEnumerateKey (350, 1513, Node, 288, ... {LastWrite={0x6cfb1ae6,0x1c73999}, TitleIdx=0, Name= (350, 1513, Node, 288, ... {LastWrite={0x6cfb1ae6,0x1c73999}, TitleIdx=0, Name="{A17DA8D0-F67D-47A0-9EC4-19C486383206}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02831 456 NtEnumerateKey (350, 1512, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 1512, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{A175B891-3967-4554-8FBE-D2E1D9CD6E09}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02832 456 NtEnumerateKey (350, 1511, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name= (350, 1511, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name="{A16F1761-B6D8-42EB-8D57-4A44FEDD3BD2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02833 456 NtEnumerateKey (350, 1510, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 1510, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{A1044801-8F7E-11D1-9E7C-00C04FC324A8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02834 456 NtEnumerateKey (350, 1509, Node, 288, ... {LastWrite={0x74ac714a,0x1c73999}, TitleIdx=0, Name= (350, 1509, Node, 288, ... {LastWrite={0x74ac714a,0x1c73999}, TitleIdx=0, Name="{A1006DE3-2173-11d2-9A7C-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02835 456 NtEnumerateKey (350, 1508, Node, 288, ... {LastWrite={0x6b577d06,0x1c73999}, TitleIdx=0, Name= (350, 1508, Node, 288, ... {LastWrite={0x6b577d06,0x1c73999}, TitleIdx=0, Name="{A0F93E27-F05D-4153-A151-F3720369A4C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02836 456 NtEnumerateKey (350, 1507, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1507, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{A08C11D2-A228-11d0-825B-00AA005B4383}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02837 456 NtEnumerateKey (350, 1506, Node, 288, ... {LastWrite={0x74babf66,0x1c73999}, TitleIdx=0, Name= (350, 1506, Node, 288, ... {LastWrite={0x74babf66,0x1c73999}, TitleIdx=0, Name="{A08AF898-C2A3-11d1-BE23-00C04FA31009}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02838 456 NtEnumerateKey (350, 1505, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1505, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{a07034fd-6caa-4954-ac3f-97a27216f98a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02839 456 NtEnumerateKey (350, 1504, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name= (350, 1504, Node, 288, ... {LastWrite={0x21166004,0x1c73999}, TitleIdx=0, Name="{a00e1768-4a9b-4d97-afc6-99d329f605f2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02840 456 NtEnumerateKey (350, 1503, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1503, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{A0025E90-E45B-11D1-ABE9-00A0C905F375}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02841 456 NtEnumerateKey (350, 1502, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name= (350, 1502, Node, 288, ... {LastWrite={0x6e0d4954,0x1c73999}, TitleIdx=0, Name="{9F8E6421-3D9B-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02842 456 NtEnumerateKey (350, 1501, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name= (350, 1501, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name="{9F4D2FA2-54A1-11d1-8267-00A0C91F9CA0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02843 456 NtEnumerateKey (350, 1500, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1500, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{9f37f39c-6f49-11d1-8c18-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02844 456 NtEnumerateKey (350, 1499, Node, 288, ... {LastWrite={0x62cf92fe,0x1c73999}, TitleIdx=0, Name= (350, 1499, Node, 288, ... {LastWrite={0x62cf92fe,0x1c73999}, TitleIdx=0, Name="{9F34AF20-6095-11D3-8FB2-00C04F8EC627}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02845 456 NtEnumerateKey (350, 1498, Node, 288, ... {LastWrite={0x6b872c0e,0x1c73999}, TitleIdx=0, Name= (350, 1498, Node, 288, ... {LastWrite={0x6b872c0e,0x1c73999}, TitleIdx=0, Name="{9F1C11AA-197B-4942-BA54-47A8489BB47F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02846 456 NtEnumerateKey (350, 1497, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 1497, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{9F007F18-9C24-4630-8B3E-61F96280C593}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02847 456 NtEnumerateKey (350, 1496, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1496, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{9EF96870-E160-4792-820D-48CF0649E4EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02848 456 NtEnumerateKey (350, 1495, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1495, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{9ED96B22-73AA-11D2-952C-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02849 456 NtEnumerateKey (350, 1494, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1494, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{9ED96B21-73AA-11D2-952C-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02850 456 NtEnumerateKey (350, 1493, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1493, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{9ED96B20-73AA-11D2-952C-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02851 456 NtEnumerateKey (350, 1492, Node, 288, ... {LastWrite={0x752f92a0,0x1c73999}, TitleIdx=0, Name= (350, 1492, Node, 288, ... {LastWrite={0x752f92a0,0x1c73999}, TitleIdx=0, Name="{9EA69F99-F8FF-415E-8B90-35D6DFAF160E}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1492, Node, 288, ... {LastWrite={0x752f92a0,0x1c73999}, TitleIdx=0, Name="{9EA69F99-F8FF-415E-8B90-35D6DFAF160E}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02852 456 NtEnumerateKey (350, 1491, Node, 288, ... {LastWrite={0x5cc1da7a,0x1c73999}, TitleIdx=0, Name= (350, 1491, Node, 288, ... {LastWrite={0x5cc1da7a,0x1c73999}, TitleIdx=0, Name="{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02853 456 NtEnumerateKey (350, 1490, Node, 288, ... {LastWrite={0x5cc1da7a,0x1c73999}, TitleIdx=0, Name= (350, 1490, Node, 288, ... {LastWrite={0x5cc1da7a,0x1c73999}, TitleIdx=0, Name="{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02854 456 NtEnumerateKey (350, 1489, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 1489, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02855 456 NtEnumerateKey (350, 1488, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name= (350, 1488, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name="{9E12E76D-94D6-11D1-ADE2-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02856 456 NtEnumerateKey (350, 1487, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name= (350, 1487, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name="{9DBD2C50-62AD-11D0-B806-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02857 456 NtEnumerateKey (350, 1486, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name= (350, 1486, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name="{9D148291-B9C8-11D0-A4CC-0000F80149F6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02858 456 NtEnumerateKey (350, 1485, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name= (350, 1485, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name="{9D148290-B9C8-11D0-A4CC-0000F80149F6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02859 456 NtEnumerateKey (350, 1484, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 1484, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{9CDE7341-3C20-11D0-A330-00AA00B92C03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02860 456 NtEnumerateKey (350, 1483, Node, 288, ... {LastWrite={0x6ebdb758,0x1c73999}, TitleIdx=0, Name= (350, 1483, Node, 288, ... {LastWrite={0x6ebdb758,0x1c73999}, TitleIdx=0, Name="{9CD64701-BDF3-4D14-8E03-F12983D86664}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02861 456 NtEnumerateKey (350, 1482, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name= (350, 1482, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name="{9CA6AD35-A548-4c7b-8E0A-EF29748FAA16}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02862 456 NtEnumerateKey (350, 1481, Node, 288, ... {LastWrite={0x589a81ae,0x1c73999}, TitleIdx=0, Name= (350, 1481, Node, 288, ... {LastWrite={0x589a81ae,0x1c73999}, TitleIdx=0, Name="{9C5754F7-ADF5-4D82-B181-0F8FC5EA882B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02863 456 NtEnumerateKey (350, 1480, Node, 288, ... {LastWrite={0x7616d6ba,0x1c73999}, TitleIdx=0, Name= (350, 1480, Node, 288, ... {LastWrite={0x7616d6ba,0x1c73999}, TitleIdx=0, Name="{9C2263B0-3E3C-11D2-9BD3-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02864 456 NtEnumerateKey (350, 1479, Node, 288, ... {LastWrite={0x6d0706a8,0x1c73999}, TitleIdx=0, Name= (350, 1479, Node, 288, ... {LastWrite={0x6d0706a8,0x1c73999}, TitleIdx=0, Name="{9BFF616C-3E02-11D2-A4CA-00C04FB93209}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02865 456 NtEnumerateKey (350, 1478, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 1478, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{9BA05971-F6A8-11CF-A442-00A0C90A8F39}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02866 456 NtEnumerateKey (350, 1477, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1477, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{9B8C4620-2C1A-11D0-8493-00A02438AD48}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02867 456 NtEnumerateKey (350, 1476, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1476, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{9B55AA0E-1BC2-46e4-B306-DF9BDFDCC644}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02868 456 NtEnumerateKey (350, 1475, Node, 288, ... {LastWrite={0x627c20b0,0x1c73999}, TitleIdx=0, Name= (350, 1475, Node, 288, ... {LastWrite={0x627c20b0,0x1c73999}, TitleIdx=0, Name="{9B2719DD-B696-11D0-A489-00C04FD91AC0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02869 456 NtEnumerateKey (350, 1474, Node, 288, ... {LastWrite={0x76f4916c,0x1c73999}, TitleIdx=0, Name= (350, 1474, Node, 288, ... {LastWrite={0x76f4916c,0x1c73999}, TitleIdx=0, Name="{9B22CF54-6164-11D3-9A67-00C04F8EFB70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02870 456 NtEnumerateKey (350, 1473, Node, 288, ... {LastWrite={0x76df1c42,0x1c73999}, TitleIdx=0, Name= (350, 1473, Node, 288, ... {LastWrite={0x76df1c42,0x1c73999}, TitleIdx=0, Name="{9B186A8F-F520-4eeb-B553-118304AC46C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02871 456 NtEnumerateKey (350, 1472, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 1472, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{9B0EFD60-F7B0-11D0-BAEF-00C04FC308C9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02872 456 NtEnumerateKey (350, 1471, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1471, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{9b08e210-e51b-11cd-bc7f-00aa003db18e}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02873 456 NtEnumerateKey (350, 1470, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 1470, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{9AED384E-CE8B-11D1-8B05-00600806D9B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02874 456 NtEnumerateKey (350, 1469, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1469, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{9ac9fbe1-e0a2-4ad6-b4ee-e212013ea917}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02875 456 NtEnumerateKey (350, 1468, Node, 288, ... {LastWrite={0x759fa126,0x1c73999}, TitleIdx=0, Name= (350, 1468, Node, 288, ... {LastWrite={0x759fa126,0x1c73999}, TitleIdx=0, Name="{9AADA567-04E0-11D4-9148-00C04F610D24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02876 456 NtEnumerateKey (350, 1467, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1467, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{9A653086-174F-11D2-B5F9-00104B703EFD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02877 456 NtEnumerateKey (350, 1466, Node, 288, ... {LastWrite={0x267f9646,0x1c73999}, TitleIdx=0, Name= (350, 1466, Node, 288, ... {LastWrite={0x267f9646,0x1c73999}, TitleIdx=0, Name="{9a5dd473-d410-11d1-b829-00c04f94c7c3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02878 456 NtEnumerateKey (350, 1465, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name= (350, 1465, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name="{9A4A4A51-FB3A-4F4B-9B57-A2912A289769}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02879 456 NtEnumerateKey (350, 1464, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name= (350, 1464, Node, 288, ... {LastWrite={0x6df0ad1c,0x1c73999}, TitleIdx=0, Name="{9A43A844-0831-11D1-817F-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02880 456 NtEnumerateKey (350, 1463, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1463, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{9A17DFD1-34FA-4D61-B9BB-3A1097E7FADF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02881 456 NtEnumerateKey (350, 1462, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1462, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{99D54F63-1A69-41AE-AA4D-C976EB3F0713}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02882 456 NtEnumerateKey (350, 1461, Node, 288, ... {LastWrite={0x211d8712,0x1c73999}, TitleIdx=0, Name= (350, 1461, Node, 288, ... {LastWrite={0x211d8712,0x1c73999}, TitleIdx=0, Name="{99847C33-B1B4-11D1-8F10-00C04FC2C17B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02883 456 NtEnumerateKey (350, 1460, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1460, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{995C996E-D918-4a8c-A302-45719A6F4EA7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02884 456 NtEnumerateKey (350, 1459, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name= (350, 1459, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name="{995C1CF5-54FF-11D3-8BDA-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02885 456 NtEnumerateKey (350, 1458, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1458, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{992CFFA0-F557-101A-88EC-00DD010CCC48}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02886 456 NtEnumerateKey (350, 1457, Node, 288, ... {LastWrite={0x5a8343c0,0x1c73999}, TitleIdx=0, Name= (350, 1457, Node, 288, ... {LastWrite={0x5a8343c0,0x1c73999}, TitleIdx=0, Name="{98F63271-6C09-48B3-A571-990155932D0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02887 456 NtEnumerateKey (350, 1456, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 1456, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{98de59a0-d175-11cd-a7bd-00006b827d94}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02888 456 NtEnumerateKey (350, 1455, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name= (350, 1455, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name="{98AFF3F0-5524-11D0-8812-00A0C903B83C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02889 456 NtEnumerateKey (350, 1454, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name= (350, 1454, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name="{989D1DC0-B162-11d1-B6EC-D27DDCF9A923}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02890 456 NtEnumerateKey (350, 1453, Node, 288, ... {LastWrite={0x25b28c0a,0x1c73999}, TitleIdx=0, Name= (350, 1453, Node, 288, ... {LastWrite={0x25b28c0a,0x1c73999}, TitleIdx=0, Name="{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02891 456 NtEnumerateKey (350, 1452, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name= (350, 1452, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name="{979E8A98-0021-437a-B8E3-75865B53F74D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02892 456 NtEnumerateKey (350, 1451, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name= (350, 1451, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name="{975797FC-4E2A-11D0-B702-00C04FD8DBF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02893 456 NtEnumerateKey (350, 1450, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name= (350, 1450, Node, 288, ... {LastWrite={0x9179e156,0x1c7399c}, TitleIdx=0, Name="{974BF3BF-C9AE-4476-8003-5FE544DF458C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02894 456 NtEnumerateKey (350, 1449, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1449, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{96749377-3391-11D2-9EE3-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02895 456 NtEnumerateKey (350, 1448, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1448, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{96749373-3391-11D2-9EE3-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02896 456 NtEnumerateKey (350, 1447, Node, 288, ... {LastWrite={0x72d92462,0x1c73999}, TitleIdx=0, Name= (350, 1447, Node, 288, ... {LastWrite={0x72d92462,0x1c73999}, TitleIdx=0, Name="{963AB779-16A1-477C-A36D-CB5E711938F7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02897 456 NtEnumerateKey (350, 1446, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1446, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{962FFCF3-965F-11D0-A881-00C04FC99C9C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02898 456 NtEnumerateKey (350, 1445, Node, 288, ... {LastWrite={0x767af97e,0x1c73999}, TitleIdx=0, Name= (350, 1445, Node, 288, ... {LastWrite={0x767af97e,0x1c73999}, TitleIdx=0, Name="{95F45AA3-ED0A-11D2-BA67-0000F80855E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02899 456 NtEnumerateKey (350, 1444, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1444, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{95CE8412-7027-11D1-B879-006008059382}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02900 456 NtEnumerateKey (350, 1443, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name= (350, 1443, Node, 288, ... {LastWrite={0x25342f68,0x1c73999}, TitleIdx=0, Name="{95ad72f0-44ce-11d0-ae29-00aa004b9986}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02901 456 NtEnumerateKey (350, 1442, Node, 288, ... {LastWrite={0x637d9ea8,0x1c73999}, TitleIdx=0, Name= (350, 1442, Node, 288, ... {LastWrite={0x637d9ea8,0x1c73999}, TitleIdx=0, Name="{95A893C3-543A-11D0-AC45-00C04FD97575}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02902 456 NtEnumerateKey (350, 1441, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 1441, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{958C59A0-3670-4FE0-B893-6998BB494402}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02903 456 NtEnumerateKey (350, 1440, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name= (350, 1440, Node, 288, ... {LastWrite={0x985cddbe,0x1c738c7}, TitleIdx=0, Name="{958A1709-3B44-11D1-AD74-00C04FC2ADC0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02904 456 NtEnumerateKey (350, 1439, Node, 288, ... {LastWrite={0x6f053de4,0x1c73999}, TitleIdx=0, Name= (350, 1439, Node, 288, ... {LastWrite={0x6f053de4,0x1c73999}, TitleIdx=0, Name="{957D8D57-32B1-4BE3-8E37-EC8849F16815}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02905 456 NtEnumerateKey (350, 1438, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name= (350, 1438, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name="{955BA5D6-29C8-484f-9448-83B766EEA186}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02906 456 NtEnumerateKey (350, 1437, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name= (350, 1437, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name="{950E55B9-877C-4C67-BE08-E47B5611130A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02907 456 NtEnumerateKey (350, 1436, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 1436, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{95037DA1-6ED9-4b27-8CFF-9AD3DFB0B2F2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02908 456 NtEnumerateKey (350, 1435, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name= (350, 1435, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name="{94abaf2a-892a-11d1-bbc4-00a0c90640bf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02909 456 NtEnumerateKey (350, 1434, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1434, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{94a909a5-6f52-11d1-8c18-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02910 456 NtEnumerateKey (350, 1433, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name= (350, 1433, Node, 288, ... {LastWrite={0x72e9d4d8,0x1c73999}, TitleIdx=0, Name="{948CE83B-C4A2-44B3-99BF-279ED8DA7DF5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02911 456 NtEnumerateKey (350, 1432, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1432, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{9478f640-7f1c-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02912 456 NtEnumerateKey (350, 1431, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1431, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{947812B3-2AE1-4644-BA86-9E90DED7EC91}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02913 456 NtEnumerateKey (350, 1430, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 1430, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{9461b922-3c5a-11d2-bf8b-00c04fb93661}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02914 456 NtEnumerateKey (350, 1429, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1429, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{944D4C00-DD52-11CE-BF0E-00AA0055595A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02915 456 NtEnumerateKey (350, 1428, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1428, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{94426DE2-3211-11d2-A0DB-00C04F8EDCEE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02916 456 NtEnumerateKey (350, 1427, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1427, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{94357B53-CA29-4b78-83AE-E8FE7409134F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02917 456 NtEnumerateKey (350, 1426, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name= (350, 1426, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name="{942A8E4F-A261-11D1-A760-00C04FB9603F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02918 456 NtEnumerateKey (350, 1425, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name= (350, 1425, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name="{94297043-BD82-4DFD-B0DE-8177739C6D20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02919 456 NtEnumerateKey (350, 1424, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 1424, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02920 456 NtEnumerateKey (350, 1423, Node, 288, ... {LastWrite={0x765e5d46,0x1c73999}, TitleIdx=0, Name= (350, 1423, Node, 288, ... {LastWrite={0x765e5d46,0x1c73999}, TitleIdx=0, Name="{93EB32F5-87B1-45ad-ACC6-0F2483DB83BB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02921 456 NtEnumerateKey (350, 1422, Node, 288, ... {LastWrite={0x71c23140,0x1c73999}, TitleIdx=0, Name= (350, 1422, Node, 288, ... {LastWrite={0x71c23140,0x1c73999}, TitleIdx=0, Name="{93BA4344-AA56-403E-87F2-819650FEDACD}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1422, Node, 288, ... {LastWrite={0x71c23140,0x1c73999}, TitleIdx=0, Name="{93BA4344-AA56-403E-87F2-819650FEDACD}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02922 456 NtEnumerateKey (350, 1421, Node, 288, ... {LastWrite={0x726915dc,0x1c73999}, TitleIdx=0, Name= (350, 1421, Node, 288, ... {LastWrite={0x726915dc,0x1c73999}, TitleIdx=0, Name="{93ac9cb8-27d5-4482-bfdf-68f21c7454a3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02923 456 NtEnumerateKey (350, 1420, Node, 288, ... {LastWrite={0x76f4916c,0x1c73999}, TitleIdx=0, Name= (350, 1420, Node, 288, ... {LastWrite={0x76f4916c,0x1c73999}, TitleIdx=0, Name="{939438A9-CF0F-44d8-9140-599736F0D3A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02924 456 NtEnumerateKey (350, 1419, Node, 288, ... {LastWrite={0x57ff88d4,0x1c73999}, TitleIdx=0, Name= (350, 1419, Node, 288, ... {LastWrite={0x57ff88d4,0x1c73999}, TitleIdx=0, Name="{9381D8F5-0288-11d0-9501-00AA00B911A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02925 456 NtEnumerateKey (350, 1418, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1418, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{93714ED0-53F0-11D2-9EE6-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02926 456 NtEnumerateKey (350, 1417, Node, 288, ... {LastWrite={0x72d45fae,0x1c73999}, TitleIdx=0, Name= (350, 1417, Node, 288, ... {LastWrite={0x72d45fae,0x1c73999}, TitleIdx=0, Name="{934A9523-A3CA-4BC5-ADA0-D6D95D979421}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02927 456 NtEnumerateKey (350, 1416, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name= (350, 1416, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name="{93073C40-0BA5-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02928 456 NtEnumerateKey (350, 1415, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 1415, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{9305969B-F45F-47e5-A954-6EA879E874CC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02929 456 NtEnumerateKey (350, 1414, Node, 288, ... {LastWrite={0x6bb478bc,0x1c73999}, TitleIdx=0, Name= (350, 1414, Node, 288, ... {LastWrite={0x6bb478bc,0x1c73999}, TitleIdx=0, Name="{9301E380-1F22-11D3-8226-D2FA76255D47}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02930 456 NtEnumerateKey (350, 1413, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name= (350, 1413, Node, 288, ... {LastWrite={0x2170f960,0x1c73999}, TitleIdx=0, Name="{92ad68ab-17e0-11d1-b230-00c04fb9473f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02931 456 NtEnumerateKey (350, 1412, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1412, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{92A5010F-4404-4035-8D53-B87F5A736809}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02932 456 NtEnumerateKey (350, 1411, Node, 288, ... {LastWrite={0x60be48f2,0x1c73999}, TitleIdx=0, Name= (350, 1411, Node, 288, ... {LastWrite={0x60be48f2,0x1c73999}, TitleIdx=0, Name="{92A3A302-DA7C-4A1F-BA7E-1802BB5D2D02}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1411, Node, 288, ... {LastWrite={0x60be48f2,0x1c73999}, TitleIdx=0, Name="{92A3A302-DA7C-4A1F-BA7E-1802BB5D2D02}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 02933 456 NtEnumerateKey (350, 1410, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1410, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{927971f5-0939-11d1-8be1-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02934 456 NtEnumerateKey (350, 1409, Node, 288, ... {LastWrite={0x582cd582,0x1c73999}, TitleIdx=0, Name= (350, 1409, Node, 288, ... {LastWrite={0x582cd582,0x1c73999}, TitleIdx=0, Name="{92396AD0-68F5-11d0-A57E-00A0C9138C66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02935 456 NtEnumerateKey (350, 1408, Node, 288, ... {LastWrite={0x62c3a73c,0x1c73999}, TitleIdx=0, Name= (350, 1408, Node, 288, ... {LastWrite={0x62c3a73c,0x1c73999}, TitleIdx=0, Name="{92337A8C-E11D-11D0-BE48-00C04FC30DF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02936 456 NtEnumerateKey (350, 1407, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name= (350, 1407, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name="{922AAE35-763E-4896-83C9-F564FC7F2382}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02937 456 NtEnumerateKey (350, 1406, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1406, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{92187326-72B4-11d0-A1AC-0000F8026977}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02938 456 NtEnumerateKey (350, 1405, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 1405, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{91EA3F8B-C99B-11d0-9815-00C04FD91972}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02939 456 NtEnumerateKey (350, 1404, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1404, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{91888BF6-FED1-4acd-9CB1-6C2F80AE58A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02940 456 NtEnumerateKey (350, 1403, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name= (350, 1403, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name="{91870674-DE84-4313-B07D-A387415BB4F5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02941 456 NtEnumerateKey (350, 1402, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1402, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{9185F743-1143-4C28-86B5-BFF14F20E5C8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02942 456 NtEnumerateKey (350, 1401, Node, 288, ... {LastWrite={0x95f8c276,0x1c7853a}, TitleIdx=0, Name= (350, 1401, Node, 288, ... {LastWrite={0x95f8c276,0x1c7853a}, TitleIdx=0, Name="{91814EC0-B5F0-11D2-80B9-00104B1F6CEA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02943 456 NtEnumerateKey (350, 1400, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 1400, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{91643D00-4AFA-11D1-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02944 456 NtEnumerateKey (350, 1399, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name= (350, 1399, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name="{911685D1-350F-11d1-83B3-00C04FBD7C09}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02945 456 NtEnumerateKey (350, 1398, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1398, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{90903716-2F42-11D3-9C26-00C04F8EF87C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02946 456 NtEnumerateKey (350, 1397, Node, 288, ... {LastWrite={0xae9f11fa,0x1c738c7}, TitleIdx=0, Name= (350, 1397, Node, 288, ... {LastWrite={0xae9f11fa,0x1c738c7}, TitleIdx=0, Name="{905667aa-acd6-11d2-8080-00805f6596d2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02947 456 NtEnumerateKey (350, 1396, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name= (350, 1396, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name="{90087284-d6d6-11d0-8353-00a0c90640bf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02948 456 NtEnumerateKey (350, 1395, Node, 288, ... {LastWrite={0x615941cc,0x1c73999}, TitleIdx=0, Name= (350, 1395, Node, 288, ... {LastWrite={0x615941cc,0x1c73999}, TitleIdx=0, Name="{8FE7E181-BB96-11D2-A1CB-00609778EA66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02949 456 NtEnumerateKey (350, 1394, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name= (350, 1394, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name="{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02950 456 NtEnumerateKey (350, 1393, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 1393, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{8FA0D5A8-DEDF-11D0-9A61-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02951 456 NtEnumerateKey (350, 1392, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1392, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{8f92a857-478e-11d1-a3b4-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02952 456 NtEnumerateKey (350, 1391, Node, 288, ... {LastWrite={0x6f0c64f2,0x1c73999}, TitleIdx=0, Name= (350, 1391, Node, 288, ... {LastWrite={0x6f0c64f2,0x1c73999}, TitleIdx=0, Name="{8F86A876-E12A-4159-9647-EAFE0288014F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02953 456 NtEnumerateKey (350, 1390, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1390, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{8f6b0360-b80d-11d0-a9b3-006097942311}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02954 456 NtEnumerateKey (350, 1389, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 1389, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{8F0C5675-AEEF-11d0-84F0-00C04FD43F8F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02955 456 NtEnumerateKey (350, 1388, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name= (350, 1388, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name="{8EE97210-FD1F-4B19-91DA-67914005F020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02956 456 NtEnumerateKey (350, 1387, Node, 288, ... {LastWrite={0x6e54cfe0,0x1c73999}, TitleIdx=0, Name= (350, 1387, Node, 288, ... {LastWrite={0x6e54cfe0,0x1c73999}, TitleIdx=0, Name="{8EE42293-C315-11D0-8D6F-00A0C9A06E1F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02957 456 NtEnumerateKey (350, 1386, Node, 288, ... {LastWrite={0x58b25932,0x1c73999}, TitleIdx=0, Name= (350, 1386, Node, 288, ... {LastWrite={0x58b25932,0x1c73999}, TitleIdx=0, Name="{8ED14CC0-7A1F-11d0-92F6-00A0C922E6B2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02958 456 NtEnumerateKey (350, 1385, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1385, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02959 456 NtEnumerateKey (350, 1384, Node, 288, ... {LastWrite={0x6b682d7c,0x1c73999}, TitleIdx=0, Name= (350, 1384, Node, 288, ... {LastWrite={0x6b682d7c,0x1c73999}, TitleIdx=0, Name="{8E82AD03-D1A3-11D2-9374-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02960 456 NtEnumerateKey (350, 1383, Node, 288, ... {LastWrite={0x6b682d7c,0x1c73999}, TitleIdx=0, Name= (350, 1383, Node, 288, ... {LastWrite={0x6b682d7c,0x1c73999}, TitleIdx=0, Name="{8E82AD02-D1A3-11D2-9374-00C04F72DAF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02961 456 NtEnumerateKey (350, 1382, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1382, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{8e827c11-33e7-4bc1-b242-8cd9a1c2b304}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02962 456 NtEnumerateKey (350, 1381, Node, 288, ... {LastWrite={0x76193914,0x1c73999}, TitleIdx=0, Name= (350, 1381, Node, 288, ... {LastWrite={0x76193914,0x1c73999}, TitleIdx=0, Name="{8E71888A-423F-11D2-876E-00A0C9082467}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02963 456 NtEnumerateKey (350, 1380, Node, 288, ... {LastWrite={0x762524d6,0x1c73999}, TitleIdx=0, Name= (350, 1380, Node, 288, ... {LastWrite={0x762524d6,0x1c73999}, TitleIdx=0, Name="{8E718888-423F-11D2-876E-00A0C9082467}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02964 456 NtEnumerateKey (350, 1379, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 1379, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{8E6E6079-0CB7-11d2-8F10-0000F87ABD16}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02965 456 NtEnumerateKey (350, 1378, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 1378, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{8E17FFF3-C5BA-11D1-8D8A-0060088F38C8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02966 456 NtEnumerateKey (350, 1377, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name= (350, 1377, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name="{8DD6C641-98CB-11D1-9846-00A024CFEF6D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02967 456 NtEnumerateKey (350, 1376, Node, 288, ... {LastWrite={0x76d592da,0x1c73999}, TitleIdx=0, Name= (350, 1376, Node, 288, ... {LastWrite={0x76d592da,0x1c73999}, TitleIdx=0, Name="{8DD448E6-C188-4aed-AF92-44956194EB1F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02968 456 NtEnumerateKey (350, 1375, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1375, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{8DBEF13F-1948-4AA8-8CF0-048EEBED95D8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02969 456 NtEnumerateKey (350, 1374, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 1374, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{8DB2180F-BD29-11D1-8B7E-00C04FD7A924}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02970 456 NtEnumerateKey (350, 1373, Node, 288, ... {LastWrite={0x629b1f42,0x1c73999}, TitleIdx=0, Name= (350, 1373, Node, 288, ... {LastWrite={0x629b1f42,0x1c73999}, TitleIdx=0, Name="{8dabe793-23d9-45df-a3db-f442883bb479}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02971 456 NtEnumerateKey (350, 1372, Node, 288, ... {LastWrite={0x57ae78e0,0x1c73999}, TitleIdx=0, Name= (350, 1372, Node, 288, ... {LastWrite={0x57ae78e0,0x1c73999}, TitleIdx=0, Name="{8D91090E-B955-11D1-ADC5-006008A5848C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02972 456 NtEnumerateKey (350, 1371, Node, 288, ... {LastWrite={0x75260938,0x1c73999}, TitleIdx=0, Name= (350, 1371, Node, 288, ... {LastWrite={0x75260938,0x1c73999}, TitleIdx=0, Name="{8D8763AB-E93B-4812-964E-F04E0008FD50}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02973 456 NtEnumerateKey (350, 1370, Node, 288, ... {LastWrite={0x6eeb0406,0x1c73999}, TitleIdx=0, Name= (350, 1370, Node, 288, ... {LastWrite={0x6eeb0406,0x1c73999}, TitleIdx=0, Name="{8D670533-270B-4549-B19B-414FB9C6EBDB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02974 456 NtEnumerateKey (350, 1369, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 1369, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{8D5C6CB6-0B44-4A5A-B785-44C366D4E677}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02975 456 NtEnumerateKey (350, 1368, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name= (350, 1368, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name="{8D4B04E1-1331-11d0-81B8-00C04FD85AB4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02976 456 NtEnumerateKey (350, 1367, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name= (350, 1367, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name="{8D2A317B-D98B-4efa-89D6-E49F0ACF98A1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02977 456 NtEnumerateKey (350, 1366, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1366, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{8D1C559D-84F0-4BB3-A7D5-56A7435A9BA6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02978 456 NtEnumerateKey (350, 1365, Node, 288, ... {LastWrite={0x758a2bfc,0x1c73999}, TitleIdx=0, Name= (350, 1365, Node, 288, ... {LastWrite={0x758a2bfc,0x1c73999}, TitleIdx=0, Name="{8cb9cc06-d139-4ae6-8bb4-41e612e141d5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02979 456 NtEnumerateKey (350, 1364, Node, 288, ... {LastWrite={0x2178206e,0x1c73999}, TitleIdx=0, Name= (350, 1364, Node, 288, ... {LastWrite={0x2178206e,0x1c73999}, TitleIdx=0, Name="{8C836AF9-FFAC-11D0-8ED4-00C04FC2C17B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02980 456 NtEnumerateKey (350, 1363, Node, 288, ... {LastWrite={0x21650d9e,0x1c73999}, TitleIdx=0, Name= (350, 1363, Node, 288, ... {LastWrite={0x21650d9e,0x1c73999}, TitleIdx=0, Name="{8C758294-9351-11d1-9D1A-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02981 456 NtEnumerateKey (350, 1362, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 1362, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{8C7461EF-2B13-11d2-BE35-3078302C2030}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02982 456 NtEnumerateKey (350, 1361, Node, 288, ... {LastWrite={0x72f0fbe6,0x1c73999}, TitleIdx=0, Name= (350, 1361, Node, 288, ... {LastWrite={0x72f0fbe6,0x1c73999}, TitleIdx=0, Name="{8C5BAC53-6CE6-44DB-9800-6BDB17ECA13D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02983 456 NtEnumerateKey (350, 1360, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name= (350, 1360, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name="{8C4EB103-516F-11D1-A6DF-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02984 456 NtEnumerateKey (350, 1359, Node, 288, ... {LastWrite={0x95ffe984,0x1c7853a}, TitleIdx=0, Name= (350, 1359, Node, 288, ... {LastWrite={0x95ffe984,0x1c7853a}, TitleIdx=0, Name="{8c3c1b17-e59d-11d2-b40b-00a024b9dddd}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02985 456 NtEnumerateKey (350, 1358, Node, 288, ... {LastWrite={0x58d61c78,0x1c73999}, TitleIdx=0, Name= (350, 1358, Node, 288, ... {LastWrite={0x58d61c78,0x1c73999}, TitleIdx=0, Name="{8C3ADF99-CCFE-11d2-AD10-00C04F72DD47}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02986 456 NtEnumerateKey (350, 1357, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name= (350, 1357, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name="{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02987 456 NtEnumerateKey (350, 1356, Node, 288, ... {LastWrite={0x25938d78,0x1c73999}, TitleIdx=0, Name= (350, 1356, Node, 288, ... {LastWrite={0x25938d78,0x1c73999}, TitleIdx=0, Name="{8BC3F05E-D86B-11D0-A075-00C04FB68820}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02988 456 NtEnumerateKey (350, 1355, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1355, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{8b20cd60-0f29-11cf-abc4-02608c9e7553}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02989 456 NtEnumerateKey (350, 1354, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name= (350, 1354, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name="{8A6842BB-84DB-4EFA-99B9-06C850DF53FC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02990 456 NtEnumerateKey (350, 1353, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name= (350, 1353, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name="{8A674B4D-1F63-11D3-B64C-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02991 456 NtEnumerateKey (350, 1352, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name= (350, 1352, Node, 288, ... {LastWrite={0x6eaf693c,0x1c73999}, TitleIdx=0, Name="{8A674B4C-1F63-11D3-B64C-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02992 456 NtEnumerateKey (350, 1351, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name= (350, 1351, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name="{8A674B49-1F63-11D3-B64C-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02993 456 NtEnumerateKey (350, 1350, Node, 288, ... {LastWrite={0x6bd3774e,0x1c73999}, TitleIdx=0, Name= (350, 1350, Node, 288, ... {LastWrite={0x6bd3774e,0x1c73999}, TitleIdx=0, Name="{8A667154-F9CB-11D2-AD8A-0060B0575ABC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02994 456 NtEnumerateKey (350, 1349, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name= (350, 1349, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name="{8A3F59E1-4994-11D1-A40D-00600831F336}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02995 456 NtEnumerateKey (350, 1348, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 1348, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{8A23E65E-31C2-11d0-891C-00A024AB2DBB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02996 456 NtEnumerateKey (350, 1347, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name= (350, 1347, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name="{8A03567A-63CB-4BA8-BAF6-52119816D1EF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02997 456 NtEnumerateKey (350, 1346, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 1346, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{89F9F7B0-8DE3-4AE0-8B41-109ABAB32151}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02998 456 NtEnumerateKey (350, 1345, Node, 288, ... {LastWrite={0x754507ca,0x1c73999}, TitleIdx=0, Name= (350, 1345, Node, 288, ... {LastWrite={0x754507ca,0x1c73999}, TitleIdx=0, Name="{896E73F0-3851-11D3-AA54-00C04FD22F6C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 02999 456 NtEnumerateKey (350, 1344, Node, 288, ... {LastWrite={0x76147460,0x1c73999}, TitleIdx=0, Name= (350, 1344, Node, 288, ... {LastWrite={0x76147460,0x1c73999}, TitleIdx=0, Name="{89643D21-7B2A-11d1-8271-00A0C91F9CA0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03000 456 NtEnumerateKey (350, 1343, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1343, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03001 456 NtEnumerateKey (350, 1342, Node, 288, ... {LastWrite={0x5d960bc4,0x1c73999}, TitleIdx=0, Name= (350, 1342, Node, 288, ... {LastWrite={0x5d960bc4,0x1c73999}, TitleIdx=0, Name="{88C6C381-2E85-11D0-94DE-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03002 456 NtEnumerateKey (350, 1341, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name= (350, 1341, Node, 288, ... {LastWrite={0x5e500330,0x1c73999}, TitleIdx=0, Name="{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03003 456 NtEnumerateKey (350, 1340, Node, 288, ... {LastWrite={0x60d62076,0x1c73999}, TitleIdx=0, Name= (350, 1340, Node, 288, ... {LastWrite={0x60d62076,0x1c73999}, TitleIdx=0, Name="{888D5481-CABB-11D1-8505-00A0C91F9CA0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03004 456 NtEnumerateKey (350, 1339, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1339, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{88895560-9AA2-1069-930E-00AA0030EBC8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03005 456 NtEnumerateKey (350, 1338, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name= (350, 1338, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name="{8872FF1B-98FA-4D7A-8D93-C9F1055F85BB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03006 456 NtEnumerateKey (350, 1337, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 1337, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{8856F961-340A-11D0-A96B-00C04FD705A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03007 456 NtEnumerateKey (350, 1336, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name= (350, 1336, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name="{883373C3-BF89-11D1-BE35-080036B11A03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03008 456 NtEnumerateKey (350, 1335, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name= (350, 1335, Node, 288, ... {LastWrite={0x6bda9e5c,0x1c73999}, TitleIdx=0, Name="{87FC0268-9A55-4360-95AA-004A1D9DE26C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03009 456 NtEnumerateKey (350, 1334, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1334, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{87E39081-F69A-11D2-854F-00A0C9C898E7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03010 456 NtEnumerateKey (350, 1333, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name= (350, 1333, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name="{87D62D94-71B3-4b9a-9489-5FE6850DC73E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03011 456 NtEnumerateKey (350, 1332, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name= (350, 1332, Node, 288, ... {LastWrite={0x612e5778,0x1c73999}, TitleIdx=0, Name="{87CA6F04-49E4-11CF-A3FE-00AA003735BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03012 456 NtEnumerateKey (350, 1331, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name= (350, 1331, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name="{87CA6F02-49E4-11CF-A3FE-00AA003735BE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03013 456 NtEnumerateKey (350, 1330, Node, 288, ... {LastWrite={0x5b3ad8d2,0x1c73999}, TitleIdx=0, Name= (350, 1330, Node, 288, ... {LastWrite={0x5b3ad8d2,0x1c73999}, TitleIdx=0, Name="{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03014 456 NtEnumerateKey (350, 1329, Node, 288, ... {LastWrite={0x76717016,0x1c73999}, TitleIdx=0, Name= (350, 1329, Node, 288, ... {LastWrite={0x76717016,0x1c73999}, TitleIdx=0, Name="{87291B51-0C8E-11D3-BB2A-00A0C93CA73A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03015 456 NtEnumerateKey (350, 1328, Node, 288, ... {LastWrite={0x5ba622a4,0x1c73999}, TitleIdx=0, Name= (350, 1328, Node, 288, ... {LastWrite={0x5ba622a4,0x1c73999}, TitleIdx=0, Name="{871C5380-42A0-1069-A2EA-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03016 456 NtEnumerateKey (350, 1327, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1327, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{86F19A00-42A0-1069-A2EB-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03017 456 NtEnumerateKey (350, 1326, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name= (350, 1326, Node, 288, ... {LastWrite={0x985f4018,0x1c738c7}, TitleIdx=0, Name="{86F19A00-42A0-1069-A2E9-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03018 456 NtEnumerateKey (350, 1325, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 1325, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{86D54F3D-652D-4ab3-A1A6-14D403F6C813}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03019 456 NtEnumerateKey (350, 1324, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name= (350, 1324, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name="{86C86720-42A0-1069-A2E8-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03020 456 NtEnumerateKey (350, 1323, Node, 288, ... {LastWrite={0x9d3f73b6,0x1c7f396}, TitleIdx=0, Name= (350, 1323, Node, 288, ... {LastWrite={0x9d3f73b6,0x1c7f396}, TitleIdx=0, Name="{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03021 456 NtEnumerateKey (350, 1322, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name= (350, 1322, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name="{86747AC0-42A0-1069-A2E6-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03022 456 NtEnumerateKey (350, 1321, Node, 288, ... {LastWrite={0x6ed32c82,0x1c73999}, TitleIdx=0, Name= (350, 1321, Node, 288, ... {LastWrite={0x6ed32c82,0x1c73999}, TitleIdx=0, Name="{8664DA16-DDA2-42AC-926A-C18F9127C302}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1321, Node, 288, ... {LastWrite={0x6ed32c82,0x1c73999}, TitleIdx=0, Name="{8664DA16-DDA2-42AC-926A-C18F9127C302}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03023 456 NtEnumerateKey (350, 1320, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 1320, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{8652CE55-9E80-11D1-9053-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03024 456 NtEnumerateKey (350, 1319, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1319, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{864A1288-354C-4D19-9D68-C2742BB14997}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03025 456 NtEnumerateKey (350, 1318, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 1318, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{86422020-42A0-1069-A2E5-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03026 456 NtEnumerateKey (350, 1317, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name= (350, 1317, Node, 288, ... {LastWrite={0x6076c266,0x1c73999}, TitleIdx=0, Name="{863FA3AC-9D97-4560-9587-7FA58727608B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03027 456 NtEnumerateKey (350, 1316, Node, 288, ... {LastWrite={0x5b6cea34,0x1c73999}, TitleIdx=0, Name= (350, 1316, Node, 288, ... {LastWrite={0x5b6cea34,0x1c73999}, TitleIdx=0, Name="{8610e1b4-57c3-441b-9821-c81c51c3ac08}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03028 456 NtEnumerateKey (350, 1315, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1315, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{860d28d0-8bf4-11ce-be59-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03029 456 NtEnumerateKey (350, 1314, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name= (350, 1314, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name="{860BB310-5D01-11d0-BD3B-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03030 456 NtEnumerateKey (350, 1313, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name= (350, 1313, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name="{85BBD920-42A0-1069-A2E4-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03031 456 NtEnumerateKey (350, 1312, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name= (350, 1312, Node, 288, ... {LastWrite={0x60e20c38,0x1c73999}, TitleIdx=0, Name="{8596E5F0-0DA5-11D0-BD21-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03032 456 NtEnumerateKey (350, 1311, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1311, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{855B6281-563C-4462-8C6D-5326CA1D4FE4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03033 456 NtEnumerateKey (350, 1310, Node, 288, ... {LastWrite={0x6f0ec74c,0x1c73999}, TitleIdx=0, Name= (350, 1310, Node, 288, ... {LastWrite={0x6f0ec74c,0x1c73999}, TitleIdx=0, Name="{8520EF80-1C19-4CB0-83FA-67DB59CC9AE4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03034 456 NtEnumerateKey (350, 1309, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name= (350, 1309, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name="{85131631-480C-11D2-B1F9-00C04F86C324}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03035 456 NtEnumerateKey (350, 1308, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name= (350, 1308, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name="{85131630-480C-11D2-B1F9-00C04F86C324}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03036 456 NtEnumerateKey (350, 1307, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 1307, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{84D586C4-A423-11D2-B943-00C04F79D22F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03037 456 NtEnumerateKey (350, 1306, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 1306, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{8496e040-af4c-11d0-8212-00c04fc32c45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03038 456 NtEnumerateKey (350, 1305, Node, 288, ... {LastWrite={0x761b9b6e,0x1c73999}, TitleIdx=0, Name= (350, 1305, Node, 288, ... {LastWrite={0x761b9b6e,0x1c73999}, TitleIdx=0, Name="{847B4DF5-4B61-11D2-9BDB-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03039 456 NtEnumerateKey (350, 1304, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name= (350, 1304, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name="{84725EA1-2FBC-11D1-BC86-00A0C969FC67}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03040 456 NtEnumerateKey (350, 1303, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1303, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{84720068-F106-4B58-A4C6-189382AB39BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03041 456 NtEnumerateKey (350, 1302, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name= (350, 1302, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name="{844F4806-E8A8-11d2-9652-00C04FC30871}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03042 456 NtEnumerateKey (350, 1301, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name= (350, 1301, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name="{842D84C9-C347-11D1-8F64-00C04FB611C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03043 456 NtEnumerateKey (350, 1300, Node, 288, ... {LastWrite={0x5ffd2a78,0x1c73999}, TitleIdx=0, Name= (350, 1300, Node, 288, ... {LastWrite={0x5ffd2a78,0x1c73999}, TitleIdx=0, Name="{83BC5EC0-6F2A-11d0-A1C4-00AA00C16E65}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03044 456 NtEnumerateKey (350, 1299, Node, 288, ... {LastWrite={0xae9f11fa,0x1c738c7}, TitleIdx=0, Name= (350, 1299, Node, 288, ... {LastWrite={0xae9f11fa,0x1c738c7}, TitleIdx=0, Name="{83bbcbf3-b28a-4919-a5aa-73027445d672}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03045 456 NtEnumerateKey (350, 1298, Node, 288, ... {LastWrite={0x5d960bc4,0x1c73999}, TitleIdx=0, Name= (350, 1298, Node, 288, ... {LastWrite={0x5d960bc4,0x1c73999}, TitleIdx=0, Name="{8369AB20-56C9-11D0-94E8-00AA0059CE02}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03046 456 NtEnumerateKey (350, 1297, Node, 288, ... {LastWrite={0x6f0a0298,0x1c73999}, TitleIdx=0, Name= (350, 1297, Node, 288, ... {LastWrite={0x6f0a0298,0x1c73999}, TitleIdx=0, Name="{83568B75-1FCC-4853-957A-9CF617B350A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03047 456 NtEnumerateKey (350, 1296, Node, 288, ... {LastWrite={0x6d12f26a,0x1c73999}, TitleIdx=0, Name= (350, 1296, Node, 288, ... {LastWrite={0x6d12f26a,0x1c73999}, TitleIdx=0, Name="{834C5A62-E0BB-4FB4-87B9-F37C869C976B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03048 456 NtEnumerateKey (350, 1295, Node, 288, ... {LastWrite={0x63f271e2,0x1c73999}, TitleIdx=0, Name= (350, 1295, Node, 288, ... {LastWrite={0x63f271e2,0x1c73999}, TitleIdx=0, Name="{833E4012-AFF7-4AC3-AAC2-9F24C1457BCE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03049 456 NtEnumerateKey (350, 1294, Node, 288, ... {LastWrite={0x63f271e2,0x1c73999}, TitleIdx=0, Name= (350, 1294, Node, 288, ... {LastWrite={0x63f271e2,0x1c73999}, TitleIdx=0, Name="{833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03050 456 NtEnumerateKey (350, 1293, Node, 288, ... {LastWrite={0x7577192c,0x1c73999}, TitleIdx=0, Name= (350, 1293, Node, 288, ... {LastWrite={0x7577192c,0x1c73999}, TitleIdx=0, Name="{82d353df-90bd-4382-8bc2-3f6192b76e34}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03051 456 NtEnumerateKey (350, 1292, Node, 288, ... {LastWrite={0x614d560a,0x1c73999}, TitleIdx=0, Name= (350, 1292, Node, 288, ... {LastWrite={0x614d560a,0x1c73999}, TitleIdx=0, Name="{82CCD3E0-F71A-11D0-9FE5-00609778EA66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03052 456 NtEnumerateKey (350, 1291, Node, 288, ... {LastWrite={0x71c9584e,0x1c73999}, TitleIdx=0, Name= (350, 1291, Node, 288, ... {LastWrite={0x71c9584e,0x1c73999}, TitleIdx=0, Name="{82BD0E67-9FEA-4748-8672-D5EFE5B779B0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03053 456 NtEnumerateKey (350, 1290, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1290, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{8278F931-2A3E-11d2-838F-00C04FD918D0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03054 456 NtEnumerateKey (350, 1289, Node, 288, ... {LastWrite={0x6eb8f2a4,0x1c73999}, TitleIdx=0, Name= (350, 1289, Node, 288, ... {LastWrite={0x6eb8f2a4,0x1c73999}, TitleIdx=0, Name="{823535A0-0318-11D3-9D8E-00C04F72D980}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03055 456 NtEnumerateKey (350, 1288, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name= (350, 1288, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name="{81D2F0F2-5671-411f-9F31-8823E9A444DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03056 456 NtEnumerateKey (350, 1287, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name= (350, 1287, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name="{819469D2-D0CF-11d1-8E0B-00C04FC2E0C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03057 456 NtEnumerateKey (350, 1286, Node, 288, ... {LastWrite={0x6e847ee8,0x1c73999}, TitleIdx=0, Name= (350, 1286, Node, 288, ... {LastWrite={0x6e847ee8,0x1c73999}, TitleIdx=0, Name="{814B9801-1C88-11D1-BAD9-00609744111A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03058 456 NtEnumerateKey (350, 1285, Node, 288, ... {LastWrite={0x6e847ee8,0x1c73999}, TitleIdx=0, Name= (350, 1285, Node, 288, ... {LastWrite={0x6e847ee8,0x1c73999}, TitleIdx=0, Name="{814B9800-1C88-11D1-BAD9-00609744111A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03059 456 NtEnumerateKey (350, 1284, Node, 288, ... {LastWrite={0xae6a9e3e,0x1c738c7}, TitleIdx=0, Name= (350, 1284, Node, 288, ... {LastWrite={0xae6a9e3e,0x1c738c7}, TitleIdx=0, Name="{8144B6F5-20A8-444a-B8EE-19DF0BB84BDB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03060 456 NtEnumerateKey (350, 1283, Node, 288, ... {LastWrite={0x6de9860e,0x1c73999}, TitleIdx=0, Name= (350, 1283, Node, 288, ... {LastWrite={0x6de9860e,0x1c73999}, TitleIdx=0, Name="{81397204-F51A-4571-8D7B-DC030521AABD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03061 456 NtEnumerateKey (350, 1282, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name= (350, 1282, Node, 288, ... {LastWrite={0x6e015d92,0x1c73999}, TitleIdx=0, Name="{810E402F-056B-11D2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03062 456 NtEnumerateKey (350, 1281, Node, 288, ... {LastWrite={0x6bc9ede6,0x1c73999}, TitleIdx=0, Name= (350, 1281, Node, 288, ... {LastWrite={0x6bc9ede6,0x1c73999}, TitleIdx=0, Name="{810B5013-E88D-11D2-8BC1-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03063 456 NtEnumerateKey (350, 1280, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name= (350, 1280, Node, 288, ... {LastWrite={0x601e8b64,0x1c73999}, TitleIdx=0, Name="{80F94176-FCCC-11D2-B991-00C04F8ECD78}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03064 456 NtEnumerateKey (350, 1279, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name= (350, 1279, Node, 288, ... {LastWrite={0x632567a6,0x1c73999}, TitleIdx=0, Name="{80F49562-6A9A-11d2-875F-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03065 456 NtEnumerateKey (350, 1278, Node, 288, ... {LastWrite={0x58ad947e,0x1c73999}, TitleIdx=0, Name= (350, 1278, Node, 288, ... {LastWrite={0x58ad947e,0x1c73999}, TitleIdx=0, Name="{80EE4902-33A8-11d1-A213-0080C88593A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03066 456 NtEnumerateKey (350, 1277, Node, 288, ... {LastWrite={0x58ad947e,0x1c73999}, TitleIdx=0, Name= (350, 1277, Node, 288, ... {LastWrite={0x58ad947e,0x1c73999}, TitleIdx=0, Name="{80EE4901-33A8-11d1-A213-0080C88593A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03067 456 NtEnumerateKey (350, 1276, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name= (350, 1276, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name="{80E5A1C4-A83E-11d3-BB4A-00A0C93CA73A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03068 456 NtEnumerateKey (350, 1275, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name= (350, 1275, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name="{80A3E9B0-A246-11D3-BB8C-0090272FA362}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03069 456 NtEnumerateKey (350, 1274, Node, 288, ... {LastWrite={0x63b474be,0x1c73999}, TitleIdx=0, Name= (350, 1274, Node, 288, ... {LastWrite={0x63b474be,0x1c73999}, TitleIdx=0, Name="{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03070 456 NtEnumerateKey (350, 1273, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1273, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{8021D50E-D93C-4075-8504-FC4E124D64E9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03071 456 NtEnumerateKey (350, 1272, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 1272, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{7febaf7c-18cf-11d2-993f-00a0c91f3880}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03072 456 NtEnumerateKey (350, 1271, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name= (350, 1271, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name="{7FE0D935-DDA6-443F-85D0-1CFB58FE41DD}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1271, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name="{7FE0D935-DDA6-443F-85D0-1CFB58FE41DD}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03073 456 NtEnumerateKey (350, 1270, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name= (350, 1270, Node, 288, ... {LastWrite={0x5d9f952c,0x1c73999}, TitleIdx=0, Name="{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03074 456 NtEnumerateKey (350, 1269, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name= (350, 1269, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name="{7FB1D98A-F895-4761-8DC2-774969C84D10}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03075 456 NtEnumerateKey (350, 1268, Node, 288, ... {LastWrite={0x6ea5dfd4,0x1c73999}, TitleIdx=0, Name= (350, 1268, Node, 288, ... {LastWrite={0x6ea5dfd4,0x1c73999}, TitleIdx=0, Name="{7F9CB14D-48E4-43B6-9346-1AEBC39C64D3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03076 456 NtEnumerateKey (350, 1267, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name= (350, 1267, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name="{7F598975-37E0-4A67-A992-116680F0CEDA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03077 456 NtEnumerateKey (350, 1266, Node, 288, ... {LastWrite={0x2169d252,0x1c73999}, TitleIdx=0, Name= (350, 1266, Node, 288, ... {LastWrite={0x2169d252,0x1c73999}, TitleIdx=0, Name="{7F43B400-1A0E-4D57-BBC9-6B0C65F7A889}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1266, Node, 288, ... {LastWrite={0x2169d252,0x1c73999}, TitleIdx=0, Name="{7F43B400-1A0E-4D57-BBC9-6B0C65F7A889}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03078 456 NtEnumerateKey (350, 1265, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1265, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{7F368827-9516-11D0-83D9-00A0C911E5DF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03079 456 NtEnumerateKey (350, 1264, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name= (350, 1264, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name="{7F1899DA-62A6-11D0-A2C6-00C04FD909DD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03080 456 NtEnumerateKey (350, 1263, Node, 288, ... {LastWrite={0xae506460,0x1c738c7}, TitleIdx=0, Name= (350, 1263, Node, 288, ... {LastWrite={0xae506460,0x1c738c7}, TitleIdx=0, Name="{7EFA65D9-573C-4E46-8CCB-E7FB9E56CD57}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03081 456 NtEnumerateKey (350, 1262, Node, 288, ... {LastWrite={0x5ac140e4,0x1c73999}, TitleIdx=0, Name= (350, 1262, Node, 288, ... {LastWrite={0x5ac140e4,0x1c73999}, TitleIdx=0, Name="{7EB5FBE4-2100-49E6-8593-17E130122F91}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03082 456 NtEnumerateKey (350, 1261, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1261, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{7e99c0a3-f935-11d2-ba96-00c04fb6d0d1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03083 456 NtEnumerateKey (350, 1260, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name= (350, 1260, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name="{7E8BC44E-AEFF-11D1-89C2-00C04FB6BFC4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03084 456 NtEnumerateKey (350, 1259, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1259, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{7e653215-fa25-46bd-a339-34a2790f3cb7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03085 456 NtEnumerateKey (350, 1258, Node, 288, ... {LastWrite={0x6090fc44,0x1c73999}, TitleIdx=0, Name= (350, 1258, Node, 288, ... {LastWrite={0x6090fc44,0x1c73999}, TitleIdx=0, Name="{7E48C5CF-72F6-4C84-9F43-B04B87B31243}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03086 456 NtEnumerateKey (350, 1257, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name= (350, 1257, Node, 288, ... {LastWrite={0x605a262e,0x1c73999}, TitleIdx=0, Name="{7E45546F-6D52-4D10-B702-9C2E67232E62}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03087 456 NtEnumerateKey (350, 1256, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name= (350, 1256, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name="{7E3FCEA1-31B4-11d2-AE1F-0080C7337EA1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03088 456 NtEnumerateKey (350, 1255, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1255, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{7DF62B50-6843-11D2-9EEB-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03089 456 NtEnumerateKey (350, 1254, Node, 288, ... {LastWrite={0x61489156,0x1c73999}, TitleIdx=0, Name= (350, 1254, Node, 288, ... {LastWrite={0x61489156,0x1c73999}, TitleIdx=0, Name="{7D8EA000-731E-11d0-AC50-00AA00BF35C4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03090 456 NtEnumerateKey (350, 1253, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1253, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{7D8AA343-6E63-4663-BE90-6B80F66540A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03091 456 NtEnumerateKey (350, 1252, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name= (350, 1252, Node, 288, ... {LastWrite={0x5d9d32d2,0x1c73999}, TitleIdx=0, Name="{7D559C10-9FE9-11d0-93F7-00AA0059CE02}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03092 456 NtEnumerateKey (350, 1251, Node, 288, ... {LastWrite={0x76d592da,0x1c73999}, TitleIdx=0, Name= (350, 1251, Node, 288, ... {LastWrite={0x76d592da,0x1c73999}, TitleIdx=0, Name="{7D4734E6-047E-41e2-AEAA-E763B4739DC4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03093 456 NtEnumerateKey (350, 1250, Node, 288, ... {LastWrite={0x71f6a4fc,0x1c73999}, TitleIdx=0, Name= (350, 1250, Node, 288, ... {LastWrite={0x71f6a4fc,0x1c73999}, TitleIdx=0, Name="{7D07F313-A53F-459A-BB12-012C15B1846E}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1250, Node, 288, ... {LastWrite={0x71f6a4fc,0x1c73999}, TitleIdx=0, Name="{7D07F313-A53F-459A-BB12-012C15B1846E}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03094 456 NtEnumerateKey (350, 1249, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 1249, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{7CB359C5-570F-43c6-971F-1DB499EE57A1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03095 456 NtEnumerateKey (350, 1248, Node, 288, ... {LastWrite={0x1de23714,0x1c73999}, TitleIdx=0, Name= (350, 1248, Node, 288, ... {LastWrite={0x1de23714,0x1c73999}, TitleIdx=0, Name="{7cacbd7b-0d99-468f-ac33-22e495c0afe5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03096 456 NtEnumerateKey (350, 1247, Node, 288, ... {LastWrite={0x2579539a,0x1c73999}, TitleIdx=0, Name= (350, 1247, Node, 288, ... {LastWrite={0x2579539a,0x1c73999}, TitleIdx=0, Name="{7C857801-7381-11CF-884D-00AA004B2E24}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 1247, Node, 288, ... {LastWrite={0x2579539a,0x1c73999}, TitleIdx=0, Name="{7C857801-7381-11CF-884D-00AA004B2E24}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03097 456 NtEnumerateKey (350, 1246, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name= (350, 1246, Node, 288, ... {LastWrite={0x61010aca,0x1c73999}, TitleIdx=0, Name="{7C23220E-55BB-11D3-8B16-00C04FB6BD3D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03098 456 NtEnumerateKey (350, 1245, Node, 288, ... {LastWrite={0x580b7496,0x1c73999}, TitleIdx=0, Name= (350, 1245, Node, 288, ... {LastWrite={0x580b7496,0x1c73999}, TitleIdx=0, Name="{7C07E0D0-4418-11D2-9212-00C04FBBBFB3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03099 456 NtEnumerateKey (350, 1244, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name= (350, 1244, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name="{7be9d83c-a729-4d97-b5a7-1b7313c39e0a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03100 456 NtEnumerateKey (350, 1243, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 1243, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{7BD29E01-76C1-11CF-9DD0-00A0C9034933}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03101 456 NtEnumerateKey (350, 1242, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 1242, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{7BD29E00-76C1-11CF-9DD0-00A0C9034933}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03102 456 NtEnumerateKey (350, 1241, Node, 288, ... {LastWrite={0x7587c9a2,0x1c73999}, TitleIdx=0, Name= (350, 1241, Node, 288, ... {LastWrite={0x7587c9a2,0x1c73999}, TitleIdx=0, Name="{7bafb3b1-d8f4-4279-9253-27da423108de}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03103 456 NtEnumerateKey (350, 1240, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 1240, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{7BA4C742-9E81-11CF-99D3-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03104 456 NtEnumerateKey (350, 1239, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1239, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{7BA4C740-9E81-11CF-99D3-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03105 456 NtEnumerateKey (350, 1238, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1238, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{7b9e38b0-a97c-11d0-8534-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03106 456 NtEnumerateKey (350, 1237, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1237, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{7b8a2d95-0ac9-11d1-896c-00c04Fb6bfc4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03107 456 NtEnumerateKey (350, 1236, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1236, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{7b8a2d94-0ac9-11d1-896c-00c04Fb6bfc4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03108 456 NtEnumerateKey (350, 1235, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name= (350, 1235, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name="{7B3125F4-F14D-11D1-BE0C-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03109 456 NtEnumerateKey (350, 1234, Node, 288, ... {LastWrite={0x63a3c448,0x1c73999}, TitleIdx=0, Name= (350, 1234, Node, 288, ... {LastWrite={0x63a3c448,0x1c73999}, TitleIdx=0, Name="{7AF60DD4-4979-11D1-8A6C-00C04FC33566}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03110 456 NtEnumerateKey (350, 1233, Node, 288, ... {LastWrite={0x63a3c448,0x1c73999}, TitleIdx=0, Name= (350, 1233, Node, 288, ... {LastWrite={0x63a3c448,0x1c73999}, TitleIdx=0, Name="{7AF60DD3-4979-11D1-8A6C-00C04FC33566}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03111 456 NtEnumerateKey (350, 1232, Node, 288, ... {LastWrite={0x63a161ee,0x1c73999}, TitleIdx=0, Name= (350, 1232, Node, 288, ... {LastWrite={0x63a161ee,0x1c73999}, TitleIdx=0, Name="{7AF60DD2-4979-11D1-8A6C-00C04FC33566}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03112 456 NtEnumerateKey (350, 1231, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 1231, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{7A9D77BD-5403-11d2-8785-2E0420524153}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03113 456 NtEnumerateKey (350, 1230, Node, 288, ... {LastWrite={0x6ff146b2,0x1c73999}, TitleIdx=0, Name= (350, 1230, Node, 288, ... {LastWrite={0x6ff146b2,0x1c73999}, TitleIdx=0, Name="{7A80E4A8-8005-11D2-BCF8-00C04F72C717}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03114 456 NtEnumerateKey (350, 1229, Node, 288, ... {LastWrite={0x5eb6884e,0x1c73999}, TitleIdx=0, Name= (350, 1229, Node, 288, ... {LastWrite={0x5eb6884e,0x1c73999}, TitleIdx=0, Name="{7A707490-260A-11D1-83DF-00A0C90DC849}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03115 456 NtEnumerateKey (350, 1228, Node, 288, ... {LastWrite={0x6285aa18,0x1c73999}, TitleIdx=0, Name= (350, 1228, Node, 288, ... {LastWrite={0x6285aa18,0x1c73999}, TitleIdx=0, Name="{7a42ea29-a2b7-40c4-b091-f6f024aa89be}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03116 456 NtEnumerateKey (350, 1227, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1227, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{7A0227F6-7108-11D1-AD90-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03117 456 NtEnumerateKey (350, 1226, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1226, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9f2-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03118 456 NtEnumerateKey (350, 1225, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1225, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9f1-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03119 456 NtEnumerateKey (350, 1224, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1224, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e7-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03120 456 NtEnumerateKey (350, 1223, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1223, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e6-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03121 456 NtEnumerateKey (350, 1222, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1222, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e5-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03122 456 NtEnumerateKey (350, 1221, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1221, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e4-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03123 456 NtEnumerateKey (350, 1220, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1220, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e3-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03124 456 NtEnumerateKey (350, 1219, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 1219, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{79eac9e2-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03125 456 NtEnumerateKey (350, 1218, Node, 288, ... {LastWrite={0x5cc90188,0x1c73999}, TitleIdx=0, Name= (350, 1218, Node, 288, ... {LastWrite={0x5cc90188,0x1c73999}, TitleIdx=0, Name="{79eac9e0-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03126 456 NtEnumerateKey (350, 1217, Node, 288, ... {LastWrite={0x5b52b056,0x1c73999}, TitleIdx=0, Name= (350, 1217, Node, 288, ... {LastWrite={0x5b52b056,0x1c73999}, TitleIdx=0, Name="{79eac9d1-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03127 456 NtEnumerateKey (350, 1216, Node, 288, ... {LastWrite={0x5b52b056,0x1c73999}, TitleIdx=0, Name= (350, 1216, Node, 288, ... {LastWrite={0x5b52b056,0x1c73999}, TitleIdx=0, Name="{79eac9d0-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03128 456 NtEnumerateKey (350, 1215, Node, 288, ... {LastWrite={0x57a02ac4,0x1c73999}, TitleIdx=0, Name= (350, 1215, Node, 288, ... {LastWrite={0x57a02ac4,0x1c73999}, TitleIdx=0, Name="{79eac9c9-baf9-11ce-8c82-00aa004ba90b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03129 456 NtEnumerateKey (350, 1214, Node, 288, ... {LastWrite={0x6b9a3ede,0x1c73999}, TitleIdx=0, Name= (350, 1214, Node, 288, ... {LastWrite={0x6b9a3ede,0x1c73999}, TitleIdx=0, Name="{79BA9E00-B6EE-11D1-86BE-00C04FBF8FEF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03130 456 NtEnumerateKey (350, 1213, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 1213, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{7999FC25-D3C6-11CF-ACAB-00A024A55AEF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03131 456 NtEnumerateKey (350, 1212, Node, 288, ... {LastWrite={0x256640ca,0x1c73999}, TitleIdx=0, Name= (350, 1212, Node, 288, ... {LastWrite={0x256640ca,0x1c73999}, TitleIdx=0, Name="{7998DC37-D3FE-487C-A60A-7701FCC70CC6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03132 456 NtEnumerateKey (350, 1211, Node, 288, ... {LastWrite={0x633d3f2a,0x1c73999}, TitleIdx=0, Name= (350, 1211, Node, 288, ... {LastWrite={0x633d3f2a,0x1c73999}, TitleIdx=0, Name="{7988B573-EC89-11cf-9C00-00AA00A14F56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03133 456 NtEnumerateKey (350, 1210, Node, 288, ... {LastWrite={0x6336181c,0x1c73999}, TitleIdx=0, Name= (350, 1210, Node, 288, ... {LastWrite={0x6336181c,0x1c73999}, TitleIdx=0, Name="{7988B571-EC89-11cf-9C00-00AA00A14F56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03134 456 NtEnumerateKey (350, 1209, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name= (350, 1209, Node, 288, ... {LastWrite={0x615e0680,0x1c73999}, TitleIdx=0, Name="{79858DAE-2BCA-4FC4-B3DA-247DFEB0CB6F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03135 456 NtEnumerateKey (350, 1208, Node, 288, ... {LastWrite={0x58a66d70,0x1c73999}, TitleIdx=0, Name= (350, 1208, Node, 288, ... {LastWrite={0x58a66d70,0x1c73999}, TitleIdx=0, Name="{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03136 456 NtEnumerateKey (350, 1207, Node, 288, ... {LastWrite={0x6d214086,0x1c73999}, TitleIdx=0, Name= (350, 1207, Node, 288, ... {LastWrite={0x6d214086,0x1c73999}, TitleIdx=0, Name="{797EF3B3-127B-4283-8096-1E8084BF67A6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03137 456 NtEnumerateKey (350, 1206, Node, 288, ... {LastWrite={0x592e537a,0x1c73999}, TitleIdx=0, Name= (350, 1206, Node, 288, ... {LastWrite={0x592e537a,0x1c73999}, TitleIdx=0, Name="{797A9BB1-9E49-4e63-AFE1-1B45B9DC8162}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03138 456 NtEnumerateKey (350, 1205, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 1205, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{7970614A-BD82-439E-A828-CC96F8E91428}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03139 456 NtEnumerateKey (350, 1204, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name= (350, 1204, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name="{7954DD9B-8C2A-11D1-ADDB-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03140 456 NtEnumerateKey (350, 1203, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name= (350, 1203, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name="{794885CC-5EB7-46E3-A937-AD890A6C6677}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03141 456 NtEnumerateKey (350, 1202, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1202, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{79376820-07D0-11CF-A24D-0020AFD79767}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03142 456 NtEnumerateKey (350, 1201, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name= (350, 1201, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name="{78fe669a-186e-4108-96e9-77b586c1332f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03143 456 NtEnumerateKey (350, 1200, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 1200, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{78CEC80C-5D0E-4c5d-990F-74CD7ADD3F60}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03144 456 NtEnumerateKey (350, 1199, Node, 288, ... {LastWrite={0x25b029b0,0x1c73999}, TitleIdx=0, Name= (350, 1199, Node, 288, ... {LastWrite={0x25b029b0,0x1c73999}, TitleIdx=0, Name="{7879E40D-9FB5-450A-8A6D-00C89F349FCE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03145 456 NtEnumerateKey (350, 1198, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1198, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{78530B75-61F9-11D2-8CAD-00A024580902}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03146 456 NtEnumerateKey (350, 1197, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1197, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{7849596a-48ea-486e-8937-a2a3009f31a9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03147 456 NtEnumerateKey (350, 1196, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 1196, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{784215B4-0D2E-11D3-920A-00C0DF10D434}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03148 456 NtEnumerateKey (350, 1195, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name= (350, 1195, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name="{783C030F-E948-487D-B35D-94FCF0F0C172}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03149 456 NtEnumerateKey (350, 1194, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1194, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{78103FB7-AED7-4066-8BCD-30BB27B02331}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03150 456 NtEnumerateKey (350, 1193, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1193, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{777B6BBD-2FF2-11D3-88FE-00C04F8EF9B5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03151 456 NtEnumerateKey (350, 1192, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name= (350, 1192, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name="{77763669-DC7B-450c-BF4A-149F92DB6B05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03152 456 NtEnumerateKey (350, 1191, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1191, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{77597368-7b15-11d0-a0c2-080036af3f03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03153 456 NtEnumerateKey (350, 1190, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 1190, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{7757BA9B-7986-4866-B53F-A31E89FCBA15}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03154 456 NtEnumerateKey (350, 1189, Node, 288, ... {LastWrite={0x629b1f42,0x1c73999}, TitleIdx=0, Name= (350, 1189, Node, 288, ... {LastWrite={0x629b1f42,0x1c73999}, TitleIdx=0, Name="{76FF3452-E474-4032-BED5-BBE4E96B6D2F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03155 456 NtEnumerateKey (350, 1188, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name= (350, 1188, Node, 288, ... {LastWrite={0x6e03bfec,0x1c73999}, TitleIdx=0, Name="{76F363F2-7E9F-4ED7-A6A7-EE30351B6628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03156 456 NtEnumerateKey (350, 1187, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 1187, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{76E67A63-06E9-11D2-A840-006008059382}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03157 456 NtEnumerateKey (350, 1186, Node, 288, ... {LastWrite={0x62965a8e,0x1c73999}, TitleIdx=0, Name= (350, 1186, Node, 288, ... {LastWrite={0x62965a8e,0x1c73999}, TitleIdx=0, Name="{76A94DE3-7C26-44F5-8E98-C5AEA48186CB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03158 456 NtEnumerateKey (350, 1185, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 1185, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{76A64158-CB41-11D1-8B02-00600806D9B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03159 456 NtEnumerateKey (350, 1184, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name= (350, 1184, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name="{7669CAD6-BDEC-11D1-A6A0-00C04FB9988E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03160 456 NtEnumerateKey (350, 1183, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name= (350, 1183, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name="{7658F2A2-0A83-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03161 456 NtEnumerateKey (350, 1182, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 1182, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{762EC429-1A5D-4AB8-844A-9A552E1241DA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03162 456 NtEnumerateKey (350, 1181, Node, 288, ... {LastWrite={0x76c01db0,0x1c73999}, TitleIdx=0, Name= (350, 1181, Node, 288, ... {LastWrite={0x76c01db0,0x1c73999}, TitleIdx=0, Name="{760C4B83-E211-11D2-BF3E-00805FBE84A6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03163 456 NtEnumerateKey (350, 1180, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 1180, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{75C9378A-7E89-11d2-B116-00805FC73204}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03164 456 NtEnumerateKey (350, 1179, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 1179, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{75718C9A-F029-11D1-A1AC-00C04FB6C223}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03165 456 NtEnumerateKey (350, 1178, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name= (350, 1178, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name="{75624FA1-4826-11d2-9717-00C04F79E98B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03166 456 NtEnumerateKey (350, 1177, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name= (350, 1177, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name="{754FF233-5D4E-11d2-875B-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03167 456 NtEnumerateKey (350, 1176, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name= (350, 1176, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name="{7542E960-79C7-11D1-88F9-0080C7D771BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03168 456 NtEnumerateKey (350, 1175, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name= (350, 1175, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name="{7514FB29-EA65-4902-8A3E-93612ADAF168}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03169 456 NtEnumerateKey (350, 1174, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name= (350, 1174, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name="{750fdf10-2a26-11d1-a3ea-080036587f03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03170 456 NtEnumerateKey (350, 1173, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name= (350, 1173, Node, 288, ... {LastWrite={0x62b7bb7a,0x1c73999}, TitleIdx=0, Name="{750fdf0f-2a26-11d1-a3ea-080036587f03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03171 456 NtEnumerateKey (350, 1172, Node, 288, ... {LastWrite={0x62b55920,0x1c73999}, TitleIdx=0, Name= (350, 1172, Node, 288, ... {LastWrite={0x62b55920,0x1c73999}, TitleIdx=0, Name="{750fdf0e-2a26-11d1-a3ea-080036587f03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03172 456 NtEnumerateKey (350, 1171, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1171, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{75048700-EF1F-11D0-9888-006097DEACF9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03173 456 NtEnumerateKey (350, 1170, Node, 288, ... {LastWrite={0x260f87c0,0x1c73999}, TitleIdx=0, Name= (350, 1170, Node, 288, ... {LastWrite={0x260f87c0,0x1c73999}, TitleIdx=0, Name="{74E3B84C-C7BE-4E0A-9BD2-853CA72CD435}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03174 456 NtEnumerateKey (350, 1169, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 1169, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{7487cd30-f71a-11d0-9ea7-00805f714772}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03175 456 NtEnumerateKey (350, 1168, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name= (350, 1168, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name="{7478EF69-8C46-11d1-8D99-00A0C913CAD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03176 456 NtEnumerateKey (350, 1167, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name= (350, 1167, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name="{7478EF65-8C46-11d1-8D99-00A0C913CAD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03177 456 NtEnumerateKey (350, 1166, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name= (350, 1166, Node, 288, ... {LastWrite={0x6cf1917e,0x1c73999}, TitleIdx=0, Name="{7478EF61-8C46-11d1-8D99-00A0C913CAD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03178 456 NtEnumerateKey (350, 1165, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 1165, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{74628299-57EC-4F12-BA1C-08B477BF447A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03179 456 NtEnumerateKey (350, 1164, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1164, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{7444C719-39BF-11D1-8CD9-00C04FC29D45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03180 456 NtEnumerateKey (350, 1163, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1163, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{7444C717-39BF-11D1-8CD9-00C04FC29D45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03181 456 NtEnumerateKey (350, 1162, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name= (350, 1162, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name="{743F1DC6-5ABA-429F-8BDF-C54D03253DC2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03182 456 NtEnumerateKey (350, 1161, Node, 288, ... {LastWrite={0x72cf9afa,0x1c73999}, TitleIdx=0, Name= (350, 1161, Node, 288, ... {LastWrite={0x72cf9afa,0x1c73999}, TitleIdx=0, Name="{743B5D60-628D-11D2-AE0F-006097B01411}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03183 456 NtEnumerateKey (350, 1160, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name= (350, 1160, Node, 288, ... {LastWrite={0x60851082,0x1c73999}, TitleIdx=0, Name="{74246bfc-4c96-11d0-abef-0020af6b0b7a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03184 456 NtEnumerateKey (350, 1159, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name= (350, 1159, Node, 288, ... {LastWrite={0x21355e96,0x1c73999}, TitleIdx=0, Name="{74075FD1-AEE9-11D1-8645-0060089F6007}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03185 456 NtEnumerateKey (350, 1158, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 1158, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{73FDDC80-AEA9-101A-98A7-00AA00374959}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03186 456 NtEnumerateKey (350, 1157, Node, 288, ... {LastWrite={0x258a0410,0x1c73999}, TitleIdx=0, Name= (350, 1157, Node, 288, ... {LastWrite={0x258a0410,0x1c73999}, TitleIdx=0, Name="{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03187 456 NtEnumerateKey (350, 1156, Node, 288, ... {LastWrite={0x6f0c64f2,0x1c73999}, TitleIdx=0, Name= (350, 1156, Node, 288, ... {LastWrite={0x6f0c64f2,0x1c73999}, TitleIdx=0, Name="{73AF9077-4F6D-4FCB-A9E2-FDFBB9AE5310}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03188 456 NtEnumerateKey (350, 1155, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1155, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{73AD6842-ACE0-45E8-A4DD-8795881A2C2A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03189 456 NtEnumerateKey (350, 1154, Node, 288, ... {LastWrite={0x5f30203c,0x1c73999}, TitleIdx=0, Name= (350, 1154, Node, 288, ... {LastWrite={0x5f30203c,0x1c73999}, TitleIdx=0, Name="{73A4C9C1-D68D-11D0-98BF-00A0C90DC8D9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03190 456 NtEnumerateKey (350, 1153, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1153, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{7376D660-C583-11d0-A3A5-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03191 456 NtEnumerateKey (350, 1152, Node, 288, ... {LastWrite={0x2667bec2,0x1c73999}, TitleIdx=0, Name= (350, 1152, Node, 288, ... {LastWrite={0x2667bec2,0x1c73999}, TitleIdx=0, Name="{734AC5AE-68E1-4FB5-B8DA-1D92F7FC6661}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03192 456 NtEnumerateKey (350, 1151, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 1151, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{733AC4CB-F1A4-11d0-B951-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03193 456 NtEnumerateKey (350, 1150, Node, 288, ... {LastWrite={0x58fea472,0x1c73999}, TitleIdx=0, Name= (350, 1150, Node, 288, ... {LastWrite={0x58fea472,0x1c73999}, TitleIdx=0, Name="{7325c922-bb81-47b0-8b2f-a5f8605e242f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03194 456 NtEnumerateKey (350, 1149, Node, 288, ... {LastWrite={0x6df30f76,0x1c73999}, TitleIdx=0, Name= (350, 1149, Node, 288, ... {LastWrite={0x6df30f76,0x1c73999}, TitleIdx=0, Name="{7312498D-E87A-11d1-81E0-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03195 456 NtEnumerateKey (350, 1148, Node, 288, ... {LastWrite={0x6e4b4678,0x1c73999}, TitleIdx=0, Name= (350, 1148, Node, 288, ... {LastWrite={0x6e4b4678,0x1c73999}, TitleIdx=0, Name="{730F6CDC-2C86-11D2-8773-92E220524153}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03196 456 NtEnumerateKey (350, 1147, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1147, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{72eb61e0-8672-4303-9175-f2e4c68b2e7c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03197 456 NtEnumerateKey (350, 1146, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name= (350, 1146, Node, 288, ... {LastWrite={0x9861a272,0x1c738c7}, TitleIdx=0, Name="{72d3edc2-a4c4-11d0-8533-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03198 456 NtEnumerateKey (350, 1145, Node, 288, ... {LastWrite={0x60982352,0x1c73999}, TitleIdx=0, Name= (350, 1145, Node, 288, ... {LastWrite={0x60982352,0x1c73999}, TitleIdx=0, Name="{72C24DD5-D70A-438B-8A42-98424B88AFB8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03199 456 NtEnumerateKey (350, 1144, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1144, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{72b3882f-453a-4633-aac9-8c3dced62aff}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03200 456 NtEnumerateKey (350, 1143, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name= (350, 1143, Node, 288, ... {LastWrite={0x91777efc,0x1c7399c}, TitleIdx=0, Name="{72970932-14EC-48ed-9CF8-369DEDC3F58F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03201 456 NtEnumerateKey (350, 1142, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name= (350, 1142, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name="{72967903-68EC-11D0-B729-00AA0062CBB7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03202 456 NtEnumerateKey (350, 1141, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name= (350, 1141, Node, 288, ... {LastWrite={0x26039bfe,0x1c73999}, TitleIdx=0, Name="{72967901-68EC-11D0-B729-00AA0062CBB7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03203 456 NtEnumerateKey (350, 1140, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1140, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{72267F6A-A6F9-11D0-BC94-00C04FB67863}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03204 456 NtEnumerateKey (350, 1139, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name= (350, 1139, Node, 288, ... {LastWrite={0x2132fc3c,0x1c73999}, TitleIdx=0, Name="{71E38F91-7E88-11CF-9EDE-0080C78B7F89}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03205 456 NtEnumerateKey (350, 1138, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name= (350, 1138, Node, 288, ... {LastWrite={0x600b7894,0x1c73999}, TitleIdx=0, Name="{717EF4FE-AC8D-11D0-B945-00C04FD8D5B0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03206 456 NtEnumerateKey (350, 1137, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name= (350, 1137, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name="{7170F2E0-9BE3-11D0-A009-00AA00B605A4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03207 456 NtEnumerateKey (350, 1136, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name= (350, 1136, Node, 288, ... {LastWrite={0x5eb8eaa8,0x1c73999}, TitleIdx=0, Name="{71650000-E8A8-11d2-9652-00C04FC30871}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03208 456 NtEnumerateKey (350, 1135, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1135, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{715D9C59-4442-11D2-9605-00C04F8EE628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03209 456 NtEnumerateKey (350, 1134, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1134, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{71285C44-1DC0-11D2-B5FB-00104B703EFD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03210 456 NtEnumerateKey (350, 1133, Node, 288, ... {LastWrite={0x59593dce,0x1c73999}, TitleIdx=0, Name= (350, 1133, Node, 288, ... {LastWrite={0x59593dce,0x1c73999}, TitleIdx=0, Name="{70FF37C0-F39A-4B26-AE5E-638EF296D490}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03211 456 NtEnumerateKey (350, 1132, Node, 288, ... {LastWrite={0x7580a294,0x1c73999}, TitleIdx=0, Name= (350, 1132, Node, 288, ... {LastWrite={0x7580a294,0x1c73999}, TitleIdx=0, Name="{70f598e9-f4ab-495a-99e2-a7c4d3d89abf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03212 456 NtEnumerateKey (350, 1131, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1131, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{70E102B0-5556-11CE-97C0-00AA0055595A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03213 456 NtEnumerateKey (350, 1130, Node, 288, ... {LastWrite={0x76f22f12,0x1c73999}, TitleIdx=0, Name= (350, 1130, Node, 288, ... {LastWrite={0x76f22f12,0x1c73999}, TitleIdx=0, Name="{70c02500-7c6f-11d3-9fb6-00105aa620bb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03214 456 NtEnumerateKey (350, 1129, Node, 288, ... {LastWrite={0x6e89439c,0x1c73999}, TitleIdx=0, Name= (350, 1129, Node, 288, ... {LastWrite={0x6e89439c,0x1c73999}, TitleIdx=0, Name="{70BC06E0-5666-11D3-A184-00105AEF9F33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03215 456 NtEnumerateKey (350, 1128, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name= (350, 1128, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name="{7087EBD9-B9CE-11d1-8F62-00C04FB611C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03216 456 NtEnumerateKey (350, 1127, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1127, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7086AD76-44BD-11D0-81ED-00A0C90FC491}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03217 456 NtEnumerateKey (350, 1126, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name= (350, 1126, Node, 288, ... {LastWrite={0x5b930fd4,0x1c73999}, TitleIdx=0, Name="{7057e952-bd1b-11d1-8919-00c04fc2c836}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03218 456 NtEnumerateKey (350, 1125, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1125, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{7016F8FA-CCDA-11D2-B35C-00105A1F8177}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03219 456 NtEnumerateKey (350, 1124, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1124, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7013943A-E2EC-11D2-A086-00C04F8EF9B5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03220 456 NtEnumerateKey (350, 1123, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1123, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACD5-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03221 456 NtEnumerateKey (350, 1122, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1122, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACD4-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03222 456 NtEnumerateKey (350, 1121, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1121, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACD3-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03223 456 NtEnumerateKey (350, 1120, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1120, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACD1-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03224 456 NtEnumerateKey (350, 1119, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1119, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACCF-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03225 456 NtEnumerateKey (350, 1118, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name= (350, 1118, Node, 288, ... {LastWrite={0x986404cc,0x1c738c7}, TitleIdx=0, Name="{7007ACC8-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03226 456 NtEnumerateKey (350, 1117, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name= (350, 1117, Node, 288, ... {LastWrite={0x5aee8d92,0x1c73999}, TitleIdx=0, Name="{7007ACC7-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03227 456 NtEnumerateKey (350, 1116, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1116, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC6-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03228 456 NtEnumerateKey (350, 1115, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1115, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC5-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03229 456 NtEnumerateKey (350, 1114, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1114, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC4-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03230 456 NtEnumerateKey (350, 1113, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1113, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC3-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03231 456 NtEnumerateKey (350, 1112, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1112, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC2-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03232 456 NtEnumerateKey (350, 1111, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1111, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{7007ACC1-3202-11D1-AAD2-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03233 456 NtEnumerateKey (350, 1110, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 1110, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{6F74FDC6-E366-11d1-9A4E-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03234 456 NtEnumerateKey (350, 1109, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 1109, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{6F74FDC5-E366-11d1-9A4E-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03235 456 NtEnumerateKey (350, 1108, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1108, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{6F26A6CD-967B-47FD-874A-7AED2C9D25A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03236 456 NtEnumerateKey (350, 1107, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name= (350, 1107, Node, 288, ... {LastWrite={0x765bfaec,0x1c73999}, TitleIdx=0, Name="{6EB7F411-1AF7-11d3-BD41-00C04F67F69A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03237 456 NtEnumerateKey (350, 1106, Node, 288, ... {LastWrite={0x2188d0e4,0x1c73999}, TitleIdx=0, Name= (350, 1106, Node, 288, ... {LastWrite={0x2188d0e4,0x1c73999}, TitleIdx=0, Name="{6EB22881-8A19-11D0-81B6-00A0C9231C29}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03238 456 NtEnumerateKey (350, 1105, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 1105, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{6E8D4A20-310C-11D0-B79A-00AA003767A7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03239 456 NtEnumerateKey (350, 1104, Node, 288, ... {LastWrite={0x26786f38,0x1c73999}, TitleIdx=0, Name= (350, 1104, Node, 288, ... {LastWrite={0x26786f38,0x1c73999}, TitleIdx=0, Name="{6E78DAD9-E187-4D6E-BA63-760256D6F405}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03240 456 NtEnumerateKey (350, 1103, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1103, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC6-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03241 456 NtEnumerateKey (350, 1102, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1102, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC5-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03242 456 NtEnumerateKey (350, 1101, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1101, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC4-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03243 456 NtEnumerateKey (350, 1100, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1100, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC3-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03244 456 NtEnumerateKey (350, 1099, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1099, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC1-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03245 456 NtEnumerateKey (350, 1098, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1098, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6E65CBC0-926D-11D0-8E27-00C04FC99DCF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03246 456 NtEnumerateKey (350, 1097, Node, 288, ... {LastWrite={0x5d5a70fa,0x1c73999}, TitleIdx=0, Name= (350, 1097, Node, 288, ... {LastWrite={0x5d5a70fa,0x1c73999}, TitleIdx=0, Name="{6E449686-C509-11CF-AAFA-00AA00B6015C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03247 456 NtEnumerateKey (350, 1096, Node, 288, ... {LastWrite={0x5d619808,0x1c73999}, TitleIdx=0, Name= (350, 1096, Node, 288, ... {LastWrite={0x5d619808,0x1c73999}, TitleIdx=0, Name="{6E449683-C509-11CF-AAFA-00AA00B6015C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03248 456 NtEnumerateKey (350, 1095, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name= (350, 1095, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name="{6e33091c-d2f8-4740-b55e-2e11d1477a2c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03249 456 NtEnumerateKey (350, 1094, Node, 288, ... {LastWrite={0x6f1129a6,0x1c73999}, TitleIdx=0, Name= (350, 1094, Node, 288, ... {LastWrite={0x6f1129a6,0x1c73999}, TitleIdx=0, Name="{6E30077E-2E0B-4D4A-92B0-CDB5E5116E3B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03250 456 NtEnumerateKey (350, 1093, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name= (350, 1093, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name="{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03251 456 NtEnumerateKey (350, 1092, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name= (350, 1092, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name="{6DDE3061-736C-11D2-A5E8-00A0C967A25F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03252 456 NtEnumerateKey (350, 1091, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name= (350, 1091, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name="{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03253 456 NtEnumerateKey (350, 1090, Node, 288, ... {LastWrite={0x2563de70,0x1c73999}, TitleIdx=0, Name= (350, 1090, Node, 288, ... {LastWrite={0x2563de70,0x1c73999}, TitleIdx=0, Name="{6DAF9757-2E37-11D2-AEC9-00C04FB68820}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03254 456 NtEnumerateKey (350, 1089, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1089, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8e5-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03255 456 NtEnumerateKey (350, 1088, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1088, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8e1-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03256 456 NtEnumerateKey (350, 1087, Node, 288, ... {LastWrite={0x593f03f0,0x1c73999}, TitleIdx=0, Name= (350, 1087, Node, 288, ... {LastWrite={0x593f03f0,0x1c73999}, TitleIdx=0, Name="{6d8ff8e0-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03257 456 NtEnumerateKey (350, 1086, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1086, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8df-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03258 456 NtEnumerateKey (350, 1085, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1085, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8dd-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03259 456 NtEnumerateKey (350, 1084, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1084, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8dc-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03260 456 NtEnumerateKey (350, 1083, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name= (350, 1083, Node, 288, ... {LastWrite={0x5933182e,0x1c73999}, TitleIdx=0, Name="{6d8ff8d2-730d-11d4-bf42-00b0d0118b56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03261 456 NtEnumerateKey (350, 1082, Node, 288, ... {LastWrite={0x266c8376,0x1c73999}, TitleIdx=0, Name= (350, 1082, Node, 288, ... {LastWrite={0x266c8376,0x1c73999}, TitleIdx=0, Name="{6D7A4B0E-66D5-4AC3-A7ED-0189E8CF5E77}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03262 456 NtEnumerateKey (350, 1081, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 1081, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{6D5313C0-8C62-11D1-B2CD-006097DF8C11}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03263 456 NtEnumerateKey (350, 1080, Node, 288, ... {LastWrite={0x72cf9afa,0x1c73999}, TitleIdx=0, Name= (350, 1080, Node, 288, ... {LastWrite={0x72cf9afa,0x1c73999}, TitleIdx=0, Name="{6D4A3650-628D-11D2-AE0F-006097B01411}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03264 456 NtEnumerateKey (350, 1079, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1079, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{6d36ce10-7f1c-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03265 456 NtEnumerateKey (350, 1078, Node, 288, ... {LastWrite={0x6d1c7bd2,0x1c73999}, TitleIdx=0, Name= (350, 1078, Node, 288, ... {LastWrite={0x6d1c7bd2,0x1c73999}, TitleIdx=0, Name="{6D335ADF-8270-4805-A044-2B6A09476396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03266 456 NtEnumerateKey (350, 1077, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1077, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{6CF8E98C-5DD4-42A2-A948-BFE4CA1DC3EB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03267 456 NtEnumerateKey (350, 1076, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name= (350, 1076, Node, 288, ... {LastWrite={0x5caa02f6,0x1c73999}, TitleIdx=0, Name="{6CF60DE1-42DC-11D2-BE22-080009DC0A8D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03268 456 NtEnumerateKey (350, 1075, Node, 288, ... {LastWrite={0x255a5508,0x1c73999}, TitleIdx=0, Name= (350, 1075, Node, 288, ... {LastWrite={0x255a5508,0x1c73999}, TitleIdx=0, Name="{6C19BE35-7500-11D1-AD94-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03269 456 NtEnumerateKey (350, 1074, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name= (350, 1074, Node, 288, ... {LastWrite={0x76ad0ae0,0x1c73999}, TitleIdx=0, Name="{6BF52A52-394A-11d3-B153-00C04F79FAA6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03270 456 NtEnumerateKey (350, 1073, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 1073, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{6BD6AECA-AFB0-45B7-BAC4-F292EC0F3F41}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03271 456 NtEnumerateKey (350, 1072, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name= (350, 1072, Node, 288, ... {LastWrite={0x592bf120,0x1c73999}, TitleIdx=0, Name="{6BD34909-54E7-4fbf-8562-7B89709A589A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03272 456 NtEnumerateKey (350, 1071, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 1071, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03273 456 NtEnumerateKey (350, 1070, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name= (350, 1070, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name="{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03274 456 NtEnumerateKey (350, 1069, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name= (350, 1069, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name="{6BC098A7-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03275 456 NtEnumerateKey (350, 1068, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name= (350, 1068, Node, 288, ... {LastWrite={0x6d4503cc,0x1c73999}, TitleIdx=0, Name="{6BC098A6-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03276 456 NtEnumerateKey (350, 1067, Node, 288, ... {LastWrite={0x6d42a172,0x1c73999}, TitleIdx=0, Name= (350, 1067, Node, 288, ... {LastWrite={0x6d42a172,0x1c73999}, TitleIdx=0, Name="{6BC098A5-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03277 456 NtEnumerateKey (350, 1066, Node, 288, ... {LastWrite={0x6d42a172,0x1c73999}, TitleIdx=0, Name= (350, 1066, Node, 288, ... {LastWrite={0x6d42a172,0x1c73999}, TitleIdx=0, Name="{6BC098A4-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03278 456 NtEnumerateKey (350, 1065, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name= (350, 1065, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name="{6BC0989F-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03279 456 NtEnumerateKey (350, 1064, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name= (350, 1064, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name="{6BC0989E-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03280 456 NtEnumerateKey (350, 1063, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name= (350, 1063, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name="{6BC0989D-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03281 456 NtEnumerateKey (350, 1062, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name= (350, 1062, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name="{6BC0989C-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03282 456 NtEnumerateKey (350, 1061, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name= (350, 1061, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name="{6BC0989B-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03283 456 NtEnumerateKey (350, 1060, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name= (350, 1060, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name="{6BC0989A-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03284 456 NtEnumerateKey (350, 1059, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name= (350, 1059, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name="{6BC09899-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03285 456 NtEnumerateKey (350, 1058, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name= (350, 1058, Node, 288, ... {LastWrite={0x6d5f3daa,0x1c73999}, TitleIdx=0, Name="{6BC09898-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03286 456 NtEnumerateKey (350, 1057, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name= (350, 1057, Node, 288, ... {LastWrite={0x6d5cdb50,0x1c73999}, TitleIdx=0, Name="{6BC09897-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03287 456 NtEnumerateKey (350, 1056, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name= (350, 1056, Node, 288, ... {LastWrite={0x6d5a78f6,0x1c73999}, TitleIdx=0, Name="{6BC09896-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03288 456 NtEnumerateKey (350, 1055, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name= (350, 1055, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name="{6BC09894-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03289 456 NtEnumerateKey (350, 1054, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name= (350, 1054, Node, 288, ... {LastWrite={0x6d5351e8,0x1c73999}, TitleIdx=0, Name="{6BC096DA-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03290 456 NtEnumerateKey (350, 1053, Node, 288, ... {LastWrite={0x6d476626,0x1c73999}, TitleIdx=0, Name= (350, 1053, Node, 288, ... {LastWrite={0x6d476626,0x1c73999}, TitleIdx=0, Name="{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03291 456 NtEnumerateKey (350, 1052, Node, 288, ... {LastWrite={0x6d36b5b0,0x1c73999}, TitleIdx=0, Name= (350, 1052, Node, 288, ... {LastWrite={0x6d36b5b0,0x1c73999}, TitleIdx=0, Name="{6BC096C8-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03292 456 NtEnumerateKey (350, 1051, Node, 288, ... {LastWrite={0x6d36b5b0,0x1c73999}, TitleIdx=0, Name= (350, 1051, Node, 288, ... {LastWrite={0x6d36b5b0,0x1c73999}, TitleIdx=0, Name="{6BC096C6-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03293 456 NtEnumerateKey (350, 1050, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name= (350, 1050, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name="{6BC096C4-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03294 456 NtEnumerateKey (350, 1049, Node, 288, ... {LastWrite={0x6d3ddcbe,0x1c73999}, TitleIdx=0, Name= (350, 1049, Node, 288, ... {LastWrite={0x6d3ddcbe,0x1c73999}, TitleIdx=0, Name="{6BC096BC-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03295 456 NtEnumerateKey (350, 1048, Node, 288, ... {LastWrite={0x6d2f8ea2,0x1c73999}, TitleIdx=0, Name= (350, 1048, Node, 288, ... {LastWrite={0x6d2f8ea2,0x1c73999}, TitleIdx=0, Name="{6BC096B8-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03296 456 NtEnumerateKey (350, 1047, Node, 288, ... {LastWrite={0x6d4c2ada,0x1c73999}, TitleIdx=0, Name= (350, 1047, Node, 288, ... {LastWrite={0x6d4c2ada,0x1c73999}, TitleIdx=0, Name="{6BC096B3-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03297 456 NtEnumerateKey (350, 1046, Node, 288, ... {LastWrite={0x6d4c2ada,0x1c73999}, TitleIdx=0, Name= (350, 1046, Node, 288, ... {LastWrite={0x6d4c2ada,0x1c73999}, TitleIdx=0, Name="{6BC096B1-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03298 456 NtEnumerateKey (350, 1045, Node, 288, ... {LastWrite={0x6d26053a,0x1c73999}, TitleIdx=0, Name= (350, 1045, Node, 288, ... {LastWrite={0x6d26053a,0x1c73999}, TitleIdx=0, Name="{6BC096A0-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03299 456 NtEnumerateKey (350, 1044, Node, 288, ... {LastWrite={0x6d286794,0x1c73999}, TitleIdx=0, Name= (350, 1044, Node, 288, ... {LastWrite={0x6d286794,0x1c73999}, TitleIdx=0, Name="{6BC0969F-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03300 456 NtEnumerateKey (350, 1043, Node, 288, ... {LastWrite={0x6d26053a,0x1c73999}, TitleIdx=0, Name= (350, 1043, Node, 288, ... {LastWrite={0x6d26053a,0x1c73999}, TitleIdx=0, Name="{6BC0969D-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03301 456 NtEnumerateKey (350, 1042, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name= (350, 1042, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name="{6BC09693-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03302 456 NtEnumerateKey (350, 1041, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name= (350, 1041, Node, 288, ... {LastWrite={0x6d6d8bc6,0x1c73999}, TitleIdx=0, Name="{6BC09692-0CE6-11D1-BAAE-00C04FC2E20D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03303 456 NtEnumerateKey (350, 1040, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1040, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{6B831E4F-A50D-45FC-842F-16CE27595359}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03304 456 NtEnumerateKey (350, 1039, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 1039, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{6B6D0803-9ADA-11D0-A520-00A0D10129C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03305 456 NtEnumerateKey (350, 1038, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 1038, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{6B6D0800-9ADA-11D0-A520-00A0D10129C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03306 456 NtEnumerateKey (350, 1037, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1037, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{6B362280-6915-11D2-951F-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03307 456 NtEnumerateKey (350, 1036, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 1036, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{6b33163c-76a5-4b6c-bf21-45de9cd503a1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03308 456 NtEnumerateKey (350, 1035, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name= (350, 1035, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name="{6AD28EE1-5002-4E71-AAF7-BD077907B1A4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03309 456 NtEnumerateKey (350, 1034, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name= (350, 1034, Node, 288, ... {LastWrite={0x6be427c4,0x1c73999}, TitleIdx=0, Name="{6A879859-3858-4322-971A-B705F349F124}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03310 456 NtEnumerateKey (350, 1033, Node, 288, ... {LastWrite={0x72729f44,0x1c73999}, TitleIdx=0, Name= (350, 1033, Node, 288, ... {LastWrite={0x72729f44,0x1c73999}, TitleIdx=0, Name="{6a49950e-ce8a-4ef7-88b4-9d112366511c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03311 456 NtEnumerateKey (350, 1032, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name= (350, 1032, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name="{6A205B57-2567-4A2C-B881-F787FAB579A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03312 456 NtEnumerateKey (350, 1031, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 1031, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{6A08CF80-0E18-11CF-A24D-0020AFD79767}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03313 456 NtEnumerateKey (350, 1030, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name= (350, 1030, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name="{6A01FDA0-30DF-11d0-B724-00AA006C1A01}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03314 456 NtEnumerateKey (350, 1029, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name= (350, 1029, Node, 288, ... {LastWrite={0x7667e6ae,0x1c73999}, TitleIdx=0, Name="{69F43849-85BC-43c3-AD3F-6976A5604B10}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03315 456 NtEnumerateKey (350, 1028, Node, 288, ... {LastWrite={0x25ee26d4,0x1c73999}, TitleIdx=0, Name= (350, 1028, Node, 288, ... {LastWrite={0x25ee26d4,0x1c73999}, TitleIdx=0, Name="{69D76D1B-B12E-4913-8F48-671B90195A2B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03316 456 NtEnumerateKey (350, 1027, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name= (350, 1027, Node, 288, ... {LastWrite={0x62dde11a,0x1c73999}, TitleIdx=0, Name="{69AD90EF-1C20-11d1-8801-00C04FC29D46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03317 456 NtEnumerateKey (350, 1026, Node, 288, ... {LastWrite={0x596c509e,0x1c73999}, TitleIdx=0, Name= (350, 1026, Node, 288, ... {LastWrite={0x596c509e,0x1c73999}, TitleIdx=0, Name="{69AD4AEE-51BE-439b-A92C-86AE490E8B30}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03318 456 NtEnumerateKey (350, 1025, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 1025, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{69A25C14-1811-11D2-A52B-0000F803A951}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03319 456 NtEnumerateKey (350, 1024, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 1024, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{69A25C12-1811-11D2-A52B-0000F803A951}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03320 456 NtEnumerateKey (350, 1023, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1023, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{693644B0-6858-11D2-9EEB-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03321 456 NtEnumerateKey (350, 1022, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1022, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03322 456 NtEnumerateKey (350, 1021, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 1021, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{68F2D3FC-8366-4A46-8224-58EFA2749425}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03323 456 NtEnumerateKey (350, 1020, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 1020, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{68c67565-410e-45e6-8560-4091ae193481}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03324 456 NtEnumerateKey (350, 1019, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1019, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{685879BA-3263-11D3-9C26-00C04F8EF87C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03325 456 NtEnumerateKey (350, 1018, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 1018, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{67F07E00-CCEF-11D2-9EF9-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03326 456 NtEnumerateKey (350, 1017, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 1017, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{67EA19A0-CCEF-11d0-8024-00C04FD75D13}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03327 456 NtEnumerateKey (350, 1016, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name= (350, 1016, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name="{67DCC487-AA48-11d1-8F4F-00C04FB611C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03328 456 NtEnumerateKey (350, 1015, Node, 288, ... {LastWrite={0x72beea84,0x1c73999}, TitleIdx=0, Name= (350, 1015, Node, 288, ... {LastWrite={0x72beea84,0x1c73999}, TitleIdx=0, Name="{67cf8cbd-e5c0-44f7-9de5-e1d599d626d8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03329 456 NtEnumerateKey (350, 1014, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name= (350, 1014, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name="{67B38AA7-2DEB-44cb-8F86-B300AB95C61F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03330 456 NtEnumerateKey (350, 1013, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 1013, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{679d9e37-f8f9-11d2-8deb-00c04f6837d5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03331 456 NtEnumerateKey (350, 1012, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1012, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{675F097E-4C4D-11D0-B6C1-0800091AA605}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03332 456 NtEnumerateKey (350, 1011, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 1011, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{6756A641-DE71-11d0-831B-00AA005B4383}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03333 456 NtEnumerateKey (350, 1010, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 1010, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{674D3E3D-A1A8-11D0-A886-00C04FC99C9C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03334 456 NtEnumerateKey (350, 1009, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 1009, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{674B6698-EE92-11D0-AD71-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03335 456 NtEnumerateKey (350, 1008, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 1008, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{67331D85-BE17-42f6-8D3F-47B8E8B26637}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03336 456 NtEnumerateKey (350, 1007, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name= (350, 1007, Node, 288, ... {LastWrite={0x5de25704,0x1c73999}, TitleIdx=0, Name="{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03337 456 NtEnumerateKey (350, 1006, Node, 288, ... {LastWrite={0x6b800500,0x1c73999}, TitleIdx=0, Name= (350, 1006, Node, 288, ... {LastWrite={0x6b800500,0x1c73999}, TitleIdx=0, Name="{66CBC149-A49F-48F9-B17A-6A3EA9B42A87}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03338 456 NtEnumerateKey (350, 1005, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 1005, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{66b37110-8bf2-11ce-be59-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03339 456 NtEnumerateKey (350, 1004, Node, 288, ... {LastWrite={0x72e2adca,0x1c73999}, TitleIdx=0, Name= (350, 1004, Node, 288, ... {LastWrite={0x72e2adca,0x1c73999}, TitleIdx=0, Name="{667955AD-6B3B-43CA-B949-BC69B5BAFF7F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03340 456 NtEnumerateKey (350, 1003, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name= (350, 1003, Node, 288, ... {LastWrite={0x5aa96960,0x1c73999}, TitleIdx=0, Name="{66742402-F9B9-11D1-A202-0000F81FEDEE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03341 456 NtEnumerateKey (350, 1002, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name= (350, 1002, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name="{665A444A-D905-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03342 456 NtEnumerateKey (350, 1001, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 1001, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{665A4448-D905-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03343 456 NtEnumerateKey (350, 1000, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 1000, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{665A4445-D905-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03344 456 NtEnumerateKey (350, 999, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 999, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{665A4444-D905-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03345 456 NtEnumerateKey (350, 998, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 998, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{665A4443-D905-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03346 456 NtEnumerateKey (350, 997, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 997, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{66182EC4-AFD1-11d2-9CB9-0000F87A369E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03347 456 NtEnumerateKey (350, 996, Node, 288, ... {LastWrite={0x71acbc16,0x1c73999}, TitleIdx=0, Name= (350, 996, Node, 288, ... {LastWrite={0x71acbc16,0x1c73999}, TitleIdx=0, Name="{65EE1DBA-8FF4-4a58-AC1C-3470EE2F376A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03348 456 NtEnumerateKey (350, 995, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 995, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{65DBDDEF-0725-11D3-B50C-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03349 456 NtEnumerateKey (350, 994, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name= (350, 994, Node, 288, ... {LastWrite={0x60f2bcae,0x1c73999}, TitleIdx=0, Name="{65BD0711-24D2-4FF7-9324-ED2E5D3ABAFA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03350 456 NtEnumerateKey (350, 993, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name= (350, 993, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name="{6572EE16-5FE5-4331-BB6D-76A49C56E423}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03351 456 NtEnumerateKey (350, 992, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name= (350, 992, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name="{6543D242-A80B-44A3-B828-95C1EC452423}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03352 456 NtEnumerateKey (350, 991, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 991, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{65439C20-604F-49CA-AA82-DC01A10AF171}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03353 456 NtEnumerateKey (350, 990, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name= (350, 990, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name="{65303443-AD66-11D1-9D65-00C04FC30DF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03354 456 NtEnumerateKey (350, 989, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name= (350, 989, Node, 288, ... {LastWrite={0x266ee5d0,0x1c73999}, TitleIdx=0, Name="{6515834D-6125-4878-A3A3-6B0A73B809A2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03355 456 NtEnumerateKey (350, 988, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name= (350, 988, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name="{65014010-9F62-11d1-A651-00600811D5CE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03356 456 NtEnumerateKey (350, 987, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 987, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{64FD16F3-B7A5-11d1-8F93-00600895E7D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03357 456 NtEnumerateKey (350, 986, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name= (350, 986, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name="{64D8A8E0-80A2-11d2-8CF3-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03358 456 NtEnumerateKey (350, 985, Node, 288, ... {LastWrite={0x2194bca6,0x1c73999}, TitleIdx=0, Name= (350, 985, Node, 288, ... {LastWrite={0x2194bca6,0x1c73999}, TitleIdx=0, Name="{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 985, Node, 288, ... {LastWrite={0x2194bca6,0x1c73999}, TitleIdx=0, Name="{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03359 456 NtEnumerateKey (350, 984, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name= (350, 984, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name="{64AB4BB7-111E-11d1-8F79-00C04FC2FBE1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03360 456 NtEnumerateKey (350, 983, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name= (350, 983, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name="{649EEC1E-B579-4E8C-BB3B-4997F8426536}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03361 456 NtEnumerateKey (350, 982, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 982, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{64818D11-4F9B-11CF-86EA-00AA00B929E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03362 456 NtEnumerateKey (350, 981, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name= (350, 981, Node, 288, ... {LastWrite={0x2538f41c,0x1c73999}, TitleIdx=0, Name="{64818D10-4F9B-11CF-86EA-00AA00B929E8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03363 456 NtEnumerateKey (350, 980, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name= (350, 980, Node, 288, ... {LastWrite={0x73172186,0x1c73999}, TitleIdx=0, Name="{647BD8C2-658B-4ECA-ABC7-FC5C0BF1704D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03364 456 NtEnumerateKey (350, 979, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name= (350, 979, Node, 288, ... {LastWrite={0x5ab0906e,0x1c73999}, TitleIdx=0, Name="{645FF040-5081-101B-9F08-00AA002F954E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03365 456 NtEnumerateKey (350, 978, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name= (350, 978, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name="{64577982-86D7-11d1-BDFC-00C04FA31009}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03366 456 NtEnumerateKey (350, 977, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 977, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{6413BA2C-B461-11d1-A18A-080036B11A03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03367 456 NtEnumerateKey (350, 976, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 976, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{640999A2-A946-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03368 456 NtEnumerateKey (350, 975, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 975, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{640999A1-A946-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03369 456 NtEnumerateKey (350, 974, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name= (350, 974, Node, 288, ... {LastWrite={0x61167ff4,0x1c73999}, TitleIdx=0, Name="{640999A0-A946-11D0-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03370 456 NtEnumerateKey (350, 973, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 973, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{63FA5E69-87FE-432d-8F62-9D7A3D7D09C3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03371 456 NtEnumerateKey (350, 972, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 972, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{63F8AA94-E2B9-11D0-ADF6-00C04FB66DAD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03372 456 NtEnumerateKey (350, 971, Node, 288, ... {LastWrite={0x603b279c,0x1c73999}, TitleIdx=0, Name= (350, 971, Node, 288, ... {LastWrite={0x603b279c,0x1c73999}, TitleIdx=0, Name="{63E23168-BFF7-4E87-A246-EF024425E4EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03373 456 NtEnumerateKey (350, 970, Node, 288, ... {LastWrite={0x5ec27410,0x1c73999}, TitleIdx=0, Name= (350, 970, Node, 288, ... {LastWrite={0x5ec27410,0x1c73999}, TitleIdx=0, Name="{63da6ec0-2e98-11cf-8d82-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03374 456 NtEnumerateKey (350, 969, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 969, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{63B51F81-C868-11D0-999C-00C04FD655E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03375 456 NtEnumerateKey (350, 968, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 968, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{63A865AB-859E-4f15-8AEC-77FC615653D9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03376 456 NtEnumerateKey (350, 967, Node, 288, ... {LastWrite={0x6e16d2bc,0x1c73999}, TitleIdx=0, Name= (350, 967, Node, 288, ... {LastWrite={0x6e16d2bc,0x1c73999}, TitleIdx=0, Name="{63A4B1FC-259A-4A5B-8129-A83B8C9E6F4F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03377 456 NtEnumerateKey (350, 966, Node, 288, ... {LastWrite={0x756668b6,0x1c73999}, TitleIdx=0, Name= (350, 966, Node, 288, ... {LastWrite={0x756668b6,0x1c73999}, TitleIdx=0, Name="{636CCDDE-0D74-11d3-8694-00C04F6890ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03378 456 NtEnumerateKey (350, 965, Node, 288, ... {LastWrite={0x6bc52932,0x1c73999}, TitleIdx=0, Name= (350, 965, Node, 288, ... {LastWrite={0x6bc52932,0x1c73999}, TitleIdx=0, Name="{636B9F10-0C7D-11D1-95B2-0020AFDC7421}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03379 456 NtEnumerateKey (350, 964, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name= (350, 964, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name="{6342FCED-25EA-4033-BDDB-D049A14382D3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03380 456 NtEnumerateKey (350, 963, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name= (350, 963, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name="{6342E1B6-94DB-11D1-ADE2-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03381 456 NtEnumerateKey (350, 962, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name= (350, 962, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{62F75052-F3EC-4A64-84FB-AB18E0746ED8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03382 456 NtEnumerateKey (350, 961, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name= (350, 961, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name="{62BE5D10-60EB-11d0-BD3B-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03383 456 NtEnumerateKey (350, 960, Node, 288, ... {LastWrite={0x60045186,0x1c73999}, TitleIdx=0, Name= (350, 960, Node, 288, ... {LastWrite={0x60045186,0x1c73999}, TitleIdx=0, Name="{62AE1F9A-126A-11D0-A14B-0800361B1103}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03384 456 NtEnumerateKey (350, 959, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 959, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6295DF2E-35EE-11d1-8707-00C04FD93327}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03385 456 NtEnumerateKey (350, 958, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 958, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6295DF2D-35EE-11d1-8707-00C04FD93327}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03386 456 NtEnumerateKey (350, 957, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 957, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{6295DF27-35EE-11d1-8707-00C04FD93327}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03387 456 NtEnumerateKey (350, 956, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name= (350, 956, Node, 288, ... {LastWrite={0x74b5fab2,0x1c73999}, TitleIdx=0, Name="{626BAFE1-E5D6-11D1-B1DD-006097D503D9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03388 456 NtEnumerateKey (350, 955, Node, 288, ... {LastWrite={0x6dfa3684,0x1c73999}, TitleIdx=0, Name= (350, 955, Node, 288, ... {LastWrite={0x6dfa3684,0x1c73999}, TitleIdx=0, Name="{623E2882-FC0E-11d1-9A77-0000F8756A10}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03389 456 NtEnumerateKey (350, 954, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 954, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{62392950-1AF8-11D0-B267-00A0C90F56FC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03390 456 NtEnumerateKey (350, 953, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name= (350, 953, Node, 288, ... {LastWrite={0x25807aa8,0x1c73999}, TitleIdx=0, Name="{622D47B6-CEEC-4DE1-8056-B6D16F29BC97}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03391 456 NtEnumerateKey (350, 952, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 952, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03392 456 NtEnumerateKey (350, 951, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 951, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{6205B8C9-75FF-4623-A50A-88E1F14EAFF2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03393 456 NtEnumerateKey (350, 950, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 950, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{61E218E0-65D3-101B-9F08-061CEAC3D50D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03394 456 NtEnumerateKey (350, 949, Node, 288, ... {LastWrite={0x767d5bd8,0x1c73999}, TitleIdx=0, Name= (350, 949, Node, 288, ... {LastWrite={0x767d5bd8,0x1c73999}, TitleIdx=0, Name="{61CECF11-FC3A-11D2-A1CD-005004602752}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03395 456 NtEnumerateKey (350, 948, Node, 288, ... {LastWrite={0x635051fa,0x1c73999}, TitleIdx=0, Name= (350, 948, Node, 288, ... {LastWrite={0x635051fa,0x1c73999}, TitleIdx=0, Name="{613EBF9E-C765-446F-BF96-7728CE579282}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03396 456 NtEnumerateKey (350, 947, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 947, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{6131A8EC-78CE-11d2-A3F2-3078302C2030}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03397 456 NtEnumerateKey (350, 946, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name= (350, 946, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name="{61180810-EF20-11D2-9431-00A0C92A2F2D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03398 456 NtEnumerateKey (350, 945, Node, 288, ... {LastWrite={0x2629c19e,0x1c73999}, TitleIdx=0, Name= (350, 945, Node, 288, ... {LastWrite={0x2629c19e,0x1c73999}, TitleIdx=0, Name="{610037EC-CE06-11D3-93FC-00805F853771}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03399 456 NtEnumerateKey (350, 944, Node, 288, ... {LastWrite={0x6fe55af0,0x1c73999}, TitleIdx=0, Name= (350, 944, Node, 288, ... {LastWrite={0x6fe55af0,0x1c73999}, TitleIdx=0, Name="{60fd46de-f830-4894-a628-6fa81bc0190d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03400 456 NtEnumerateKey (350, 943, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name= (350, 943, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name="{60F6E467-4DEF-11d2-B2D9-00C04F8EEC8C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03401 456 NtEnumerateKey (350, 942, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name= (350, 942, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name="{60F6E466-4DEF-11d2-B2D9-00C04F8EEC8C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03402 456 NtEnumerateKey (350, 941, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name= (350, 941, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name="{60F6E465-4DEF-11d2-B2D9-00C04F8EEC8C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03403 456 NtEnumerateKey (350, 940, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name= (350, 940, Node, 288, ... {LastWrite={0x6ddb37f2,0x1c73999}, TitleIdx=0, Name="{60F6E464-4DEF-11d2-B2D9-00C04F8EEC8C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03404 456 NtEnumerateKey (350, 939, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name= (350, 939, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name="{6089A37E-EB8A-482D-BD6F-F9F46904D16D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03405 456 NtEnumerateKey (350, 938, Node, 288, ... {LastWrite={0x5c0a4568,0x1c73999}, TitleIdx=0, Name= (350, 938, Node, 288, ... {LastWrite={0x5c0a4568,0x1c73999}, TitleIdx=0, Name="{607fd4e8-0a03-11d1-ab1d-00c04fc9b304}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03406 456 NtEnumerateKey (350, 937, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name= (350, 937, Node, 288, ... {LastWrite={0x7682208c,0x1c73999}, TitleIdx=0, Name="{607C27E9-AB27-11d3-A116-A0EA50C10801}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03407 456 NtEnumerateKey (350, 936, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name= (350, 936, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name="{60664caf-af0d-0007-a300-5c7d25ff22a0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03408 456 NtEnumerateKey (350, 935, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name= (350, 935, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name="{60664caf-af0d-0005-a300-5c7d25ff22a0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03409 456 NtEnumerateKey (350, 934, Node, 288, ... {LastWrite={0x5d8c825c,0x1c73999}, TitleIdx=0, Name= (350, 934, Node, 288, ... {LastWrite={0x5d8c825c,0x1c73999}, TitleIdx=0, Name="{60664caf-af0d-0004-a300-5c7d25ff22a0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03410 456 NtEnumerateKey (350, 933, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name= (350, 933, Node, 288, ... {LastWrite={0x5d8ee4b6,0x1c73999}, TitleIdx=0, Name="{60664caf-af0d-0003-a300-5c7d25ff22a0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03411 456 NtEnumerateKey (350, 932, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 932, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{603D3801-BD81-11d0-A3A5-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03412 456 NtEnumerateKey (350, 931, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 931, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{603D3800-BD81-11d0-A3A5-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03413 456 NtEnumerateKey (350, 930, Node, 288, ... {LastWrite={0x60935e9e,0x1c73999}, TitleIdx=0, Name= (350, 930, Node, 288, ... {LastWrite={0x60935e9e,0x1c73999}, TitleIdx=0, Name="{60254CA5-953B-11CF-8C96-00AA00B8708C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03414 456 NtEnumerateKey (350, 929, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 929, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{601ac3dc-786a-4eb0-bf40-ee3521e70bfb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03415 456 NtEnumerateKey (350, 928, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name= (350, 928, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name="{60129CFD-2E9B-4098-AA4B-D6CFADA265C3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03416 456 NtEnumerateKey (350, 927, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 927, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{5FB7EF7D-DFF4-468a-B6B7-2FCBD188F994}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03417 456 NtEnumerateKey (350, 926, Node, 288, ... {LastWrite={0x767634ca,0x1c73999}, TitleIdx=0, Name= (350, 926, Node, 288, ... {LastWrite={0x767634ca,0x1c73999}, TitleIdx=0, Name="{5F9CFD93-8CAD-11d3-9A7E-00C04F8EFB70}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03418 456 NtEnumerateKey (350, 925, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name= (350, 925, Node, 288, ... {LastWrite={0x5954791a,0x1c73999}, TitleIdx=0, Name="{5F889CE8-3B09-4CFF-B70A-83730CC00627}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03419 456 NtEnumerateKey (350, 924, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name= (350, 924, Node, 288, ... {LastWrite={0x5ab2f2c8,0x1c73999}, TitleIdx=0, Name="{5F5295E0-429F-1069-A2E2-08002B30309D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03420 456 NtEnumerateKey (350, 923, Node, 288, ... {LastWrite={0xae5c5022,0x1c738c7}, TitleIdx=0, Name= (350, 923, Node, 288, ... {LastWrite={0xae5c5022,0x1c738c7}, TitleIdx=0, Name="{5f4baad0-4d59-4fcd-b213-783ce7a92f22}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03421 456 NtEnumerateKey (350, 922, Node, 288, ... {LastWrite={0x1fe53304,0x1c73999}, TitleIdx=0, Name= (350, 922, Node, 288, ... {LastWrite={0x1fe53304,0x1c73999}, TitleIdx=0, Name="{5F327514-6C5E-4d60-8F16-D07FA08A78ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03422 456 NtEnumerateKey (350, 921, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 921, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03423 456 NtEnumerateKey (350, 920, Node, 288, ... {LastWrite={0x2c64c6d0,0x1c73999}, TitleIdx=0, Name= (350, 920, Node, 288, ... {LastWrite={0x2c64c6d0,0x1c73999}, TitleIdx=0, Name="{5EA6F67B-7713-45F3-B535-0E03DD637345}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03424 456 NtEnumerateKey (350, 919, Node, 288, ... {LastWrite={0x252f6ab4,0x1c73999}, TitleIdx=0, Name= (350, 919, Node, 288, ... {LastWrite={0x252f6ab4,0x1c73999}, TitleIdx=0, Name="{5e941d80-bf96-11cd-b579-08002b30bfeb}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03425 456 NtEnumerateKey (350, 918, Node, 288, ... {LastWrite={0x6db774ac,0x1c73999}, TitleIdx=0, Name= (350, 918, Node, 288, ... {LastWrite={0x6db774ac,0x1c73999}, TitleIdx=0, Name="{5E7C299F-6EAD-4F6D-AFC0-B6972931517D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03426 456 NtEnumerateKey (350, 917, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name= (350, 917, Node, 288, ... {LastWrite={0x5b5e9c18,0x1c73999}, TitleIdx=0, Name="{5E6AB780-7743-11CF-A12B-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03427 456 NtEnumerateKey (350, 916, Node, 288, ... {LastWrite={0x1f91c0b6,0x1c73999}, TitleIdx=0, Name= (350, 916, Node, 288, ... {LastWrite={0x1f91c0b6,0x1c73999}, TitleIdx=0, Name="{5E05D214-DD15-47cd-B5BC-65FAC825D3D0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03428 456 NtEnumerateKey (350, 915, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name= (350, 915, Node, 288, ... {LastWrite={0x62e76a82,0x1c73999}, TitleIdx=0, Name="{5DFB2651-9668-11D0-B17B-00C04FC2A0CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03429 456 NtEnumerateKey (350, 914, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name= (350, 914, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name="{5DD0CC9C-43E7-424f-BADC-74E269FFEBE5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03430 456 NtEnumerateKey (350, 913, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 913, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{5DC41694-C6A6-11d1-9D35-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03431 456 NtEnumerateKey (350, 912, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 912, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{5DC41693-C6A6-11d1-9D35-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03432 456 NtEnumerateKey (350, 911, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 911, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{5DC41692-C6A6-11d1-9D35-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03433 456 NtEnumerateKey (350, 910, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 910, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{5DC41691-C6A6-11d1-9D35-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03434 456 NtEnumerateKey (350, 909, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 909, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{5DC41690-C6A6-11d1-9D35-006008B0E5CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03435 456 NtEnumerateKey (350, 908, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 908, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{5DB2625A-54DF-11D0-B6C4-0800091AA605}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03436 456 NtEnumerateKey (350, 907, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name= (350, 907, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name="{5D9DD151-65F4-11CE-900D-00AA00445589}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03437 456 NtEnumerateKey (350, 906, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name= (350, 906, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name="{5D8D8F1A-8B89-11D1-ADDB-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03438 456 NtEnumerateKey (350, 905, Node, 288, ... {LastWrite={0x63a888fc,0x1c73999}, TitleIdx=0, Name= (350, 905, Node, 288, ... {LastWrite={0x63a888fc,0x1c73999}, TitleIdx=0, Name="{5D6179D2-17EC-11D1-9AA9-00C04FD8FE93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03439 456 NtEnumerateKey (350, 904, Node, 288, ... {LastWrite={0x63a888fc,0x1c73999}, TitleIdx=0, Name= (350, 904, Node, 288, ... {LastWrite={0x63a888fc,0x1c73999}, TitleIdx=0, Name="{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03440 456 NtEnumerateKey (350, 903, Node, 288, ... {LastWrite={0x25748ee6,0x1c73999}, TitleIdx=0, Name= (350, 903, Node, 288, ... {LastWrite={0x25748ee6,0x1c73999}, TitleIdx=0, Name="{5D08B586-343A-11D0-AD46-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03441 456 NtEnumerateKey (350, 902, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name= (350, 902, Node, 288, ... {LastWrite={0x5d770d32,0x1c73999}, TitleIdx=0, Name="{5D02926A-212E-11D0-9DF9-00A0C922E6EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03442 456 NtEnumerateKey (350, 901, Node, 288, ... {LastWrite={0x596eb2f8,0x1c73999}, TitleIdx=0, Name= (350, 901, Node, 288, ... {LastWrite={0x596eb2f8,0x1c73999}, TitleIdx=0, Name="{5CE34C0D-0DC9-4C1F-897C-DAA1B78CEE7C}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 901, Node, 288, ... {LastWrite={0x596eb2f8,0x1c73999}, TitleIdx=0, Name="{5CE34C0D-0DC9-4C1F-897C-DAA1B78CEE7C}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03443 456 NtEnumerateKey (350, 900, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 900, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{5cb66670-d3d4-11cf-acab-00a024a55aef}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03444 456 NtEnumerateKey (350, 899, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name= (350, 899, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name="{5C85DCB0-F967-11D0-81ED-00C04FC99D4C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03445 456 NtEnumerateKey (350, 898, Node, 288, ... {LastWrite={0x261b7382,0x1c73999}, TitleIdx=0, Name= (350, 898, Node, 288, ... {LastWrite={0x261b7382,0x1c73999}, TitleIdx=0, Name="{5C659258-E236-11D2-8899-00104B2AFB46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03446 456 NtEnumerateKey (350, 897, Node, 288, ... {LastWrite={0x261b7382,0x1c73999}, TitleIdx=0, Name= (350, 897, Node, 288, ... {LastWrite={0x261b7382,0x1c73999}, TitleIdx=0, Name="{5C659257-E236-11D2-8899-00104B2AFB46}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03447 456 NtEnumerateKey (350, 896, Node, 288, ... {LastWrite={0x62a4a8aa,0x1c73999}, TitleIdx=0, Name= (350, 896, Node, 288, ... {LastWrite={0x62a4a8aa,0x1c73999}, TitleIdx=0, Name="{5C63C1AD-3956-4FF8-8486-40034758315B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03448 456 NtEnumerateKey (350, 895, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name= (350, 895, Node, 288, ... {LastWrite={0x6eaaa488,0x1c73999}, TitleIdx=0, Name="{5C135180-9973-46D9-ABF4-148267CBB8BF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03449 456 NtEnumerateKey (350, 894, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name= (350, 894, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name="{5C0786EE-1847-11D2-ABA2-00C04FB6C6FA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03450 456 NtEnumerateKey (350, 893, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name= (350, 893, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name="{5C0786ED-1847-11D2-ABA2-00C04FB6C6FA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03451 456 NtEnumerateKey (350, 892, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 892, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{5BEDF7DE-98CF-11D0-B255-00C04FC9E292}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03452 456 NtEnumerateKey (350, 891, Node, 288, ... {LastWrite={0x60a6716e,0x1c73999}, TitleIdx=0, Name= (350, 891, Node, 288, ... {LastWrite={0x60a6716e,0x1c73999}, TitleIdx=0, Name="{5B5E7E70-E653-11CF-84A5-0000C08C00C4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03453 456 NtEnumerateKey (350, 890, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 890, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{5b4dae26-b807-11d0-9815-00c04fd91972}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03454 456 NtEnumerateKey (350, 889, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name= (350, 889, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name="{5B18AB61-091D-11D1-97DF-00C04FB9618A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03455 456 NtEnumerateKey (350, 888, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name= (350, 888, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name="{5B175DF9-6A86-11D1-B651-00C04FA3C554}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03456 456 NtEnumerateKey (350, 887, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 887, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{5B035261-40F9-11D1-AAEC-00805FC1270E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03457 456 NtEnumerateKey (350, 886, Node, 288, ... {LastWrite={0x6e0884a0,0x1c73999}, TitleIdx=0, Name= (350, 886, Node, 288, ... {LastWrite={0x6e0884a0,0x1c73999}, TitleIdx=0, Name="{5AE1DAE0-1461-11d2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03458 456 NtEnumerateKey (350, 885, Node, 288, ... {LastWrite={0x63b474be,0x1c73999}, TitleIdx=0, Name= (350, 885, Node, 288, ... {LastWrite={0x63b474be,0x1c73999}, TitleIdx=0, Name="{5ADF5BF6-E452-11D1-945A-00C04FB984F9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03459 456 NtEnumerateKey (350, 884, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name= (350, 884, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name="{5AB0882E-7274-4516-877D-4EEE99BA4FD0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03460 456 NtEnumerateKey (350, 883, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 883, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{5AAF51B3-B1F0-11d1-B6AB-00A0C90833E9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03461 456 NtEnumerateKey (350, 882, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 882, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{5AAF51B2-B1F0-11d1-B6AB-00A0C90833E9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03462 456 NtEnumerateKey (350, 881, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name= (350, 881, Node, 288, ... {LastWrite={0x6bdd00b6,0x1c73999}, TitleIdx=0, Name="{5A86531E-8E2A-419F-B4CC-18EB8E891796}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03463 456 NtEnumerateKey (350, 880, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name= (350, 880, Node, 288, ... {LastWrite={0x6e6a450a,0x1c73999}, TitleIdx=0, Name="{5A7B63E0-F9BC-11D2-BBE5-00C04F86AE3B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03464 456 NtEnumerateKey (350, 879, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name= (350, 879, Node, 288, ... {LastWrite={0x749bc0d4,0x1c73999}, TitleIdx=0, Name="{5A580C11-E5EB-11d1-A86E-0000F8084F96}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03465 456 NtEnumerateKey (350, 878, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 878, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{5a3d988e-820d-4aaf-ba87-440081768a17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03466 456 NtEnumerateKey (350, 877, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 877, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{59e09848-8099-101b-8df3-00000b65c3b5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03467 456 NtEnumerateKey (350, 876, Node, 288, ... {LastWrite={0x6eb6904a,0x1c73999}, TitleIdx=0, Name= (350, 876, Node, 288, ... {LastWrite={0x6eb6904a,0x1c73999}, TitleIdx=0, Name="{59DC47A8-116C-11D3-9D8E-00C04F72D980}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03468 456 NtEnumerateKey (350, 875, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 875, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{59CE6880-ACF8-11CF-B56E-0080C7C4B68A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03469 456 NtEnumerateKey (350, 874, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 874, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{59be4990-f85c-11ce-aff7-00aa003ca9f6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03470 456 NtEnumerateKey (350, 873, Node, 288, ... {LastWrite={0x614d560a,0x1c73999}, TitleIdx=0, Name= (350, 873, Node, 288, ... {LastWrite={0x614d560a,0x1c73999}, TitleIdx=0, Name="{598EBA02-B49A-11D2-A1C1-00609778EA66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03471 456 NtEnumerateKey (350, 872, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 872, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{593817A0-7DB3-11CF-A2DE-00AA00B93356}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03472 456 NtEnumerateKey (350, 871, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 871, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{59099400-57FF-11CE-BD94-0020AF85B590}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03473 456 NtEnumerateKey (350, 870, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 870, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{59031a47-3f72-44a7-89c5-5595fe6b30ee}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03474 456 NtEnumerateKey (350, 869, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 869, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{58f1f272-9240-4f51-b6d4-fd63d1618591}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03475 456 NtEnumerateKey (350, 868, Node, 288, ... {LastWrite={0x57fac420,0x1c73999}, TitleIdx=0, Name= (350, 868, Node, 288, ... {LastWrite={0x57fac420,0x1c73999}, TitleIdx=0, Name="{58ECEE30-E715-11CF-B0E3-00AA003F000F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03476 456 NtEnumerateKey (350, 867, Node, 288, ... {LastWrite={0x6bc0647e,0x1c73999}, TitleIdx=0, Name= (350, 867, Node, 288, ... {LastWrite={0x6bc0647e,0x1c73999}, TitleIdx=0, Name="{58C2B4D0-46E7-11D1-89AC-00A0C9054129}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03477 456 NtEnumerateKey (350, 866, Node, 288, ... {LastWrite={0x6db2aff8,0x1c73999}, TitleIdx=0, Name= (350, 866, Node, 288, ... {LastWrite={0x6db2aff8,0x1c73999}, TitleIdx=0, Name="{58AB2366-D597-11d1-B90E-00C04FC9B263}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03478 456 NtEnumerateKey (350, 865, Node, 288, ... {LastWrite={0x632a2c5a,0x1c73999}, TitleIdx=0, Name= (350, 865, Node, 288, ... {LastWrite={0x632a2c5a,0x1c73999}, TitleIdx=0, Name="{58A2E406-8304-11D2-9533-0060b0C3C4F4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03479 456 NtEnumerateKey (350, 864, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name= (350, 864, Node, 288, ... {LastWrite={0x6be1c56a,0x1c73999}, TitleIdx=0, Name="{5858107D-11EA-47B1-9694-3F29F7680FB8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03480 456 NtEnumerateKey (350, 863, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name= (350, 863, Node, 288, ... {LastWrite={0x2156bf82,0x1c73999}, TitleIdx=0, Name="{58476F97-6464-4e49-9BCB-DD88816A60A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03481 456 NtEnumerateKey (350, 862, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 862, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{5839FCA9-774D-42A1-ACDA-D6A79037F57F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03482 456 NtEnumerateKey (350, 861, Node, 288, ... {LastWrite={0x6e7d57da,0x1c73999}, TitleIdx=0, Name= (350, 861, Node, 288, ... {LastWrite={0x6e7d57da,0x1c73999}, TitleIdx=0, Name="{58356C5D-0BFD-48ED-93C5-F4520B6233DE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03483 456 NtEnumerateKey (350, 860, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name= (350, 860, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name="{58221C6A-EA27-11CF-ADCF-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03484 456 NtEnumerateKey (350, 859, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name= (350, 859, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name="{58221C69-EA27-11CF-ADCF-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03485 456 NtEnumerateKey (350, 858, Node, 288, ... {LastWrite={0x607de974,0x1c73999}, TitleIdx=0, Name= (350, 858, Node, 288, ... {LastWrite={0x607de974,0x1c73999}, TitleIdx=0, Name="{58221C67-EA27-11CF-ADCF-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03486 456 NtEnumerateKey (350, 857, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name= (350, 857, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name="{58221C66-EA27-11CF-ADCF-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03487 456 NtEnumerateKey (350, 856, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name= (350, 856, Node, 288, ... {LastWrite={0x6074600c,0x1c73999}, TitleIdx=0, Name="{58221C65-EA27-11CF-ADCF-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03488 456 NtEnumerateKey (350, 855, Node, 288, ... {LastWrite={0x635051fa,0x1c73999}, TitleIdx=0, Name= (350, 855, Node, 288, ... {LastWrite={0x635051fa,0x1c73999}, TitleIdx=0, Name="{581D09E5-0B45-11D3-A565-00C04F8EF6E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03489 456 NtEnumerateKey (350, 854, Node, 288, ... {LastWrite={0x6cfb1ae6,0x1c73999}, TitleIdx=0, Name= (350, 854, Node, 288, ... {LastWrite={0x6cfb1ae6,0x1c73999}, TitleIdx=0, Name="{57C596D0-9370-40C0-BA0D-AB491B63255D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03490 456 NtEnumerateKey (350, 853, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 853, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{57C06EAA-8784-11D0-83D4-00A0C911E5DF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03491 456 NtEnumerateKey (350, 852, Node, 288, ... {LastWrite={0x5f85f4e4,0x1c73999}, TitleIdx=0, Name= (350, 852, Node, 288, ... {LastWrite={0x5f85f4e4,0x1c73999}, TitleIdx=0, Name="{57B4B693-2388-11d3-8E39-0080C7ACC199}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03492 456 NtEnumerateKey (350, 851, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 851, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{5791BC26-CE9C-11D1-97BF-0000F81E849C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03493 456 NtEnumerateKey (350, 850, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name= (350, 850, Node, 288, ... {LastWrite={0x6ead06e2,0x1c73999}, TitleIdx=0, Name="{577FAA18-4518-445E-8F70-1473F8CF4BA4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03494 456 NtEnumerateKey (350, 849, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 849, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{57651662-CE3E-11D0-8D77-00C04FC99D61}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03495 456 NtEnumerateKey (350, 848, Node, 288, ... {LastWrite={0x6ee17a9e,0x1c73999}, TitleIdx=0, Name= (350, 848, Node, 288, ... {LastWrite={0x6ee17a9e,0x1c73999}, TitleIdx=0, Name="{574B4740-A328-42D6-A8E2-3F7C2F9D429C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03496 456 NtEnumerateKey (350, 847, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name= (350, 847, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name="{56FDF344-FD6D-11d0-958A-006097C9A090}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03497 456 NtEnumerateKey (350, 846, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 846, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{565DCEF2-AFC5-11D2-8853-0000F80883E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03498 456 NtEnumerateKey (350, 845, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 845, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{5645C8C4-E277-11CF-8FDA-00AA00A14F93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03499 456 NtEnumerateKey (350, 844, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 844, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{5645C8C3-E277-11CF-8FDA-00AA00A14F93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03500 456 NtEnumerateKey (350, 843, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 843, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{5645C8C2-E277-11CF-8FDA-00AA00A14F93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03501 456 NtEnumerateKey (350, 842, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 842, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{5645C8C1-E277-11CF-8FDA-00AA00A14F93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03502 456 NtEnumerateKey (350, 841, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 841, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{5645C8C0-E277-11CF-8FDA-00AA00A14F93}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03503 456 NtEnumerateKey (350, 840, Node, 288, ... {LastWrite={0x6089d536,0x1c73999}, TitleIdx=0, Name= (350, 840, Node, 288, ... {LastWrite={0x6089d536,0x1c73999}, TitleIdx=0, Name="{563DC062-B09A-11D2-A24D-00104BD35090}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03504 456 NtEnumerateKey (350, 839, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 839, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{56117100-C0CD-101B-81E2-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03505 456 NtEnumerateKey (350, 838, Node, 288, ... {LastWrite={0x71ce1d02,0x1c73999}, TitleIdx=0, Name= (350, 838, Node, 288, ... {LastWrite={0x71ce1d02,0x1c73999}, TitleIdx=0, Name="{560E5A02-DEDE-11D1-A9F5-00A0248903EA}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 838, Node, 288, ... {LastWrite={0x71ce1d02,0x1c73999}, TitleIdx=0, Name="{560E5A02-DEDE-11D1-A9F5-00A0248903EA}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03506 456 NtEnumerateKey (350, 837, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 837, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{55d7b852-f6d1-42f2-aa75-8728a1b2d264}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03507 456 NtEnumerateKey (350, 836, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name= (350, 836, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name="{55A8FD00-4288-11D3-9BD1-8A0D61C88835}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03508 456 NtEnumerateKey (350, 835, Node, 288, ... {LastWrite={0x5df0a520,0x1c73999}, TitleIdx=0, Name= (350, 835, Node, 288, ... {LastWrite={0x5df0a520,0x1c73999}, TitleIdx=0, Name="{5560C070-114E-4E97-929A-7E39F40DEBC7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03509 456 NtEnumerateKey (350, 834, Node, 288, ... {LastWrite={0x5df569d4,0x1c73999}, TitleIdx=0, Name= (350, 834, Node, 288, ... {LastWrite={0x5df569d4,0x1c73999}, TitleIdx=0, Name="{555F3418-D99E-4E51-800A-6E89CFD8B1D7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03510 456 NtEnumerateKey (350, 833, Node, 288, ... {LastWrite={0x60e46e92,0x1c73999}, TitleIdx=0, Name= (350, 833, Node, 288, ... {LastWrite={0x60e46e92,0x1c73999}, TitleIdx=0, Name="{555669DD-DCF9-49BB-8531-A28FF9CCFCDC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03511 456 NtEnumerateKey (350, 832, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 832, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{555278E2-05DB-11D1-883A-3C8B00C10000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03512 456 NtEnumerateKey (350, 831, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 831, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{55136805-B2DE-11D1-B9F2-00A0C98BC547}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03513 456 NtEnumerateKey (350, 830, Node, 288, ... {LastWrite={0x5e7d4fde,0x1c73999}, TitleIdx=0, Name= (350, 830, Node, 288, ... {LastWrite={0x5e7d4fde,0x1c73999}, TitleIdx=0, Name="{550dda30-0541-11d2-9ca9-0060b0ec3d39}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03514 456 NtEnumerateKey (350, 829, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 829, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{54c37cd0-d944-11d0-a9f4-006097942311}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03515 456 NtEnumerateKey (350, 828, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 828, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{54AF9350-1923-11D3-9CA4-00C04F72C514}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03516 456 NtEnumerateKey (350, 827, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 827, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{549365d0-ec26-11cf-8310-00aa00b505db}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03517 456 NtEnumerateKey (350, 826, Node, 288, ... {LastWrite={0x602814cc,0x1c73999}, TitleIdx=0, Name= (350, 826, Node, 288, ... {LastWrite={0x602814cc,0x1c73999}, TitleIdx=0, Name="{5491AB67-AFEB-48B1-B8DF-B2D63810EF40}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 826, Node, 288, ... {LastWrite={0x602814cc,0x1c73999}, TitleIdx=0, Name="{5491AB67-AFEB-48B1-B8DF-B2D63810EF40}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03518 456 NtEnumerateKey (350, 825, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 825, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{54702535-2606-11D1-999C-0000F8756A10}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03519 456 NtEnumerateKey (350, 824, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 824, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{5467EDEC-0CCA-11D3-96E0-00104BC7B3A8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03520 456 NtEnumerateKey (350, 823, Node, 288, ... {LastWrite={0x63c06080,0x1c73999}, TitleIdx=0, Name= (350, 823, Node, 288, ... {LastWrite={0x63c06080,0x1c73999}, TitleIdx=0, Name="{545AE700-50BF-11D1-9FE9-00600832DB4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03521 456 NtEnumerateKey (350, 822, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name= (350, 822, Node, 288, ... {LastWrite={0x5bb20e66,0x1c73999}, TitleIdx=0, Name="{5440837F-4BFF-4AE5-A1B1-7722ECC6332A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03522 456 NtEnumerateKey (350, 821, Node, 288, ... {LastWrite={0x62db7ec0,0x1c73999}, TitleIdx=0, Name= (350, 821, Node, 288, ... {LastWrite={0x62db7ec0,0x1c73999}, TitleIdx=0, Name="{542FB453-5003-11CF-92A2-00AA00B8A733}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03523 456 NtEnumerateKey (350, 820, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name= (350, 820, Node, 288, ... {LastWrite={0x6327ca00,0x1c73999}, TitleIdx=0, Name="{54274112-7A5E-11d2-875F-00A0C93C09B3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03524 456 NtEnumerateKey (350, 819, Node, 288, ... {LastWrite={0x72586566,0x1c73999}, TitleIdx=0, Name= (350, 819, Node, 288, ... {LastWrite={0x72586566,0x1c73999}, TitleIdx=0, Name="{540D8A8B-1C3F-4E32-8132-530F6A502090}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03525 456 NtEnumerateKey (350, 818, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name= (350, 818, Node, 288, ... {LastWrite={0x1fe9f7b8,0x1c73999}, TitleIdx=0, Name="{5408B2F0-C816-11D1-8F99-00600895E7D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03526 456 NtEnumerateKey (350, 817, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 817, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{53D6AB1D-2488-11D1-A28C-00C04FB94F17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03527 456 NtEnumerateKey (350, 816, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 816, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{53C74826-AB99-4d33-ACA4-3117F51D3788}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03528 456 NtEnumerateKey (350, 815, Node, 288, ... {LastWrite={0x5b9efb96,0x1c73999}, TitleIdx=0, Name= (350, 815, Node, 288, ... {LastWrite={0x5b9efb96,0x1c73999}, TitleIdx=0, Name="{53bd6b4e-3780-4693-afc3-7161c2f3ee9c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03529 456 NtEnumerateKey (350, 814, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name= (350, 814, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name="{53B6AA6C-3F56-11D0-916B-00AA00C18068}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03530 456 NtEnumerateKey (350, 813, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name= (350, 813, Node, 288, ... {LastWrite={0x63446638,0x1c73999}, TitleIdx=0, Name="{53B6AA67-3F56-11D0-916B-00AA00C18068}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03531 456 NtEnumerateKey (350, 812, Node, 288, ... {LastWrite={0x633fa184,0x1c73999}, TitleIdx=0, Name= (350, 812, Node, 288, ... {LastWrite={0x633fa184,0x1c73999}, TitleIdx=0, Name="{53B6AA63-3F56-11D0-916B-00AA00C18068}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 812, Node, 288, ... {LastWrite={0x633fa184,0x1c73999}, TitleIdx=0, Name="{53B6AA63-3F56-11D0-916B-00AA00C18068}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03532 456 NtEnumerateKey (350, 811, Node, 288, ... {LastWrite={0x72cad646,0x1c73999}, TitleIdx=0, Name= (350, 811, Node, 288, ... {LastWrite={0x72cad646,0x1c73999}, TitleIdx=0, Name="{53934290-628D-11D2-AE0F-006097B01411}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03533 456 NtEnumerateKey (350, 810, Node, 288, ... {LastWrite={0x5df0a520,0x1c73999}, TitleIdx=0, Name= (350, 810, Node, 288, ... {LastWrite={0x5df0a520,0x1c73999}, TitleIdx=0, Name="{5390E909-5BDF-4218-BB1F-9A41B3143214}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03534 456 NtEnumerateKey (350, 809, Node, 288, ... {LastWrite={0x5a5f807a,0x1c73999}, TitleIdx=0, Name= (350, 809, Node, 288, ... {LastWrite={0x5a5f807a,0x1c73999}, TitleIdx=0, Name="{53362C32-A296-4F2D-A2F8-FD984D08340B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03535 456 NtEnumerateKey (350, 808, Node, 288, ... {LastWrite={0x5b6cea34,0x1c73999}, TitleIdx=0, Name= (350, 808, Node, 288, ... {LastWrite={0x5b6cea34,0x1c73999}, TitleIdx=0, Name="{52ca3bcf-3b9b-419e-a3d6-5d28c0b0b50c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03536 456 NtEnumerateKey (350, 807, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 807, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{52C01A76-19E2-4A50-AE8A-38FFBCCF9182}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03537 456 NtEnumerateKey (350, 806, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 806, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{529A9E6B-6587-4F23-AB9E-9C7D683E3C50}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03538 456 NtEnumerateKey (350, 805, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 805, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{525609F4-D232-11D0-B76F-00C04FC9BCC4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03539 456 NtEnumerateKey (350, 804, Node, 288, ... {LastWrite={0x5d55ac46,0x1c73999}, TitleIdx=0, Name= (350, 804, Node, 288, ... {LastWrite={0x5d55ac46,0x1c73999}, TitleIdx=0, Name="{5220cb21-c88d-11cf-b347-00aa00a28331}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03540 456 NtEnumerateKey (350, 803, Node, 288, ... {LastWrite={0x75a92a8e,0x1c73999}, TitleIdx=0, Name= (350, 803, Node, 288, ... {LastWrite={0x75a92a8e,0x1c73999}, TitleIdx=0, Name="{521FB373-7654-49F2-BDB1-0C6E6660714F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03541 456 NtEnumerateKey (350, 802, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name= (350, 802, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name="{520CCA67-51A5-11D3-9144-00104BA11C5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03542 456 NtEnumerateKey (350, 801, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name= (350, 801, Node, 288, ... {LastWrite={0x5e16cac0,0x1c73999}, TitleIdx=0, Name="{520CCA65-51A5-11D3-9144-00104BA11C5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03543 456 NtEnumerateKey (350, 800, Node, 288, ... {LastWrite={0x5e146866,0x1c73999}, TitleIdx=0, Name= (350, 800, Node, 288, ... {LastWrite={0x5e146866,0x1c73999}, TitleIdx=0, Name="{520CCA63-51A5-11D3-9144-00104BA11C5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03544 456 NtEnumerateKey (350, 799, Node, 288, ... {LastWrite={0x5e146866,0x1c73999}, TitleIdx=0, Name= (350, 799, Node, 288, ... {LastWrite={0x5e146866,0x1c73999}, TitleIdx=0, Name="{520CCA61-51A5-11D3-9144-00104BA11C5E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03545 456 NtEnumerateKey (350, 798, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 798, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{51d11c90-7b9d-11cf-b03d-00aa006e0975}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03546 456 NtEnumerateKey (350, 797, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name= (350, 797, Node, 288, ... {LastWrite={0x98666726,0x1c738c7}, TitleIdx=0, Name="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03547 456 NtEnumerateKey (350, 796, Node, 288, ... {LastWrite={0x212e3788,0x1c73999}, TitleIdx=0, Name= (350, 796, Node, 288, ... {LastWrite={0x212e3788,0x1c73999}, TitleIdx=0, Name="{51372af3-cae7-11cf-be81-00aa00a2fa25}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03548 456 NtEnumerateKey (350, 795, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name= (350, 795, Node, 288, ... {LastWrite={0x766f0dbc,0x1c73999}, TitleIdx=0, Name="{513148E2-7F51-4301-BF6B-1CAE2958BC54}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03549 456 NtEnumerateKey (350, 794, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 794, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{510a4910-7f1c-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03550 456 NtEnumerateKey (350, 793, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name= (350, 793, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name="{50F16B26-467E-11D1-8271-00C04FC3183B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03551 456 NtEnumerateKey (350, 792, Node, 288, ... {LastWrite={0x6ce80816,0x1c73999}, TitleIdx=0, Name= (350, 792, Node, 288, ... {LastWrite={0x6ce80816,0x1c73999}, TitleIdx=0, Name="{50E5E3D1-C07E-11D0-B9FD-00A0249F6B00}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03552 456 NtEnumerateKey (350, 791, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name= (350, 791, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name="{50D5107A-D278-4871-8989-F4CEAAF59CFC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03553 456 NtEnumerateKey (350, 790, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 790, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{50B6327F-AFD1-11d2-9CB9-0000F87A369E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03554 456 NtEnumerateKey (350, 789, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name= (350, 789, Node, 288, ... {LastWrite={0x62e9ccdc,0x1c73999}, TitleIdx=0, Name="{50B4791F-4731-11D0-8912-00C04FC2A0CA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03555 456 NtEnumerateKey (350, 788, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name= (350, 788, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name="{507708CC-A74A-11d2-9351-0000F875AE17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03556 456 NtEnumerateKey (350, 787, Node, 288, ... {LastWrite={0x60f9e3bc,0x1c73999}, TitleIdx=0, Name= (350, 787, Node, 288, ... {LastWrite={0x60f9e3bc,0x1c73999}, TitleIdx=0, Name="{506D89AE-909A-44f7-9444-ABD575896E35}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03557 456 NtEnumerateKey (350, 786, Node, 288, ... {LastWrite={0x75391c08,0x1c73999}, TitleIdx=0, Name= (350, 786, Node, 288, ... {LastWrite={0x75391c08,0x1c73999}, TitleIdx=0, Name="{50040C1D-BDBF-4924-B873-F14D6C5BFD66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03558 456 NtEnumerateKey (350, 785, Node, 288, ... {LastWrite={0x63066914,0x1c73999}, TitleIdx=0, Name= (350, 785, Node, 288, ... {LastWrite={0x63066914,0x1c73999}, TitleIdx=0, Name="{4FD2A832-86C8-11D0-8FCA-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03559 456 NtEnumerateKey (350, 784, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 784, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4FB6BB00-3347-11d0-B40A-00AA005FF586}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03560 456 NtEnumerateKey (350, 783, Node, 288, ... {LastWrite={0x759fa126,0x1c73999}, TitleIdx=0, Name= (350, 783, Node, 288, ... {LastWrite={0x759fa126,0x1c73999}, TitleIdx=0, Name="{4FACBBA1-FFD8-4CD7-8228-61E2F65CB1AE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03561 456 NtEnumerateKey (350, 782, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name= (350, 782, Node, 288, ... {LastWrite={0x256fca32,0x1c73999}, TitleIdx=0, Name="{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03562 456 NtEnumerateKey (350, 781, Node, 288, ... {LastWrite={0x62bc802e,0x1c73999}, TitleIdx=0, Name= (350, 781, Node, 288, ... {LastWrite={0x62bc802e,0x1c73999}, TitleIdx=0, Name="{4F664F91-FF01-11D0-8AED-00C04FD7B597}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03563 456 NtEnumerateKey (350, 780, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name= (350, 780, Node, 288, ... {LastWrite={0x603662e8,0x1c73999}, TitleIdx=0, Name="{4F637904-2CAB-4F0E-8688-D3717EBD2975}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03564 456 NtEnumerateKey (350, 779, Node, 288, ... {LastWrite={0x631254d6,0x1c73999}, TitleIdx=0, Name= (350, 779, Node, 288, ... {LastWrite={0x631254d6,0x1c73999}, TitleIdx=0, Name="{4F241DB1-EE9F-11D0-9824-006097C99E51}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03565 456 NtEnumerateKey (350, 778, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name= (350, 778, Node, 288, ... {LastWrite={0x60ab3622,0x1c73999}, TitleIdx=0, Name="{4EFE2452-168A-11d1-BC76-00C04FB9453B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03566 456 NtEnumerateKey (350, 777, Node, 288, ... {LastWrite={0x6bceb29a,0x1c73999}, TitleIdx=0, Name= (350, 777, Node, 288, ... {LastWrite={0x6bceb29a,0x1c73999}, TitleIdx=0, Name="{4EE17959-931E-49E4-A2C6-977ECF3628F3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03567 456 NtEnumerateKey (350, 776, Node, 288, ... {LastWrite={0x6b59df60,0x1c73999}, TitleIdx=0, Name= (350, 776, Node, 288, ... {LastWrite={0x6b59df60,0x1c73999}, TitleIdx=0, Name="{4ECB650F-4630-41D3-AC9A-C8F926FC5907}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03568 456 NtEnumerateKey (350, 775, Node, 288, ... {LastWrite={0x6fa29918,0x1c73999}, TitleIdx=0, Name= (350, 775, Node, 288, ... {LastWrite={0x6fa29918,0x1c73999}, TitleIdx=0, Name="{4EC4272E-2E6F-4EEB-91D0-EBC4D58E8DEE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03569 456 NtEnumerateKey (350, 774, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name= (350, 774, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name="{4EB31670-9FC6-11CF-AF6E-00AA00B67A42}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03570 456 NtEnumerateKey (350, 773, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 773, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4E40F770-369C-11d0-8922-00A024AB2DBB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03571 456 NtEnumerateKey (350, 772, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name= (350, 772, Node, 288, ... {LastWrite={0x21925a4c,0x1c73999}, TitleIdx=0, Name="{4E14FBA2-2E22-11D1-9964-00C04FBBB345}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03572 456 NtEnumerateKey (350, 771, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 771, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4de7016c-5ef9-11d1-8c13-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03573 456 NtEnumerateKey (350, 770, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name= (350, 770, Node, 288, ... {LastWrite={0x25853f5c,0x1c73999}, TitleIdx=0, Name="{4DE225BF-CF59-4CFC-85F7-68B90F185355}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03574 456 NtEnumerateKey (350, 769, Node, 288, ... {LastWrite={0x63ad4db0,0x1c73999}, TitleIdx=0, Name= (350, 769, Node, 288, ... {LastWrite={0x63ad4db0,0x1c73999}, TitleIdx=0, Name="{4DDB6D36-3BC1-11d2-86F2-006008B0E5D2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03575 456 NtEnumerateKey (350, 768, Node, 288, ... {LastWrite={0x5fbccafa,0x1c73999}, TitleIdx=0, Name= (350, 768, Node, 288, ... {LastWrite={0x5fbccafa,0x1c73999}, TitleIdx=0, Name="{4dd441ad-526d-4a77-9f1b-9841ed802fb0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03576 456 NtEnumerateKey (350, 767, Node, 288, ... {LastWrite={0xae1e52fe,0x1c738c7}, TitleIdx=0, Name= (350, 767, Node, 288, ... {LastWrite={0xae1e52fe,0x1c738c7}, TitleIdx=0, Name="{4DB1AD10-3391-11D2-9A33-00C04FA36145}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 767, Node, 288, ... {LastWrite={0xae1e52fe,0x1c738c7}, TitleIdx=0, Name="{4DB1AD10-3391-11D2-9A33-00C04FA36145}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03577 456 NtEnumerateKey (350, 766, Node, 288, ... {LastWrite={0x7574b6d2,0x1c73999}, TitleIdx=0, Name= (350, 766, Node, 288, ... {LastWrite={0x7574b6d2,0x1c73999}, TitleIdx=0, Name="{4D671823-9A5A-11d3-8EDC-00C04F6109CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03578 456 NtEnumerateKey (350, 765, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name= (350, 765, Node, 288, ... {LastWrite={0x5b60fe72,0x1c73999}, TitleIdx=0, Name="{4D5C8C2A-D075-11d0-B416-00C04FB90376}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03579 456 NtEnumerateKey (350, 764, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 764, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{4D5C8C25-D075-11d0-B416-00C04FB90376}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03580 456 NtEnumerateKey (350, 763, Node, 288, ... {LastWrite={0x59593dce,0x1c73999}, TitleIdx=0, Name= (350, 763, Node, 288, ... {LastWrite={0x59593dce,0x1c73999}, TitleIdx=0, Name="{4D317113-C6EC-406A-9C61-20E891BC37F7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03581 456 NtEnumerateKey (350, 762, Node, 288, ... {LastWrite={0x26570e4c,0x1c73999}, TitleIdx=0, Name= (350, 762, Node, 288, ... {LastWrite={0x26570e4c,0x1c73999}, TitleIdx=0, Name="{4CFC7932-0F9D-4BEF-9C32-8EA2A6B56FCB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03582 456 NtEnumerateKey (350, 761, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name= (350, 761, Node, 288, ... {LastWrite={0x58981f54,0x1c73999}, TitleIdx=0, Name="{4CE546FF-9128-465E-B5C5-5A36CFC2C285}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03583 456 NtEnumerateKey (350, 760, Node, 288, ... {LastWrite={0x6df7d42a,0x1c73999}, TitleIdx=0, Name= (350, 760, Node, 288, ... {LastWrite={0x6df7d42a,0x1c73999}, TitleIdx=0, Name="{4CCEA634-FBE0-11d1-906A-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03584 456 NtEnumerateKey (350, 759, Node, 288, ... {LastWrite={0x6de25f00,0x1c73999}, TitleIdx=0, Name= (350, 759, Node, 288, ... {LastWrite={0x6de25f00,0x1c73999}, TitleIdx=0, Name="{4CB26C03-FF93-11d0-817E-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03585 456 NtEnumerateKey (350, 758, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name= (350, 758, Node, 288, ... {LastWrite={0x626dd294,0x1c73999}, TitleIdx=0, Name="{4C8D0AF0-7BF0-4f33-9117-981A33DBD4E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03586 456 NtEnumerateKey (350, 757, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 757, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{4C8A0917-F587-4ECF-9C89-48147528F4E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03587 456 NtEnumerateKey (350, 756, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 756, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{4c892621-6757-4fe0-ad8c-a6301be7fba2}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03588 456 NtEnumerateKey (350, 755, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 755, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4C6F940C-3CFE-11D2-9EE7-00C04F797396}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03589 456 NtEnumerateKey (350, 754, Node, 288, ... {LastWrite={0x6fe55af0,0x1c73999}, TitleIdx=0, Name= (350, 754, Node, 288, ... {LastWrite={0x6fe55af0,0x1c73999}, TitleIdx=0, Name="{4c649c49-c48f-4222-9a0d-cbbf4231221d}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03590 456 NtEnumerateKey (350, 753, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 753, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{4C6055D8-84B9-4111-A7D3-6623894EEDB3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03591 456 NtEnumerateKey (350, 752, Node, 288, ... {LastWrite={0x63d5d5aa,0x1c73999}, TitleIdx=0, Name= (350, 752, Node, 288, ... {LastWrite={0x63d5d5aa,0x1c73999}, TitleIdx=0, Name="{4C4A5E40-732C-11D0-8816-00A0C903B83C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03592 456 NtEnumerateKey (350, 751, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name= (350, 751, Node, 288, ... {LastWrite={0x6bad51ae,0x1c73999}, TitleIdx=0, Name="{4BE0537B-5C19-11D3-8BDC-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03593 456 NtEnumerateKey (350, 750, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 750, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4BDAFC52-FE6A-11d2-93F8-00105A11164A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03594 456 NtEnumerateKey (350, 749, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name= (350, 749, Node, 288, ... {LastWrite={0x637b3c4e,0x1c73999}, TitleIdx=0, Name="{4BAC124B-78C8-11D1-B9A8-00C04FD97575}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03595 456 NtEnumerateKey (350, 748, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name= (350, 748, Node, 288, ... {LastWrite={0x768482e6,0x1c73999}, TitleIdx=0, Name="{4B657E70-08EF-11D3-9447-00A0C92A2F2D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03596 456 NtEnumerateKey (350, 747, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name= (350, 747, Node, 288, ... {LastWrite={0x6118e24e,0x1c73999}, TitleIdx=0, Name="{4B428940-263C-11D1-A520-000000000000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03597 456 NtEnumerateKey (350, 746, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name= (350, 746, Node, 288, ... {LastWrite={0x21c20954,0x1c73999}, TitleIdx=0, Name="{4B2E958D-0393-11D1-B1AB-00AA00BA3258}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03598 456 NtEnumerateKey (350, 745, Node, 288, ... {LastWrite={0x7536b9ae,0x1c73999}, TitleIdx=0, Name= (350, 745, Node, 288, ... {LastWrite={0x7536b9ae,0x1c73999}, TitleIdx=0, Name="{4B1CFD76-28C6-11D3-A1FF-00C04FA3B60C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03599 456 NtEnumerateKey (350, 744, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 744, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{4AF4A5FC-912A-11D1-B945-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03600 456 NtEnumerateKey (350, 743, Node, 288, ... {LastWrite={0x26655c68,0x1c73999}, TitleIdx=0, Name= (350, 743, Node, 288, ... {LastWrite={0x26655c68,0x1c73999}, TitleIdx=0, Name="{4AF3F4A4-06C8-4B79-A523-633CC65CE297}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03601 456 NtEnumerateKey (350, 742, Node, 288, ... {LastWrite={0x6e193516,0x1c73999}, TitleIdx=0, Name= (350, 742, Node, 288, ... {LastWrite={0x6e193516,0x1c73999}, TitleIdx=0, Name="{4ABF5A06-5568-4834-BEE3-327A6D95A685}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03602 456 NtEnumerateKey (350, 741, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name= (350, 741, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name="{4a7ded0a-ad25-11d0-98a8-0800361b1103}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03603 456 NtEnumerateKey (350, 740, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 740, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{4A2286E0-7BEF-11CE-9BD9-0000E202599C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03604 456 NtEnumerateKey (350, 739, Node, 288, ... {LastWrite={0x748d72b8,0x1c73999}, TitleIdx=0, Name= (350, 739, Node, 288, ... {LastWrite={0x748d72b8,0x1c73999}, TitleIdx=0, Name="{4A16043F-676D-11d2-994E-00C04FA309D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03605 456 NtEnumerateKey (350, 738, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name= (350, 738, Node, 288, ... {LastWrite={0x6e062246,0x1c73999}, TitleIdx=0, Name="{4A03DCB9-6E17-4A39-8845-4EE7DC5331A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03606 456 NtEnumerateKey (350, 737, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name= (350, 737, Node, 288, ... {LastWrite={0x76121206,0x1c73999}, TitleIdx=0, Name="{49FC0185-4B32-11d1-A40E-00600831F336}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03607 456 NtEnumerateKey (350, 736, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 736, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{49c47ce5-9ba4-11d0-8212-00c04fc32c45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03608 456 NtEnumerateKey (350, 735, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 735, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{49C47CE4-9BA4-11D0-8212-00C04FC32C45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03609 456 NtEnumerateKey (350, 734, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name= (350, 734, Node, 288, ... {LastWrite={0x60e93346,0x1c73999}, TitleIdx=0, Name="{49c47ce0-9ba4-11d0-8212-00c04fc32c45}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03610 456 NtEnumerateKey (350, 733, Node, 288, ... {LastWrite={0x256b057e,0x1c73999}, TitleIdx=0, Name= (350, 733, Node, 288, ... {LastWrite={0x256b057e,0x1c73999}, TitleIdx=0, Name="{49BD2028-1523-11D1-AD79-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03611 456 NtEnumerateKey (350, 732, Node, 288, ... {LastWrite={0x60509cc6,0x1c73999}, TitleIdx=0, Name= (350, 732, Node, 288, ... {LastWrite={0x60509cc6,0x1c73999}, TitleIdx=0, Name="{49B2791A-B1AE-4C90-9B8E-E860BA07F889}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03612 456 NtEnumerateKey (350, 731, Node, 288, ... {LastWrite={0x596c509e,0x1c73999}, TitleIdx=0, Name= (350, 731, Node, 288, ... {LastWrite={0x596c509e,0x1c73999}, TitleIdx=0, Name="{4991d34b-80a1-4291-83b6-3328366b9097}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03613 456 NtEnumerateKey (350, 730, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name= (350, 730, Node, 288, ... {LastWrite={0x60f51f08,0x1c73999}, TitleIdx=0, Name="{498B0949-BBE9-4072-98BE-6CCAEB79DC6F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03614 456 NtEnumerateKey (350, 729, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name= (350, 729, Node, 288, ... {LastWrite={0x7261eece,0x1c73999}, TitleIdx=0, Name="{4955DD33-B159-11D0-8FCF-00AA006BCC59}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03615 456 NtEnumerateKey (350, 728, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 728, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{48e7caab-b918-4e58-a94d-505519c795dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03616 456 NtEnumerateKey (350, 727, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name= (350, 727, Node, 288, ... {LastWrite={0x7686e540,0x1c73999}, TitleIdx=0, Name="{48501FF0-F6A9-11D2-9435-00A0C92A2F2D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03617 456 NtEnumerateKey (350, 726, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name= (350, 726, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name="{48123bc4-99d9-11d1-a6b3-00c04fd91555}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03618 456 NtEnumerateKey (350, 725, Node, 288, ... {LastWrite={0x6bc52932,0x1c73999}, TitleIdx=0, Name= (350, 725, Node, 288, ... {LastWrite={0x6bc52932,0x1c73999}, TitleIdx=0, Name="{480FF4B0-28B2-11D1-BEF7-00C04FBF8FEF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03619 456 NtEnumerateKey (350, 724, Node, 288, ... {LastWrite={0x616eb6f6,0x1c73999}, TitleIdx=0, Name= (350, 724, Node, 288, ... {LastWrite={0x616eb6f6,0x1c73999}, TitleIdx=0, Name="{480D5CA0-F032-11CF-A7D3-00A0C9056683}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03620 456 NtEnumerateKey (350, 723, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 723, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{48025243-2D39-11CE-875D-00608CB78066}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03621 456 NtEnumerateKey (350, 722, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name= (350, 722, Node, 288, ... {LastWrite={0x250ba76e,0x1c73999}, TitleIdx=0, Name="{47F410B9-5FA5-11D1-B647-00C04FA3C554}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03622 456 NtEnumerateKey (350, 721, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name= (350, 721, Node, 288, ... {LastWrite={0x26229a90,0x1c73999}, TitleIdx=0, Name="{47DFBE54-CF76-11D3-B38F-00105A1F473A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03623 456 NtEnumerateKey (350, 720, Node, 288, ... {LastWrite={0x76789724,0x1c73999}, TitleIdx=0, Name= (350, 720, Node, 288, ... {LastWrite={0x76789724,0x1c73999}, TitleIdx=0, Name="{47DEA830-D619-4154-B8D8-6B74845D6A2D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03624 456 NtEnumerateKey (350, 719, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 719, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{47D4D946-62E8-11cf-93BC-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03625 456 NtEnumerateKey (350, 718, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 718, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{47C6C527-6204-4F91-849D-66E234DEE015}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03626 456 NtEnumerateKey (350, 717, Node, 288, ... {LastWrite={0x57ae78e0,0x1c73999}, TitleIdx=0, Name= (350, 717, Node, 288, ... {LastWrite={0x57ae78e0,0x1c73999}, TitleIdx=0, Name="{47B0DFC7-B7A3-11D1-ADC5-006008A5848C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03627 456 NtEnumerateKey (350, 716, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 716, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{47A39F38-7F0F-4CE0-B788-D76B39FD6A4F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03628 456 NtEnumerateKey (350, 715, Node, 288, ... {LastWrite={0x6301a460,0x1c73999}, TitleIdx=0, Name= (350, 715, Node, 288, ... {LastWrite={0x6301a460,0x1c73999}, TitleIdx=0, Name="{476C391C-3E0D-11D2-B948-00C04FA32195}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03629 456 NtEnumerateKey (350, 714, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 714, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4753da60-5b71-11cf-b035-00aa006e0975}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03630 456 NtEnumerateKey (350, 713, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 713, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{473AA80B-4577-11D1-81A8-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03631 456 NtEnumerateKey (350, 712, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 712, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{47206204-5ECA-11D2-960F-00C04F8EE628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03632 456 NtEnumerateKey (350, 711, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name= (350, 711, Node, 288, ... {LastWrite={0x62a24650,0x1c73999}, TitleIdx=0, Name="{46C166AA-3108-11D4-9348-00C04F8EEB71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03633 456 NtEnumerateKey (350, 710, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name= (350, 710, Node, 288, ... {LastWrite={0x76658454,0x1c73999}, TitleIdx=0, Name="{46B9A41C-67A7-491c-BCA3-27BBAAFC7DDF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03634 456 NtEnumerateKey (350, 709, Node, 288, ... {LastWrite={0x59af1276,0x1c73999}, TitleIdx=0, Name= (350, 709, Node, 288, ... {LastWrite={0x59af1276,0x1c73999}, TitleIdx=0, Name="{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03635 456 NtEnumerateKey (350, 708, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name= (350, 708, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name="{466D66FA-9616-11D2-9342-0000F875AE17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03636 456 NtEnumerateKey (350, 707, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 707, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAB0-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03637 456 NtEnumerateKey (350, 706, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name= (350, 706, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name="{4662DAB0-D393-11D0-9A56-00C04FB68B66}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03638 456 NtEnumerateKey (350, 705, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 705, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAAF-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03639 456 NtEnumerateKey (350, 704, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 704, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAAE-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03640 456 NtEnumerateKey (350, 703, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name= (350, 703, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name="{4662DAAD-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03641 456 NtEnumerateKey (350, 702, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 702, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAAC-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03642 456 NtEnumerateKey (350, 701, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 701, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAAB-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03643 456 NtEnumerateKey (350, 700, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name= (350, 700, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name="{4662DAAA-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03644 456 NtEnumerateKey (350, 699, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name= (350, 699, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name="{4662DAA9-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03645 456 NtEnumerateKey (350, 698, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name= (350, 698, Node, 288, ... {LastWrite={0x5d796f8c,0x1c73999}, TitleIdx=0, Name="{4662DAA8-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03646 456 NtEnumerateKey (350, 697, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 697, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAA7-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03647 456 NtEnumerateKey (350, 696, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name= (350, 696, Node, 288, ... {LastWrite={0x5d7bd1e6,0x1c73999}, TitleIdx=0, Name="{4662DAA6-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03648 456 NtEnumerateKey (350, 695, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name= (350, 695, Node, 288, ... {LastWrite={0x5d7e3440,0x1c73999}, TitleIdx=0, Name="{4662DAA5-D393-11D0-9A56-00C04FB68BF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03649 456 NtEnumerateKey (350, 694, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name= (350, 694, Node, 288, ... {LastWrite={0x5aba19d6,0x1c73999}, TitleIdx=0, Name="{4657278A-411B-11d2-839A-00C04FD918D0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03650 456 NtEnumerateKey (350, 693, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name= (350, 693, Node, 288, ... {LastWrite={0x55d9b7b6,0x1c799a5}, TitleIdx=0, Name="{462F7758-8848-11D1-ADD8-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03651 456 NtEnumerateKey (350, 692, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 692, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{4622AD11-FF23-11d0-8D34-00A0C90F2719}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03652 456 NtEnumerateKey (350, 691, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 691, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{45FFAAA0-6E1B-11D0-BCF2-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03653 456 NtEnumerateKey (350, 690, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 690, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{4590F812-1D3A-11D0-891F-00AA004B2E24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03654 456 NtEnumerateKey (350, 689, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 689, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{4590F811-1D3A-11D0-891F-00AA004B2E24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03655 456 NtEnumerateKey (350, 688, Node, 288, ... {LastWrite={0x6fb80e42,0x1c73999}, TitleIdx=0, Name= (350, 688, Node, 288, ... {LastWrite={0x6fb80e42,0x1c73999}, TitleIdx=0, Name="{457A23DF-6F2A-4684-91D0-317FB768D87C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03656 456 NtEnumerateKey (350, 687, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 687, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{455F24E9-7396-4A16-9715-7C0FDBE3EFE3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03657 456 NtEnumerateKey (350, 686, Node, 288, ... {LastWrite={0x21224bc6,0x1c73999}, TitleIdx=0, Name= (350, 686, Node, 288, ... {LastWrite={0x21224bc6,0x1c73999}, TitleIdx=0, Name="{455ACF57-5345-11D2-99CF-00C04F797BC9}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 686, Node, 288, ... {LastWrite={0x21224bc6,0x1c73999}, TitleIdx=0, Name="{455ACF57-5345-11D2-99CF-00C04F797BC9}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03658 456 NtEnumerateKey (350, 685, Node, 288, ... {LastWrite={0x627034ee,0x1c73999}, TitleIdx=0, Name= (350, 685, Node, 288, ... {LastWrite={0x627034ee,0x1c73999}, TitleIdx=0, Name="{45234E3E-61CC-4311-A3AB-248082554482}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03659 456 NtEnumerateKey (350, 684, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 684, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4516EC43-8F20-11D0-9B6D-0000C0781BC3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03660 456 NtEnumerateKey (350, 683, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 683, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{4516EC41-8F20-11d0-9B6D-0000C0781BC3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03661 456 NtEnumerateKey (350, 682, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name= (350, 682, Node, 288, ... {LastWrite={0x62ae3212,0x1c73999}, TitleIdx=0, Name="{450D8FBA-AD25-11D0-98A8-0800361B1103}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03662 456 NtEnumerateKey (350, 681, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name= (350, 681, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name="{44F9A03B-A3EC-4F3B-9364-08E0007F21DF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03663 456 NtEnumerateKey (350, 680, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 680, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{44EC053A-400F-11D0-9DCD-00A0C90391D3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03664 456 NtEnumerateKey (350, 679, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 679, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{44A3B142-CF81-42EA-B4D1-F43DD6F64ECE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03665 456 NtEnumerateKey (350, 678, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 678, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{4444AC9E-242E-471B-A3C7-45DCD46352BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03666 456 NtEnumerateKey (350, 677, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name= (350, 677, Node, 288, ... {LastWrite={0x259ab486,0x1c73999}, TitleIdx=0, Name="{443E7B79-DE31-11D2-B340-00104BCC4B4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03667 456 NtEnumerateKey (350, 676, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name= (350, 676, Node, 288, ... {LastWrite={0x5e7fb238,0x1c73999}, TitleIdx=0, Name="{4419DD31-28A5-11d2-AE08-0080C7337EA1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03668 456 NtEnumerateKey (350, 675, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 675, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{4405b37b-60fe-49ed-ba8f-691a78f84daf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03669 456 NtEnumerateKey (350, 674, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 674, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{43F8F289-7A20-11D0-8F06-00C04FC295E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03670 456 NtEnumerateKey (350, 673, Node, 288, ... {LastWrite={0x6f053de4,0x1c73999}, TitleIdx=0, Name= (350, 673, Node, 288, ... {LastWrite={0x6f053de4,0x1c73999}, TitleIdx=0, Name="{43F457D2-C955-48E2-91AD-B91C9154C613}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03671 456 NtEnumerateKey (350, 672, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 672, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{43A8F463-4222-11d2-B641-006097DF5BD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03672 456 NtEnumerateKey (350, 671, Node, 288, ... {LastWrite={0x57b33d94,0x1c73999}, TitleIdx=0, Name= (350, 671, Node, 288, ... {LastWrite={0x57b33d94,0x1c73999}, TitleIdx=0, Name="{438DA5E0-F171-11D0-984E-0000F80270F8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03673 456 NtEnumerateKey (350, 670, Node, 288, ... {LastWrite={0x58a40b16,0x1c73999}, TitleIdx=0, Name= (350, 670, Node, 288, ... {LastWrite={0x58a40b16,0x1c73999}, TitleIdx=0, Name="{438B8ECD-AD2A-11D1-ADEB-0000F87734F0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03674 456 NtEnumerateKey (350, 669, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 669, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{438755C2-A8BA-11D1-B96B-00A0C90312E1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03675 456 NtEnumerateKey (350, 668, Node, 288, ... {LastWrite={0x6395762c,0x1c73999}, TitleIdx=0, Name= (350, 668, Node, 288, ... {LastWrite={0x6395762c,0x1c73999}, TitleIdx=0, Name="{43668E21-2636-11D1-A1CE-0080C88593A5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03676 456 NtEnumerateKey (350, 667, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name= (350, 667, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name="{435899C9-44AB-11D1-AF00-080036234103}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03677 456 NtEnumerateKey (350, 666, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name= (350, 666, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name="{4315D437-5B8C-11D0-BD3B-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03678 456 NtEnumerateKey (350, 665, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name= (350, 665, Node, 288, ... {LastWrite={0x601c290a,0x1c73999}, TitleIdx=0, Name="{43136EB5-D36C-11CF-ADBC-00AA00A80033}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03679 456 NtEnumerateKey (350, 664, Node, 288, ... {LastWrite={0x758c8e56,0x1c73999}, TitleIdx=0, Name= (350, 664, Node, 288, ... {LastWrite={0x758c8e56,0x1c73999}, TitleIdx=0, Name="{42DFB618-A403-4401-908F-FE979B2215C8}REG_SZ", Class="REG_SZ"}, 112, ) , Class= (350, 664, Node, 288, ... {LastWrite={0x758c8e56,0x1c73999}, TitleIdx=0, Name="{42DFB618-A403-4401-908F-FE979B2215C8}REG_SZ", Class="REG_SZ"}, 112, ) }, 112, ) == 0x0 03680 456 NtEnumerateKey (350, 663, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name= (350, 663, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name="{42B07B28-2280-4937-B035-0293FB812781}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03681 456 NtEnumerateKey (350, 662, Node, 288, ... {LastWrite={0x5ba15df0,0x1c73999}, TitleIdx=0, Name= (350, 662, Node, 288, ... {LastWrite={0x5ba15df0,0x1c73999}, TitleIdx=0, Name="{42aedc87-2188-41fd-b9a3-0c966feabec1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03682 456 NtEnumerateKey (350, 661, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 661, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{429AF92C-A51F-11d2-861E-00C04FA35C89}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03683 456 NtEnumerateKey (350, 660, Node, 288, ... {LastWrite={0x6dfc98de,0x1c73999}, TitleIdx=0, Name= (350, 660, Node, 288, ... {LastWrite={0x6dfc98de,0x1c73999}, TitleIdx=0, Name="{424B71AF-0695-11D2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03684 456 NtEnumerateKey (350, 659, Node, 288, ... {LastWrite={0x6e0ae6fa,0x1c73999}, TitleIdx=0, Name= (350, 659, Node, 288, ... {LastWrite={0x6e0ae6fa,0x1c73999}, TitleIdx=0, Name="{421516C1-3CF8-11D2-952A-00C04FA34F05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03685 456 NtEnumerateKey (350, 658, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 658, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{42071714-76d4-11d1-8b24-00a0c9068ff3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03686 456 NtEnumerateKey (350, 657, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 657, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{42071713-76d4-11d1-8b24-00a0c9068ff3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03687 456 NtEnumerateKey (350, 656, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 656, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{42071712-76d4-11d1-8b24-00a0c9068ff3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03688 456 NtEnumerateKey (350, 655, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 655, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{42044394-8c34-11d1-83bc-00c04fbbc34e}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03689 456 NtEnumerateKey (350, 654, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 654, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{41E300E0-78B6-11ce-849B-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03690 456 NtEnumerateKey (350, 653, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name= (350, 653, Node, 288, ... {LastWrite={0x766a4908,0x1c73999}, TitleIdx=0, Name="{41D57CBB-9DA1-4f33-ACCC-8D7F23102EA6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03691 456 NtEnumerateKey (350, 652, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 652, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{41B89B6B-9399-11D2-9623-00C04F8EE628}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03692 456 NtEnumerateKey (350, 651, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name= (350, 651, Node, 288, ... {LastWrite={0x60b4bf8a,0x1c73999}, TitleIdx=0, Name="{418AFB70-F8B8-11CE-AAC6-0020AF0B99A3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03693 456 NtEnumerateKey (350, 650, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name= (350, 650, Node, 288, ... {LastWrite={0x6ebb54fe,0x1c73999}, TitleIdx=0, Name="{418008F3-CF67-4668-9628-10DC52BE1D08}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03694 456 NtEnumerateKey (350, 649, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name= (350, 649, Node, 288, ... {LastWrite={0x60dae52a,0x1c73999}, TitleIdx=0, Name="{4150F050-BB6F-11D0-AFB9-00AA00B67A42}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03695 456 NtEnumerateKey (350, 648, Node, 288, ... {LastWrite={0x6bc9ede6,0x1c73999}, TitleIdx=0, Name= (350, 648, Node, 288, ... {LastWrite={0x6bc9ede6,0x1c73999}, TitleIdx=0, Name="{4108FA85-3586-11D3-8BD7-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03696 456 NtEnumerateKey (350, 647, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 647, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{410381DB-AF42-11D1-8F10-00C04FC2C17B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03697 456 NtEnumerateKey (350, 646, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 646, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{40dd6e20-7c17-11ce-a804-00aa003ca9f6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03698 456 NtEnumerateKey (350, 645, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name= (350, 645, Node, 288, ... {LastWrite={0x5b3d3b2c,0x1c73999}, TitleIdx=0, Name="{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03699 456 NtEnumerateKey (350, 644, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name= (350, 644, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name="{40B66661-4972-11D1-A7CA-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03700 456 NtEnumerateKey (350, 643, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name= (350, 643, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name="{40B66660-4972-11D1-A7CA-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03701 456 NtEnumerateKey (350, 642, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name= (350, 642, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name="{40B66650-4972-11D1-A7CA-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03702 456 NtEnumerateKey (350, 641, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name= (350, 641, Node, 288, ... {LastWrite={0x6047135e,0x1c73999}, TitleIdx=0, Name="{40B6664F-4972-11D1-A7CA-0000F87571E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03703 456 NtEnumerateKey (350, 640, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name= (350, 640, Node, 288, ... {LastWrite={0x6bcc5040,0x1c73999}, TitleIdx=0, Name="{4062C116-0270-11D3-8BCB-00600893B1B6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03704 456 NtEnumerateKey (350, 639, Node, 288, ... {LastWrite={0x260ac30c,0x1c73999}, TitleIdx=0, Name= (350, 639, Node, 288, ... {LastWrite={0x260ac30c,0x1c73999}, TitleIdx=0, Name="{405595AB-1E14-11D3-B33D-00105A1F4AAF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03705 456 NtEnumerateKey (350, 638, Node, 288, ... {LastWrite={0x260ac30c,0x1c73999}, TitleIdx=0, Name= (350, 638, Node, 288, ... {LastWrite={0x260ac30c,0x1c73999}, TitleIdx=0, Name="{405595AA-1E14-11D3-B33D-00105A1F4AAF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03706 456 NtEnumerateKey (350, 637, Node, 288, ... {LastWrite={0x613ca594,0x1c73999}, TitleIdx=0, Name= (350, 637, Node, 288, ... {LastWrite={0x613ca594,0x1c73999}, TitleIdx=0, Name="{4009F700-AEBA-11D1-8344-00C04FB92EB7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03707 456 NtEnumerateKey (350, 636, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name= (350, 636, Node, 288, ... {LastWrite={0x766cab62,0x1c73999}, TitleIdx=0, Name="{4003191F-71FF-49A2-B591-05C606FADB8B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03708 456 NtEnumerateKey (350, 635, Node, 288, ... {LastWrite={0x57fac420,0x1c73999}, TitleIdx=0, Name= (350, 635, Node, 288, ... {LastWrite={0x57fac420,0x1c73999}, TitleIdx=0, Name="{3FF292B6-B204-11CF-8D23-00AA005FFE58}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03709 456 NtEnumerateKey (350, 634, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name= (350, 634, Node, 288, ... {LastWrite={0x60d3be1c,0x1c73999}, TitleIdx=0, Name="{3FF23902-CD1F-11D2-8853-0000F80883E3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03710 456 NtEnumerateKey (350, 633, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name= (350, 633, Node, 288, ... {LastWrite={0x5ab7b77c,0x1c73999}, TitleIdx=0, Name="{3FC0B520-68A9-11D0-8D77-00C04FD70822}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03711 456 NtEnumerateKey (350, 632, Node, 288, ... {LastWrite={0xaea63908,0x1c738c7}, TitleIdx=0, Name= (350, 632, Node, 288, ... {LastWrite={0xaea63908,0x1c738c7}, TitleIdx=0, Name="{3F953603-1008-4f6e-A73A-04AAC7A992F1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03712 456 NtEnumerateKey (350, 631, Node, 288, ... {LastWrite={0x6dfa3684,0x1c73999}, TitleIdx=0, Name= (350, 631, Node, 288, ... {LastWrite={0x6dfa3684,0x1c73999}, TitleIdx=0, Name="{3F69F351-0379-11D2-A484-00C04F8EFB69}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03713 456 NtEnumerateKey (350, 630, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name= (350, 630, Node, 288, ... {LastWrite={0x5ab55522,0x1c73999}, TitleIdx=0, Name="{3F6953F0-5359-47FC-BD99-9F2CB95A62FD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03714 456 NtEnumerateKey (350, 629, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 629, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{3F4EEF80-BFE8-11d0-A3A5-00C04FD706EC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03715 456 NtEnumerateKey (350, 628, Node, 288, ... {LastWrite={0x5fd4a27e,0x1c73999}, TitleIdx=0, Name= (350, 628, Node, 288, ... {LastWrite={0x5fd4a27e,0x1c73999}, TitleIdx=0, Name="{3F4DACA4-160D-11D2-A8E9-00104B365C9F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03716 456 NtEnumerateKey (350, 627, Node, 288, ... {LastWrite={0x5aabcbba,0x1c73999}, TitleIdx=0, Name= (350, 627, Node, 288, ... {LastWrite={0x5aabcbba,0x1c73999}, TitleIdx=0, Name="{3f454f0e-42ae-4d7c-8ea3-328250d6e272}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03717 456 NtEnumerateKey (350, 626, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 626, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{3F35F070-99D6-11D2-8D10-00A0C9441E20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03718 456 NtEnumerateKey (350, 625, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name= (350, 625, Node, 288, ... {LastWrite={0x5de4b95e,0x1c73999}, TitleIdx=0, Name="{3F30C968-480A-4C6C-862D-EFC0897BB84B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03719 456 NtEnumerateKey (350, 624, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name= (350, 624, Node, 288, ... {LastWrite={0x6d04a44e,0x1c73999}, TitleIdx=0, Name="{3F276EB4-70EE-11D1-8A0F-00C04FB93753}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03720 456 NtEnumerateKey (350, 623, Node, 288, ... {LastWrite={0x6bb6db16,0x1c73999}, TitleIdx=0, Name= (350, 623, Node, 288, ... {LastWrite={0x6bb6db16,0x1c73999}, TitleIdx=0, Name="{3F037241-414E-11D1-A7CE-00A0C913F73C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03721 456 NtEnumerateKey (350, 622, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 622, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3EA48300-8CF6-101B-84FB-666CCB9BCD32}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03722 456 NtEnumerateKey (350, 621, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name= (350, 621, Node, 288, ... {LastWrite={0x58e6ccee,0x1c73999}, TitleIdx=0, Name="{3E9BAF2D-7A79-11d2-9334-0000F875AE17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03723 456 NtEnumerateKey (350, 620, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name= (350, 620, Node, 288, ... {LastWrite={0x6b898e68,0x1c73999}, TitleIdx=0, Name="{3E873CB7-D5F5-43EF-AC4A-1F97D3118265}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03724 456 NtEnumerateKey (350, 619, Node, 288, ... {LastWrite={0x5f8f7e4c,0x1c73999}, TitleIdx=0, Name= (350, 619, Node, 288, ... {LastWrite={0x5f8f7e4c,0x1c73999}, TitleIdx=0, Name="{3e784a01-f3ae-4dc0-9354-9526b9370eba}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03725 456 NtEnumerateKey (350, 618, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name= (350, 618, Node, 288, ... {LastWrite={0x6de4c15a,0x1c73999}, TitleIdx=0, Name="{3E669F1D-9C23-11d1-9053-00C04FD9189D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03726 456 NtEnumerateKey (350, 617, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name= (350, 617, Node, 288, ... {LastWrite={0x62bee288,0x1c73999}, TitleIdx=0, Name="{3E4D4F1C-2AEE-11D1-9D3D-00C04FC30DF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03727 456 NtEnumerateKey (350, 616, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name= (350, 616, Node, 288, ... {LastWrite={0x25a1db94,0x1c73999}, TitleIdx=0, Name="{3DD82D10-E6F1-11D2-B139-00105A1F77A1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03728 456 NtEnumerateKey (350, 615, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 615, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{3dd53d40-7b8b-11D0-b013-00aa0059ce02}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03729 456 NtEnumerateKey (350, 614, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 614, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{3DCD2BC5-8489-48AE-891F-90C8B2F19F56}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03730 456 NtEnumerateKey (350, 613, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name= (350, 613, Node, 288, ... {LastWrite={0x5b9a36e2,0x1c73999}, TitleIdx=0, Name="{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03731 456 NtEnumerateKey (350, 612, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name= (350, 612, Node, 288, ... {LastWrite={0x5b314f6a,0x1c73999}, TitleIdx=0, Name="{3DAB30ED-8132-40bf-A8BA-7B5057F0CD10}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03732 456 NtEnumerateKey (350, 611, Node, 288, ... {LastWrite={0x7616d6ba,0x1c73999}, TitleIdx=0, Name= (350, 611, Node, 288, ... {LastWrite={0x7616d6ba,0x1c73999}, TitleIdx=0, Name="{3DA2AA3E-3D96-11D2-9BD2-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03733 456 NtEnumerateKey (350, 610, Node, 288, ... {LastWrite={0x76147460,0x1c73999}, TitleIdx=0, Name= (350, 610, Node, 288, ... {LastWrite={0x76147460,0x1c73999}, TitleIdx=0, Name="{3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03734 456 NtEnumerateKey (350, 609, Node, 288, ... {LastWrite={0x610cf68c,0x1c73999}, TitleIdx=0, Name= (350, 609, Node, 288, ... {LastWrite={0x610cf68c,0x1c73999}, TitleIdx=0, Name="{3DA165B6-CC41-11d2-BDC6-00C04F79EC6B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03735 456 NtEnumerateKey (350, 608, Node, 288, ... {LastWrite={0x5e8b239e,0x1c78529}, TitleIdx=0, Name= (350, 608, Node, 288, ... {LastWrite={0x5e8b239e,0x1c78529}, TitleIdx=0, Name="{3D85851B-40FE-4472-9722-6F69B5517476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03736 456 NtEnumerateKey (350, 607, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 607, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{3d813dfe-6c91-4a4e-8f41-04346a841d9c}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03737 456 NtEnumerateKey (350, 606, Node, 288, ... {LastWrite={0x63c06080,0x1c73999}, TitleIdx=0, Name= (350, 606, Node, 288, ... {LastWrite={0x63c06080,0x1c73999}, TitleIdx=0, Name="{3D112E22-62B2-11D1-9FEF-00600832DB4A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03738 456 NtEnumerateKey (350, 605, Node, 288, ... {LastWrite={0x6f1129a6,0x1c73999}, TitleIdx=0, Name= (350, 605, Node, 288, ... {LastWrite={0x6f1129a6,0x1c73999}, TitleIdx=0, Name="{3CFC7A68-76E9-4F1D-8ECE-08C44F4FFC3E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03739 456 NtEnumerateKey (350, 604, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 604, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3CE74DE4-53D3-4D74-8B83-431B3828BA53}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03740 456 NtEnumerateKey (350, 603, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name= (350, 603, Node, 288, ... {LastWrite={0x5b6360cc,0x1c73999}, TitleIdx=0, Name="{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03741 456 NtEnumerateKey (350, 602, Node, 288, ... {LastWrite={0x71e856e0,0x1c73999}, TitleIdx=0, Name= (350, 602, Node, 288, ... {LastWrite={0x71e856e0,0x1c73999}, TitleIdx=0, Name="{3CB6973D-3E6F-11D0-95DB-00A024D77700}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03742 456 NtEnumerateKey (350, 601, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name= (350, 601, Node, 288, ... {LastWrite={0x6025b272,0x1c73999}, TitleIdx=0, Name="{3C5F432A-EF40-4669-9974-9671D4FC2E12}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03743 456 NtEnumerateKey (350, 600, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name= (350, 600, Node, 288, ... {LastWrite={0x5b95722e,0x1c73999}, TitleIdx=0, Name="{3C374A40-BAE4-11CF-BF7D-00AA006946EE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03744 456 NtEnumerateKey (350, 599, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 599, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3C305196-50DB-11D3-9CFE-00C04FD930C5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03745 456 NtEnumerateKey (350, 598, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 598, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3BEE4890-4FE9-4A37-8C1E-5E7E12791C1F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03746 456 NtEnumerateKey (350, 597, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name= (350, 597, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name="{3BC4F3A7-652A-11D1-B4D4-00C04FC2DB8D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03747 456 NtEnumerateKey (350, 596, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name= (350, 596, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name="{3BC4F3A3-652A-11D1-B4D4-00C04FC2DB8D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03748 456 NtEnumerateKey (350, 595, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name= (350, 595, Node, 288, ... {LastWrite={0x253b5676,0x1c73999}, TitleIdx=0, Name="{3BC4F3A1-652A-11D1-B4D4-00C04FC2DB8D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03749 456 NtEnumerateKey (350, 594, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 594, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95FE-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03750 456 NtEnumerateKey (350, 593, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 593, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95FB-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03751 456 NtEnumerateKey (350, 592, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 592, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95F5-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03752 456 NtEnumerateKey (350, 591, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 591, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95DF-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03753 456 NtEnumerateKey (350, 590, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 590, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95DA-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03754 456 NtEnumerateKey (350, 589, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 589, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95D0-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03755 456 NtEnumerateKey (350, 588, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name= (350, 588, Node, 288, ... {LastWrite={0x1fec5a12,0x1c73999}, TitleIdx=0, Name="{3BBE95A4-C53F-11d1-B3A2-00A0C9083365}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03756 456 NtEnumerateKey (350, 587, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name= (350, 587, Node, 288, ... {LastWrite={0x5abede8a,0x1c73999}, TitleIdx=0, Name="{3bb4118f-ddfd-4d30-a348-9fb5d6bf1afe}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03757 456 NtEnumerateKey (350, 586, Node, 288, ... {LastWrite={0x72e2adca,0x1c73999}, TitleIdx=0, Name= (350, 586, Node, 288, ... {LastWrite={0x72e2adca,0x1c73999}, TitleIdx=0, Name="{3B2B6775-70B6-45AF-8DEA-A209C69559F3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03758 456 NtEnumerateKey (350, 585, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name= (350, 585, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name="{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03759 456 NtEnumerateKey (350, 584, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 584, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3A410F21-553F-11d1-8E5E-00A0C92C9D5D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03760 456 NtEnumerateKey (350, 583, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name= (350, 583, Node, 288, ... {LastWrite={0x6e120e08,0x1c73999}, TitleIdx=0, Name="{3A04D93B-1EDD-4f3f-A375-A03EC19572C4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03761 456 NtEnumerateKey (350, 582, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name= (350, 582, Node, 288, ... {LastWrite={0x20174466,0x1c73999}, TitleIdx=0, Name="{39F8D76B-0928-11D1-97DF-00C04FB9618A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03762 456 NtEnumerateKey (350, 581, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 581, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{39CE96FE-F4C5-4484-A143-4C2D5D324229}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03763 456 NtEnumerateKey (350, 580, Node, 288, ... {LastWrite={0x7568cb10,0x1c73999}, TitleIdx=0, Name= (350, 580, Node, 288, ... {LastWrite={0x7568cb10,0x1c73999}, TitleIdx=0, Name="{39AAF450-1256-11d3-869A-00C04F6890ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03764 456 NtEnumerateKey (350, 579, Node, 288, ... {LastWrite={0x756668b6,0x1c73999}, TitleIdx=0, Name= (350, 579, Node, 288, ... {LastWrite={0x756668b6,0x1c73999}, TitleIdx=0, Name="{39AAF44E-1256-11d3-869A-00C04F6890ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03765 456 NtEnumerateKey (350, 578, Node, 288, ... {LastWrite={0x761b9b6e,0x1c73999}, TitleIdx=0, Name= (350, 578, Node, 288, ... {LastWrite={0x761b9b6e,0x1c73999}, TitleIdx=0, Name="{39A2C2A9-4778-11D2-9BDB-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03766 456 NtEnumerateKey (350, 577, Node, 288, ... {LastWrite={0x76193914,0x1c73999}, TitleIdx=0, Name= (350, 577, Node, 288, ... {LastWrite={0x76193914,0x1c73999}, TitleIdx=0, Name="{39A2C2A6-4778-11D2-9BDB-204C4F4F5020}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03767 456 NtEnumerateKey (350, 576, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name= (350, 576, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name="{39981129-C287-11D0-8D8C-00C04FD6202B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03768 456 NtEnumerateKey (350, 575, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name= (350, 575, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name="{39981127-C287-11D0-8D8C-00C04FD6202B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03769 456 NtEnumerateKey (350, 574, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name= (350, 574, Node, 288, ... {LastWrite={0x74f8bc8a,0x1c73999}, TitleIdx=0, Name="{39981125-C287-11D0-8D8C-00C04FD6202B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03770 456 NtEnumerateKey (350, 573, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name= (350, 573, Node, 288, ... {LastWrite={0x91751ca2,0x1c7399c}, TitleIdx=0, Name="{397B7403-5F41-11d3-B159-00C04F79FAA6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03771 456 NtEnumerateKey (350, 572, Node, 288, ... {LastWrite={0x5dca7f80,0x1c73999}, TitleIdx=0, Name= (350, 572, Node, 288, ... {LastWrite={0x5dca7f80,0x1c73999}, TitleIdx=0, Name="{3964D9A0-AC96-11D1-9851-00C04FD91972}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03772 456 NtEnumerateKey (350, 571, Node, 288, ... {LastWrite={0x76ed6a5e,0x1c73999}, TitleIdx=0, Name= (350, 571, Node, 288, ... {LastWrite={0x76ed6a5e,0x1c73999}, TitleIdx=0, Name="{395BF287-6477-495f-8427-2C09A23C3248}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03773 456 NtEnumerateKey (350, 570, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name= (350, 570, Node, 288, ... {LastWrite={0x7314bf2c,0x1c73999}, TitleIdx=0, Name="{39524FB7-028F-4035-8C2B-8E65D2B17E67}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03774 456 NtEnumerateKey (350, 569, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name= (350, 569, Node, 288, ... {LastWrite={0x606ad6a4,0x1c73999}, TitleIdx=0, Name="{394C052E-B830-11D0-9A86-00C04FD8DBF7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03775 456 NtEnumerateKey (350, 568, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name= (350, 568, Node, 288, ... {LastWrite={0x60103d48,0x1c73999}, TitleIdx=0, Name="{3934F889-5D77-4540-80B9-EB5C6D297A33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03776 456 NtEnumerateKey (350, 567, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 567, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3918D75F-0ACB-41F2-B733-92AA15BCECF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03777 456 NtEnumerateKey (350, 566, Node, 288, ... {LastWrite={0x6fc8beb8,0x1c73999}, TitleIdx=0, Name= (350, 566, Node, 288, ... {LastWrite={0x6fc8beb8,0x1c73999}, TitleIdx=0, Name="{3908C3CD-4478-4536-AF2F-10C25D4EF89A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03778 456 NtEnumerateKey (350, 565, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 565, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{3901CC3F-84B5-4FA4-BA35-AA8172B8A09B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03779 456 NtEnumerateKey (350, 564, Node, 288, ... {LastWrite={0x6ee8a1ac,0x1c73999}, TitleIdx=0, Name= (350, 564, Node, 288, ... {LastWrite={0x6ee8a1ac,0x1c73999}, TitleIdx=0, Name="{38EE5CEE-4B62-11D3-854F-00A0C9C898E7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03780 456 NtEnumerateKey (350, 563, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name= (350, 563, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name="{38BE3002-DBF4-11D0-860E-00A024CFEF6D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03781 456 NtEnumerateKey (350, 562, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name= (350, 562, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name="{38BE3001-DBF4-11D0-860E-00A024CFEF6D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03782 456 NtEnumerateKey (350, 561, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name= (350, 561, Node, 288, ... {LastWrite={0x6143cca2,0x1c73999}, TitleIdx=0, Name="{38BE3000-DBF4-11D0-860E-00A024CFEF6D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03783 456 NtEnumerateKey (350, 560, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name= (350, 560, Node, 288, ... {LastWrite={0x6de723b4,0x1c73999}, TitleIdx=0, Name="{385A91BC-1E8A-4e4a-A7A6-F4FC1E6CA1BD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03784 456 NtEnumerateKey (350, 559, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name= (350, 559, Node, 288, ... {LastWrite={0x6323054c,0x1c73999}, TitleIdx=0, Name="{3845A174-EB30-11D1-9A23-00A0C879FE5F}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03785 456 NtEnumerateKey (350, 558, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name= (350, 558, Node, 288, ... {LastWrite={0x2a5f8a50,0x1c7852f}, TitleIdx=0, Name="{3831331E-0D11-4716-871D-68F3B11D23C9}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03786 456 NtEnumerateKey (350, 557, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name= (350, 557, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name="{37E92A92-D9AA-11D2-BF84-8EF2B1555AED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03787 456 NtEnumerateKey (350, 556, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name= (350, 556, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name="{37B03544-A4C8-11D2-B634-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03788 456 NtEnumerateKey (350, 555, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name= (350, 555, Node, 288, ... {LastWrite={0x6ea11b20,0x1c73999}, TitleIdx=0, Name="{37B03543-A4C8-11D2-B634-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03789 456 NtEnumerateKey (350, 554, Node, 288, ... {LastWrite={0x6ea37d7a,0x1c73999}, TitleIdx=0, Name= (350, 554, Node, 288, ... {LastWrite={0x6ea37d7a,0x1c73999}, TitleIdx=0, Name="{37B0353C-A4C8-11D2-B634-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03790 456 NtEnumerateKey (350, 553, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name= (350, 553, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name="{379E501F-B231-11d1-ADC1-00805FC752D8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03791 456 NtEnumerateKey (350, 552, Node, 288, ... {LastWrite={0x750e31b4,0x1c73999}, TitleIdx=0, Name= (350, 552, Node, 288, ... {LastWrite={0x750e31b4,0x1c73999}, TitleIdx=0, Name="{37536094-0A44-11d3-854B-004005506310}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03792 456 NtEnumerateKey (350, 551, Node, 288, ... {LastWrite={0x5f6bbb06,0x1c73999}, TitleIdx=0, Name= (350, 551, Node, 288, ... {LastWrite={0x5f6bbb06,0x1c73999}, TitleIdx=0, Name="{373984C9-B845-449B-91E7-45AC83036ADE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03793 456 NtEnumerateKey (350, 550, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name= (350, 550, Node, 288, ... {LastWrite={0x63d37350,0x1c73999}, TitleIdx=0, Name="{372FCE38-4324-11D0-8810-00A0C903B83C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03794 456 NtEnumerateKey (350, 549, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name= (350, 549, Node, 288, ... {LastWrite={0x55dc1a10,0x1c799a5}, TitleIdx=0, Name="{3724B9A1-9503-11D1-B86A-00A0C90DC849}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03795 456 NtEnumerateKey (350, 548, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name= (350, 548, Node, 288, ... {LastWrite={0x2531cd0e,0x1c73999}, TitleIdx=0, Name="{369647e0-17b0-11ce-9950-00aa004bbb1f}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03796 456 NtEnumerateKey (350, 547, Node, 288, ... {LastWrite={0x630d9022,0x1c73999}, TitleIdx=0, Name= (350, 547, Node, 288, ... {LastWrite={0x630d9022,0x1c73999}, TitleIdx=0, Name="{369303C2-D7AC-11D0-89D5-00A0C90833E6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03797 456 NtEnumerateKey (350, 546, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 546, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{364D8E0B-67CB-4547-9948-9E7F1B1743ED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03798 456 NtEnumerateKey (350, 545, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name= (350, 545, Node, 288, ... {LastWrite={0x25401b2a,0x1c73999}, TitleIdx=0, Name="{363F1015-FD5F-4ba8-AC58-29634F378A42}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03799 456 NtEnumerateKey (350, 544, Node, 288, ... {LastWrite={0x6e4b4678,0x1c73999}, TitleIdx=0, Name= (350, 544, Node, 288, ... {LastWrite={0x6e4b4678,0x1c73999}, TitleIdx=0, Name="{35CEC8A3-2BE6-11D2-8773-92E220524153}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03800 456 NtEnumerateKey (350, 543, Node, 288, ... {LastWrite={0x2673aa84,0x1c73999}, TitleIdx=0, Name= (350, 543, Node, 288, ... {LastWrite={0x2673aa84,0x1c73999}, TitleIdx=0, Name="{35B78F79-B973-48C8-A045-CAEC732A35D5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03801 456 NtEnumerateKey (350, 542, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name= (350, 542, Node, 288, ... {LastWrite={0x74995e7a,0x1c73999}, TitleIdx=0, Name="{35461E30-C488-11d1-960E-00C04FBD7C09}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03802 456 NtEnumerateKey (350, 541, Node, 288, ... {LastWrite={0x5dcce1da,0x1c73999}, TitleIdx=0, Name= (350, 541, Node, 288, ... {LastWrite={0x5dcce1da,0x1c73999}, TitleIdx=0, Name="{352EC2B7-8B9A-11D1-B8AE-006008059382}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03803 456 NtEnumerateKey (350, 540, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 540, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03804 456 NtEnumerateKey (350, 539, Node, 288, ... {LastWrite={0x58176058,0x1c73999}, TitleIdx=0, Name= (350, 539, Node, 288, ... {LastWrite={0x58176058,0x1c73999}, TitleIdx=0, Name="{3449A1C8-C56C-11D0-AD72-00C04FC29863}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03805 456 NtEnumerateKey (350, 538, Node, 288, ... {LastWrite={0x6301a460,0x1c73999}, TitleIdx=0, Name= (350, 538, Node, 288, ... {LastWrite={0x6301a460,0x1c73999}, TitleIdx=0, Name="{33FDA1EA-80DF-11D2-B263-00A0C90D6111}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03806 456 NtEnumerateKey (350, 537, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 537, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{33FACFE0-A9BE-11D0-A520-00A0D10129C0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03807 456 NtEnumerateKey (350, 536, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 536, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{33de48c4-943f-4b96-8cd8-b117c94576cf}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03808 456 NtEnumerateKey (350, 535, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name= (350, 535, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name="{33D9A762-90C8-11d0-BD43-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03809 456 NtEnumerateKey (350, 534, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name= (350, 534, Node, 288, ... {LastWrite={0x60a8d3c8,0x1c73999}, TitleIdx=0, Name="{33D9A761-90C8-11d0-BD43-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03810 456 NtEnumerateKey (350, 533, Node, 288, ... {LastWrite={0x60cef968,0x1c73999}, TitleIdx=0, Name= (350, 533, Node, 288, ... {LastWrite={0x60cef968,0x1c73999}, TitleIdx=0, Name="{33D9A760-90C8-11d0-BD43-00A0C911CE86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03811 456 NtEnumerateKey (350, 532, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 532, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{33C53A50-F456-4884-B049-85FD643ECFED}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03812 456 NtEnumerateKey (350, 531, Node, 288, ... {LastWrite={0x25ab64fc,0x1c73999}, TitleIdx=0, Name= (350, 531, Node, 288, ... {LastWrite={0x25ab64fc,0x1c73999}, TitleIdx=0, Name="{33831ED4-42B8-11D2-93AD-00805F853771}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03813 456 NtEnumerateKey (350, 530, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name= (350, 530, Node, 288, ... {LastWrite={0x60b721e4,0x1c73999}, TitleIdx=0, Name="{336475D0-942A-11CE-A870-00AA002FEAB5}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03814 456 NtEnumerateKey (350, 529, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 529, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{334857cc-f934-11d2-ba96-00c04fb6d0d1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03815 456 NtEnumerateKey (350, 528, Node, 288, ... {LastWrite={0x6ea5dfd4,0x1c73999}, TitleIdx=0, Name= (350, 528, Node, 288, ... {LastWrite={0x6ea5dfd4,0x1c73999}, TitleIdx=0, Name="{334125C0-77E5-11D3-B653-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03816 456 NtEnumerateKey (350, 527, Node, 288, ... {LastWrite={0x609f4a60,0x1c73999}, TitleIdx=0, Name= (350, 527, Node, 288, ... {LastWrite={0x609f4a60,0x1c73999}, TitleIdx=0, Name="{333C7BC4-460F-11D0-BC04-0080C7055A83}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03817 456 NtEnumerateKey (350, 526, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name= (350, 526, Node, 288, ... {LastWrite={0x5cb85112,0x1c73999}, TitleIdx=0, Name="{332B2A56-F86C-47E7-8602-FC42AC8B9920}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03818 456 NtEnumerateKey (350, 525, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name= (350, 525, Node, 288, ... {LastWrite={0x74fb1ee4,0x1c73999}, TitleIdx=0, Name="{33102459-4B30-11d2-A6DC-00C04F79E7C8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03819 456 NtEnumerateKey (350, 524, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name= (350, 524, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name="{3301A7C5-0A8D-11D4-914D-00C04F610D24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03820 456 NtEnumerateKey (350, 523, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name= (350, 523, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name="{3301A7C4-0A8D-11D4-914D-00C04F610D24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03821 456 NtEnumerateKey (350, 522, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name= (350, 522, Node, 288, ... {LastWrite={0x75a465da,0x1c73999}, TitleIdx=0, Name="{3301A7C2-0A8D-11D4-914D-00C04F610D24}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03822 456 NtEnumerateKey (350, 521, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name= (350, 521, Node, 288, ... {LastWrite={0x5fe08e40,0x1c73999}, TitleIdx=0, Name="{32DA2B15-CFED-11D1-B747-00C04FC2B085}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03823 456 NtEnumerateKey (350, 520, Node, 288, ... {LastWrite={0x75404316,0x1c73999}, TitleIdx=0, Name= (350, 520, Node, 288, ... {LastWrite={0x75404316,0x1c73999}, TitleIdx=0, Name="{32BAED44-34B5-11D3-9315-00C04F72D6CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03824 456 NtEnumerateKey (350, 519, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name= (350, 519, Node, 288, ... {LastWrite={0x5ccb63e2,0x1c73999}, TitleIdx=0, Name="{32B533BB-EDAE-11d0-BD5A-00AA00B92AF1}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03825 456 NtEnumerateKey (350, 518, Node, 288, ... {LastWrite={0x74f1957c,0x1c73999}, TitleIdx=0, Name= (350, 518, Node, 288, ... {LastWrite={0x74f1957c,0x1c73999}, TitleIdx=0, Name="{32714800-2E5F-11d0-8B85-00AA0044F941}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03826 456 NtEnumerateKey (350, 517, Node, 288, ... {LastWrite={0x5b682580,0x1c73999}, TitleIdx=0, Name= (350, 517, Node, 288, ... {LastWrite={0x5b682580,0x1c73999}, TitleIdx=0, Name="{32683183-48a0-441b-a342-7c2a440a9478}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03827 456 NtEnumerateKey (350, 516, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name= (350, 516, Node, 288, ... {LastWrite={0x6352b454,0x1c73999}, TitleIdx=0, Name="{323CDF3C-0CCA-11D3-96E0-00104BC7B3A8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03828 456 NtEnumerateKey (350, 515, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 515, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{323991f0-7bad-11cf-b03d-00aa006e0975}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03829 456 NtEnumerateKey (350, 514, Node, 288, ... {LastWrite={0x6b800500,0x1c73999}, TitleIdx=0, Name= (350, 514, Node, 288, ... {LastWrite={0x6b800500,0x1c73999}, TitleIdx=0, Name="{31EAD8CC-C2F6-4639-BA99-5F495F9B1502}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03830 456 NtEnumerateKey (350, 513, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name= (350, 513, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name="{31C48C32-70B0-11d1-A708-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03831 456 NtEnumerateKey (350, 512, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name= (350, 512, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name="{31C48C31-70B0-11d1-A708-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03832 456 NtEnumerateKey (350, 511, Node, 288, ... {LastWrite={0x757bdde0,0x1c73999}, TitleIdx=0, Name= (350, 511, Node, 288, ... {LastWrite={0x757bdde0,0x1c73999}, TitleIdx=0, Name="{3181343b-94a2-4feb-adef-30a1dde617b4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03833 456 NtEnumerateKey (350, 510, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name= (350, 510, Node, 288, ... {LastWrite={0x20fc2626,0x1c73999}, TitleIdx=0, Name="{31430c59-bed1-11D1-8De8-00C04FC2E0C7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03834 456 NtEnumerateKey (350, 509, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name= (350, 509, Node, 288, ... {LastWrite={0x612bf51e,0x1c73999}, TitleIdx=0, Name="{31345649-0000-0010-8000-00AA00389B71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03835 456 NtEnumerateKey (350, 508, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name= (350, 508, Node, 288, ... {LastWrite={0x5f8d1bf2,0x1c73999}, TitleIdx=0, Name="{3124c396-fb13-4836-a6ad-1317f1713688}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03836 456 NtEnumerateKey (350, 507, Node, 288, ... {LastWrite={0x58bbe29a,0x1c73999}, TitleIdx=0, Name= (350, 507, Node, 288, ... {LastWrite={0x58bbe29a,0x1c73999}, TitleIdx=0, Name="{30E7F2A0-EC4C-11ce-8865-00805F742EF6}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03837 456 NtEnumerateKey (350, 506, Node, 288, ... {LastWrite={0x5b682580,0x1c73999}, TitleIdx=0, Name= (350, 506, Node, 288, ... {LastWrite={0x5b682580,0x1c73999}, TitleIdx=0, Name="{30D02401-6A81-11d0-8274-00C04FD5AE38}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03838 456 NtEnumerateKey (350, 505, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name= (350, 505, Node, 288, ... {LastWrite={0x5dbc3164,0x1c73999}, TitleIdx=0, Name="{30C3B080-30FB-11d0-B724-00AA006C1A01}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03839 456 NtEnumerateKey (350, 504, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name= (350, 504, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name="{3050f819-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03840 456 NtEnumerateKey (350, 503, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name= (350, 503, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name="{3050f6d4-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03841 456 NtEnumerateKey (350, 502, Node, 288, ... {LastWrite={0x5ed32486,0x1c73999}, TitleIdx=0, Name= (350, 502, Node, 288, ... {LastWrite={0x5ed32486,0x1c73999}, TitleIdx=0, Name="{3050f6cd-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03842 456 NtEnumerateKey (350, 501, Node, 288, ... {LastWrite={0x5ed32486,0x1c73999}, TitleIdx=0, Name= (350, 501, Node, 288, ... {LastWrite={0x5ed32486,0x1c73999}, TitleIdx=0, Name="{3050f6b3-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03843 456 NtEnumerateKey (350, 500, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 500, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f67D-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03844 456 NtEnumerateKey (350, 499, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 499, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f667-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03845 456 NtEnumerateKey (350, 498, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name= (350, 498, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name="{3050f664-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03846 456 NtEnumerateKey (350, 497, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name= (350, 497, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name="{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03847 456 NtEnumerateKey (350, 496, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name= (350, 496, Node, 288, ... {LastWrite={0x5ed0c22c,0x1c73999}, TitleIdx=0, Name="{3050f5be-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03848 456 NtEnumerateKey (350, 495, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 495, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f4f8-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03849 456 NtEnumerateKey (350, 494, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name= (350, 494, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name="{3050f4f5-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03850 456 NtEnumerateKey (350, 493, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 493, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f4f0-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03851 456 NtEnumerateKey (350, 492, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name= (350, 492, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name="{3050f4e7-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03852 456 NtEnumerateKey (350, 491, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name= (350, 491, Node, 288, ... {LastWrite={0x5ca2dbe8,0x1c73999}, TitleIdx=0, Name="{3050f4e1-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03853 456 NtEnumerateKey (350, 490, Node, 288, ... {LastWrite={0x7327d1fc,0x1c73999}, TitleIdx=0, Name= (350, 490, Node, 288, ... {LastWrite={0x7327d1fc,0x1c73999}, TitleIdx=0, Name="{3050f4d8-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03854 456 NtEnumerateKey (350, 489, Node, 288, ... {LastWrite={0x5ece5fd2,0x1c73999}, TitleIdx=0, Name= (350, 489, Node, 288, ... {LastWrite={0x5ece5fd2,0x1c73999}, TitleIdx=0, Name="{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03855 456 NtEnumerateKey (350, 488, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 488, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f499-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03856 456 NtEnumerateKey (350, 487, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 487, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F406-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03857 456 NtEnumerateKey (350, 486, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 486, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03858 456 NtEnumerateKey (350, 485, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name= (350, 485, Node, 288, ... {LastWrite={0x5c0580b4,0x1c73999}, TitleIdx=0, Name="{3050F3D9-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03859 456 NtEnumerateKey (350, 484, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 484, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F3D6-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03860 456 NtEnumerateKey (350, 483, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 483, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F3C2-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03861 456 NtEnumerateKey (350, 482, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 482, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03862 456 NtEnumerateKey (350, 481, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 481, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f3BB-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03863 456 NtEnumerateKey (350, 480, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 480, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f3B4-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03864 456 NtEnumerateKey (350, 479, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 479, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f3B3-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03865 456 NtEnumerateKey (350, 478, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 478, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03866 456 NtEnumerateKey (350, 477, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 477, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F391-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03867 456 NtEnumerateKey (350, 476, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 476, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F296-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03868 456 NtEnumerateKey (350, 475, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 475, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F232-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03869 456 NtEnumerateKey (350, 474, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 474, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F1FC-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03870 456 NtEnumerateKey (350, 473, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name= (350, 473, Node, 288, ... {LastWrite={0x5c031e5a,0x1c73999}, TitleIdx=0, Name="{3050F17F-98B5-11CF-BB82-00AA00BDCE0B}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03871 456 NtEnumerateKey (350, 472, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name= (350, 472, Node, 288, ... {LastWrite={0x5c07e30e,0x1c73999}, TitleIdx=0, Name="{3050f163-98b5-11cf-bb82-00aa00bdce0b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03872 456 NtEnumerateKey (350, 471, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name= (350, 471, Node, 288, ... {LastWrite={0x61357e86,0x1c73999}, TitleIdx=0, Name="{30355649-0000-0010-8000-00AA00389B71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03873 456 NtEnumerateKey (350, 470, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name= (350, 470, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name="{301056D0-6DFF-11D2-9EEB-006008039E37}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03874 456 NtEnumerateKey (350, 469, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name= (350, 469, Node, 288, ... {LastWrite={0x760aeaf8,0x1c73999}, TitleIdx=0, Name="{2FEB9591-50CF-11D1-A6DF-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03875 456 NtEnumerateKey (350, 468, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 468, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{2FE8F810-B2A5-11d0-A787-0000F803ABFC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03876 456 NtEnumerateKey (350, 467, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name= (350, 467, Node, 288, ... {LastWrite={0x215921dc,0x1c73999}, TitleIdx=0, Name="{2F94D7B0-BF63-11D1-A6A2-00C04FB9988E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03877 456 NtEnumerateKey (350, 466, Node, 288, ... {LastWrite={0x757e403a,0x1c73999}, TitleIdx=0, Name= (350, 466, Node, 288, ... {LastWrite={0x757e403a,0x1c73999}, TitleIdx=0, Name="{2eeb4adf-4578-4d10-bca7-bb955f56320a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03878 456 NtEnumerateKey (350, 465, Node, 288, ... {LastWrite={0x72f5c09a,0x1c73999}, TitleIdx=0, Name= (350, 465, Node, 288, ... {LastWrite={0x72f5c09a,0x1c73999}, TitleIdx=0, Name="{2ED7F7E8-1F7E-4EDC-8E84-45B23631EBFE}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03879 456 NtEnumerateKey (350, 464, Node, 288, ... {LastWrite={0x63b93972,0x1c73999}, TitleIdx=0, Name= (350, 464, Node, 288, ... {LastWrite={0x63b93972,0x1c73999}, TitleIdx=0, Name="{2E8EA1E5-F406-46F5-AF10-661FD6539F28}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03880 456 NtEnumerateKey (350, 463, Node, 288, ... {LastWrite={0x6e147062,0x1c73999}, TitleIdx=0, Name= (350, 463, Node, 288, ... {LastWrite={0x6e147062,0x1c73999}, TitleIdx=0, Name="{2E7700B7-27C4-437F-9FBF-1E8BE2817566}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03881 456 NtEnumerateKey (350, 462, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name= (350, 462, Node, 288, ... {LastWrite={0x5b44623a,0x1c73999}, TitleIdx=0, Name="{2E17C0EF-2851-459b-A3C8-27A41D4BC9F7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03882 456 NtEnumerateKey (350, 461, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name= (350, 461, Node, 288, ... {LastWrite={0x21840c30,0x1c73999}, TitleIdx=0, Name="{2e167ea7-85e3-4395-995a-77af9875d79a}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03883 456 NtEnumerateKey (350, 460, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 460, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{2dfb3a35-6071-11d1-8c13-00c04fd8d503}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03884 456 NtEnumerateKey (350, 459, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name= (350, 459, Node, 288, ... {LastWrite={0x6137e0e0,0x1c73999}, TitleIdx=0, Name="{2DE89781-DBF6-11D0-A30E-444553540000}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03885 456 NtEnumerateKey (350, 458, Node, 288, ... {LastWrite={0x57ac1686,0x1c73999}, TitleIdx=0, Name= (350, 458, Node, 288, ... {LastWrite={0x57ac1686,0x1c73999}, TitleIdx=0, Name="{2D360201-FFF5-11d1-8D03-00A0C959BC0A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03886 456 NtEnumerateKey (350, 457, Node, 288, ... {LastWrite={0x57ac1686,0x1c73999}, TitleIdx=0, Name= (350, 457, Node, 288, ... {LastWrite={0x57ac1686,0x1c73999}, TitleIdx=0, Name="{2D360200-FFF5-11d1-8D03-00A0C959BC0A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03887 456 NtEnumerateKey (350, 456, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name= (350, 456, Node, 288, ... {LastWrite={0x5e015596,0x1c73999}, TitleIdx=0, Name="{2d2307c8-7db4-40d6-9100-d52af4f97a5b}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03888 456 NtEnumerateKey (350, 455, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 455, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{2D12DD17-6C4E-456E-A953-D210E3C64176}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03889 456 NtEnumerateKey (350, 454, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name= (350, 454, Node, 288, ... {LastWrite={0x60b9843e,0x1c73999}, TitleIdx=0, Name="{2CA8CA52-3C3F-11D2-B73D-00C04FB6BD3D}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03890 456 NtEnumerateKey (350, 453, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name= (350, 453, Node, 288, ... {LastWrite={0x5fff8cd2,0x1c73999}, TitleIdx=0, Name="{2C875213-FCE5-11d1-A0B0-00C04FA31A86}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03891 456 NtEnumerateKey (350, 452, Node, 288, ... {LastWrite={0x6ebdb758,0x1c73999}, TitleIdx=0, Name= (350, 452, Node, 288, ... {LastWrite={0x6ebdb758,0x1c73999}, TitleIdx=0, Name="{2C63E4EB-4CEA-41B8-919C-E947EA19A77C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03892 456 NtEnumerateKey (350, 451, Node, 288, ... {LastWrite={0x6bceb29a,0x1c73999}, TitleIdx=0, Name= (350, 451, Node, 288, ... {LastWrite={0x6bceb29a,0x1c73999}, TitleIdx=0, Name="{2C5F9B72-7148-4D97-BFC9-68A0E076BEBD}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03893 456 NtEnumerateKey (350, 450, Node, 288, ... {LastWrite={0x211d8712,0x1c73999}, TitleIdx=0, Name= (350, 450, Node, 288, ... {LastWrite={0x211d8712,0x1c73999}, TitleIdx=0, Name="{2C3E140B-7A0D-42d1-B2AA-D343500A90CF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03894 456 NtEnumerateKey (350, 449, Node, 288, ... {LastWrite={0x6df30f76,0x1c73999}, TitleIdx=0, Name= (350, 449, Node, 288, ... {LastWrite={0x6df30f76,0x1c73999}, TitleIdx=0, Name="{2BC0EF29-E6BA-11d1-81DD-0000F87557DB}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03895 456 NtEnumerateKey (350, 448, Node, 288, ... {LastWrite={0x1f88374e,0x1c73999}, TitleIdx=0, Name= (350, 448, Node, 288, ... {LastWrite={0x1f88374e,0x1c73999}, TitleIdx=0, Name="{2B7E6AA9-C4FA-4951-815B-4AFE39D81453}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03896 456 NtEnumerateKey (350, 447, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name= (350, 447, Node, 288, ... {LastWrite={0x5b97d488,0x1c73999}, TitleIdx=0, Name="{2B4F54B1-3D6D-11d0-8258-00C04FD5AE38}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03897 456 NtEnumerateKey (350, 446, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name= (350, 446, Node, 288, ... {LastWrite={0x760d4d52,0x1c73999}, TitleIdx=0, Name="{2AFA62E2-5548-11D1-A6E1-006097C4E476}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03898 456 NtEnumerateKey (350, 445, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name= (350, 445, Node, 288, ... {LastWrite={0x6169f242,0x1c73999}, TitleIdx=0, Name="{2AD1B782-53A4-4CDA-8A81-CD4DC6D716D4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03899 456 NtEnumerateKey (350, 444, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name= (350, 444, Node, 288, ... {LastWrite={0x63b6d718,0x1c73999}, TitleIdx=0, Name="{2AABFCD0-1797-11D2-ABA2-00C04FB6C6FA}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03900 456 NtEnumerateKey (350, 443, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name= (350, 443, Node, 288, ... {LastWrite={0x60f05a54,0x1c73999}, TitleIdx=0, Name="{2A6F3A80-5976-11D2-9524-0060081840BC}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03901 456 NtEnumerateKey (350, 442, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name= (350, 442, Node, 288, ... {LastWrite={0x253db8d0,0x1c73999}, TitleIdx=0, Name="{2a6eb050-7f1c-11ce-be57-00aa0051fe20}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03902 456 NtEnumerateKey (350, 441, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name= (350, 441, Node, 288, ... {LastWrite={0x62c86bf0,0x1c73999}, TitleIdx=0, Name="{2A614240-A4C5-4C33-BD87-1BC709331639}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03903 456 NtEnumerateKey (350, 440, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name= (350, 440, Node, 288, ... {LastWrite={0x252aa600,0x1c73999}, TitleIdx=0, Name="{2A488070-6FD9-11D0-A808-00A0C906241A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03904 456 NtEnumerateKey (350, 439, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name= (350, 439, Node, 288, ... {LastWrite={0x2137c0f0,0x1c73999}, TitleIdx=0, Name="{2A005C11-A5DE-11CF-9E66-00AA00A3F464}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03905 456 NtEnumerateKey (350, 438, Node, 288, ... {LastWrite={0x25e6ffc6,0x1c73999}, TitleIdx=0, Name= (350, 438, Node, 288, ... {LastWrite={0x25e6ffc6,0x1c73999}, TitleIdx=0, Name="{29F06F0C-FB7F-44A5-83CD-D41705D5C525}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03906 456 NtEnumerateKey (350, 437, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name= (350, 437, Node, 288, ... {LastWrite={0x255f19bc,0x1c73999}, TitleIdx=0, Name="{29B5828C-CAB9-11D2-B35C-00105A1F8177}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03907 456 NtEnumerateKey (350, 436, Node, 288, ... {LastWrite={0x5ec4d66a,0x1c73999}, TitleIdx=0, Name= (350, 436, Node, 288, ... {LastWrite={0x5ec4d66a,0x1c73999}, TitleIdx=0, Name="{299D0193-6DAA-11d2-B679-006097DF5BD4}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03908 456 NtEnumerateKey (350, 435, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name= (350, 435, Node, 288, ... {LastWrite={0x1de6fbc8,0x1c73999}, TitleIdx=0, Name="{299BE050-E83E-4DB7-A7DA-D86FDEBFE6D0}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03909 456 NtEnumerateKey (350, 434, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name= (350, 434, Node, 288, ... {LastWrite={0x215b8436,0x1c73999}, TitleIdx=0, Name="{298942A3-C0FE-11D1-8D87-0060088F38C8}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03910 456 NtEnumerateKey (350, 433, Node, 288, ... {LastWrite={0x217f477c,0x1c73999}, TitleIdx=0, Name= (350, 433, Node, 288, ... {LastWrite={0x217f477c,0x1c73999}, TitleIdx=0, Name="{29729D01-CFE6-11D0-BE1D-0060977B4789}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03911 456 NtEnumerateKey (350, 432, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 432, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{295789F0-0949-11D1-B90C-00AA004AB12A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03912 456 NtEnumerateKey (350, 431, Node, 288, ... {LastWrite={0x5f6e1d60,0x1c73999}, TitleIdx=0, Name= (350, 431, Node, 288, ... {LastWrite={0x5f6e1d60,0x1c73999}, TitleIdx=0, Name="{2933BF94-7B36-11d2-B20E-00C04F983E60}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03913 456 NtEnumerateKey (350, 430, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name= (350, 430, Node, 288, ... {LastWrite={0x5e7aed84,0x1c73999}, TitleIdx=0, Name="{2933BF91-7B36-11d2-B20E-00C04F983E60}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03914 456 NtEnumerateKey (350, 429, Node, 288, ... {LastWrite={0x5f72e214,0x1c73999}, TitleIdx=0, Name= (350, 429, Node, 288, ... {LastWrite={0x5f72e214,0x1c73999}, TitleIdx=0, Name="{2933BF90-7B36-11d2-B20E-00C04F983E60}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03915 456 NtEnumerateKey (350, 428, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name= (350, 428, Node, 288, ... {LastWrite={0x5ec99b1e,0x1c73999}, TitleIdx=0, Name="{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03916 456 NtEnumerateKey (350, 427, Node, 288, ... {LastWrite={0x63c2c2da,0x1c73999}, TitleIdx=0, Name= (350, 427, Node, 288, ... {LastWrite={0x63c2c2da,0x1c73999}, TitleIdx=0, Name="{289228DE-A31E-11D1-A19C-0000F875B132}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03917 456 NtEnumerateKey (350, 426, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name= (350, 426, Node, 288, ... {LastWrite={0x72c3af38,0x1c73999}, TitleIdx=0, Name="{286F484D-375E-4458-A272-B138E2F80A6A}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03918 456 NtEnumerateKey (350, 425, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name= (350, 425, Node, 288, ... {LastWrite={0x62e2a5ce,0x1c73999}, TitleIdx=0, Name="{283807B8-2C60-11D0-A31D-00AA00B92C03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03919 456 NtEnumerateKey (350, 424, Node, 288, ... {LastWrite={0x62db7ec0,0x1c73999}, TitleIdx=0, Name= (350, 424, Node, 288, ... {LastWrite={0x62db7ec0,0x1c73999}, TitleIdx=0, Name="{283807B5-2C60-11D0-A31D-00AA00B92C03}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03920 456 NtEnumerateKey (350, 423, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name= (350, 423, Node, 288, ... {LastWrite={0x6beb4ed2,0x1c73999}, TitleIdx=0, Name="{280A7B65-8F00-438F-989B-8EAF9E438A71}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03921 456 NtEnumerateKey (350, 422, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name= (350, 422, Node, 288, ... {LastWrite={0x61521abe,0x1c73999}, TitleIdx=0, Name="{280A3020-86CF-11D1-ABE6-00A0C905F375}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03922 456 NtEnumerateKey (350, 421, Node, 288, ... {LastWrite={0x62a4a8aa,0x1c73999}, TitleIdx=0, Name= (350, 421, Node, 288, ... {LastWrite={0x62a4a8aa,0x1c73999}, TitleIdx=0, Name="{27D0BCCC-344D-4287-AF37-0C72C161C14C}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03923 456 NtEnumerateKey (350, 420, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name= (350, 420, Node, 288, ... {LastWrite={0x2113fdaa,0x1c73999}, TitleIdx=0, Name="{2797CF92-415A-43e6-A8F7-A5FAAB783719}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03924 456 NtEnumerateKey (350, 419, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name= (350, 419, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name="{2764BCE5-CC39-11D2-B639-00C04F79498E}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03925 456 NtEnumerateKey (350, 418, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name= (350, 418, Node, 288, ... {LastWrite={0x5da459e0,0x1c73999}, TitleIdx=0, Name="{275C23E2-3747-11D0-9FEA-00AA003F8646}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03926 456 NtEnumerateKey (350, 417, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name= (350, 417, Node, 288, ... {LastWrite={0x9868c980,0x1c738c7}, TitleIdx=0, Name="{274fae1f-3626-11d1-a3a4-00c04fb950dc}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03927 456 NtEnumerateKey (350, 416, Node, 288, ... {LastWrite={0x720e7c80,0x1c73999}, TitleIdx=0, Name= (350, 416, Node, 288, ... {LastWrite={0x720e7c80,0x1c73999}, TitleIdx=0, Name="{2749C5CC-7E2C-4E08-8AB5-FBC064F3DD05}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03928 456 NtEnumerateKey (350, 415, Node, 288, ... {LastWrite={0x6b577d06,0x1c73999}, TitleIdx=0, Name= (350, 415, Node, 288, ... {LastWrite={0x6b577d06,0x1c73999}, TitleIdx=0, Name="{273380E8-1438-4B2C-95B0-713284FBC302}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03929 456 NtEnumerateKey (350, 414, Node, 288, ... {LastWrite={0x5e087ca4,0x1c73999}, TitleIdx=0, Name= (350, 414, Node, 288, ... {LastWrite={0x5e087ca4,0x1c73999}, TitleIdx=0, Name="{2728520d-1ec8-4c68-a551-316b684c4ea7}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03930 456 NtEnumerateKey (350, 413, Node, 288, ... {LastWrite={0x58129ba4,0x1c73999}, TitleIdx=0, Name= (350, 413, Node, 288, ... {LastWrite={0x58129ba4,0x1c73999}, TitleIdx=0, Name="{27016870-8E02-11D1-924E-00C04FBBBFB3}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03931 456 NtEnumerateKey (350, 412, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name= (350, 412, Node, 288, ... {LastWrite={0x5aa70706,0x1c73999}, TitleIdx=0, Name="{26fdc864-be88-46e7-9235-032d8ea5162e}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03932 456 NtEnumerateKey (350, 411, Node, 288, ... {LastWrite={0x7512f668,0x1c73999}, TitleIdx=0, Name= (350, 411, Node, 288, ... {LastWrite={0x7512f668,0x1c73999}, TitleIdx=0, Name="{26D19E50-819E-11D3-8D49-00C04F949D33}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03933 456 NtEnumerateKey (350, 410, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name= (350, 410, Node, 288, ... {LastWrite={0x6ea8422e,0x1c73999}, TitleIdx=0, Name="{267DB0B3-55E3-4902-949B-DF8F5CEC0191}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03934 456 NtEnumerateKey (350, 409, Node, 288, ... {LastWrite={0x25f7b03c,0x1c73999}, TitleIdx=0, Name= (350, 409, Node, 288, ... {LastWrite={0x25f7b03c,0x1c73999}, TitleIdx=0, Name="{266C72E7-62E8-11D1-AD89-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03935 456 NtEnumerateKey (350, 408, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name= (350, 408, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name="{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03936 456 NtEnumerateKey (350, 407, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name= (350, 407, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name="{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}", Class=""}, 100, ) , Class=""}, 100, ) == 0x0 03937 456 NtQueryKey (350, Name, 384, ... {Name= (350, Name, 384, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID"}, 84, ) }, 84, ) == 0x0 03938 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03939 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 356, ) == 0x0 03940 456 NtQueryInformationToken (356, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03941 456 NtClose (356, ... ) == 0x0 03942 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03943 456 NtOpenKey (0x20019, {24, 350, 0x40, 0, 0, (0x20019, {24, 350, 0x40, 0, 0, "{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... 356, ) }, ... 356, ) == 0x0 03944 456 NtQueryKey (358, Name, 392, ... {Name= (358, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}_"}, 162, ) }, 162, ) == 0x0 03945 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03946 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03947 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03948 456 NtClose (360, ... ) == 0x0 03949 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03950 456 NtEnumerateValueKey (358, 0, Full, 220, ... TitleIdx=0, Type=1, Name=" (358, 0, Full, 220, ... TitleIdx=0, Type=1, Name="", Data="M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0"}, 124, ) M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0"}, 124, ) == 0x0 03951 456 NtQueryKey (358, Name, 392, ... {Name= (358, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}_"}, 162, ) }, 162, ) == 0x0 03952 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03953 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03954 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03955 456 NtClose (360, ... ) == 0x0 03956 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03957 456 NtEnumerateValueKey (358, 0, Full, 220, ... TitleIdx=0, Type=1, Name=" (358, 0, Full, 220, ... TitleIdx=0, Type=1, Name="", Data="M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0"}, 124, ) M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0"}, 124, ) == 0x0 03958 456 NtQueryKey (354, Name, 392, ... {Name= (354, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}_"}, 162, ) }, 162, ) == 0x0 03959 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03960 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03961 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03962 456 NtClose (360, ... ) == 0x0 03963 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03964 456 NtSetValueKey (354, " (354, "", 0, 1, "M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0", 104, ... ) M\0i\0c\0r\0o\0s\0o\0f\0t\0 \0W\0B\0E\0M\0 \0C\0o\0m\0m\0a\0n\0d\0 \0L\0i\0n\0e\0 \0E\0v\0e\0n\0t\0 \0C\0o\0n\0s\0u\0m\0e\0r\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0", 104, ... ) == 0x0 03965 456 NtQueryKey (358, Name, 392, ... {Name= (358, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}_"}, 162, ) }, 162, ) == 0x0 03966 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03967 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03968 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03969 456 NtClose (360, ... ) == 0x0 03970 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03971 456 NtEnumerateValueKey (358, 1, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 03972 456 NtQueryKey (358, Name, 392, ... {Name= (358, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}_"}, 162, ) }, 162, ) == 0x0 03973 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03974 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03975 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03976 456 NtClose (360, ... ) == 0x0 03977 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03978 456 NtEnumerateKey (358, 0, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name= (358, 0, Node, 288, ... {LastWrite={0x261dd5dc,0x1c73999}, TitleIdx=0, Name="InprocServer32", Class=""}, 52, ) , Class=""}, 52, ) == 0x0 03979 456 NtQueryKey (358, Name, 384, ... {Name= (358, Name, 384, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}_"}, 162, ) }, 162, ) == 0x0 03980 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03981 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 360, ) == 0x0 03982 456 NtQueryInformationToken (360, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03983 456 NtClose (360, ... ) == 0x0 03984 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03985 456 NtOpenKey (0x20019, {24, 358, 0x40, 0, 0, (0x20019, {24, 358, 0x40, 0, 0, "InprocServer32"}, ... 360, ) }, ... 360, ) == 0x0 03986 456 NtQueryKey (354, Name, 382, ... {Name= (354, Name, 382, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}_"}, 162, ) }, 162, ) == 0x0 03987 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03988 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 03989 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03990 456 NtClose (364, ... ) == 0x0 03991 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 03992 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 364, ) }, ... 364, ) == 0x0 03993 456 NtCreateKey (0xf003f, {24, 364, 0x40, 0, 0, (0xf003f, {24, 364, 0x40, 0, 0, "CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, 0, "", 0, ... 368, 1, ) }, 0, "", 0, ... 368, 1, ) == 0x0 03994 456 NtClose (364, ... ) == 0x0 03995 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 03996 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 03997 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 03998 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 03999 456 NtClose (364, ... ) == 0x0 04000 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04001 456 NtEnumerateValueKey (362, 0, Full, 220, ... TitleIdx=0, Type=1, Name=" (362, 0, Full, 220, ... TitleIdx=0, Type=1, Name="", Data="C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0"}, 96, ) C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0"}, 96, ) == 0x0 04002 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04003 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04004 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04005 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04006 456 NtClose (364, ... ) == 0x0 04007 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04008 456 NtEnumerateValueKey (362, 0, Full, 220, ... TitleIdx=0, Type=1, Name=" (362, 0, Full, 220, ... TitleIdx=0, Type=1, Name="", Data="C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0"}, 96, ) C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0"}, 96, ) == 0x0 04009 456 NtQueryKey (370, Name, 392, ... {Name= (370, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04010 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04011 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04012 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04013 456 NtClose (364, ... ) == 0x0 04014 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04015 456 NtSetValueKey (370, " (370, "", 0, 1, "C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0", 76, ... ) C\0:\0\\0W\0I\0N\0D\0O\0W\0S\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0b\0e\0m\0\\0w\0b\0e\0m\0c\0o\0n\0s\0.\0d\0l\0l\0\0\0", 76, ... ) == 0x0 04016 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04017 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04018 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04019 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04020 456 NtClose (364, ... ) == 0x0 04021 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04022 456 NtEnumerateValueKey (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name= (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name="ThreadingModel", Data="B\0o\0t\0h\0\0\0"}, 58, ) , Data= (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name="ThreadingModel", Data="B\0o\0t\0h\0\0\0"}, 58, ) }, 58, ) == 0x0 04023 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04024 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04025 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04026 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04027 456 NtClose (364, ... ) == 0x0 04028 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04029 456 NtEnumerateValueKey (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name= (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name="ThreadingModel", Data="B\0o\0t\0h\0\0\0"}, 58, ) , Data= (362, 1, Full, 220, ... TitleIdx=0, Type=1, Name="ThreadingModel", Data="B\0o\0t\0h\0\0\0"}, 58, ) }, 58, ) == 0x0 04030 456 NtQueryKey (370, Name, 392, ... {Name= (370, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04031 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04032 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04033 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04034 456 NtClose (364, ... ) == 0x0 04035 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04036 456 NtSetValueKey (370, (370, "ThreadingModel", 0, 1, "B\0o\0t\0h\0\0\0", 10, ... ) , 0, 1, (370, "ThreadingModel", 0, 1, "B\0o\0t\0h\0\0\0", 10, ... ) , 10, ... ) == 0x0 04037 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04038 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04039 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04040 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04041 456 NtClose (364, ... ) == 0x0 04042 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04043 456 NtEnumerateValueKey (362, 2, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 04044 456 NtAllocateVirtualMemory (-1, 1396736, 0, 4096, 4096, 4, ... 1396736, 4096, ) == 0x0 04045 456 NtQueryKey (362, Name, 392, ... {Name= (362, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, 192, ) }, 192, ) == 0x0 04046 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04047 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 364, ) == 0x0 04048 456 NtQueryInformationToken (364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04049 456 NtClose (364, ... ) == 0x0 04050 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04051 456 NtEnumerateKey (362, 0, Node, 288, ... ) == STATUS_NO_MORE_ENTRIES 04052 456 NtClose (370, ... ) == 0x0 04053 456 NtClose (362, ... ) == 0x0 04054 456 NtEnumerateKey (358, 1, Node, 288, ... ) == STATUS_NO_MORE_ENTRIES 04055 456 NtClose (358, ... ) == 0x0 04056 456 NtClose (350, ... ) == 0x0 04057 456 NtClose (354, ... ) == 0x0 04058 456 NtOpenKey (0x6001f, {24, 28, 0x40, 0, 0, (0x6001f, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 352, ) }, ... 352, ) == 0x0 04059 456 NtSetSecurityObject (352, 4, {1, 0, 0x800c, 0, 0, 0, 0}, ... ) == 0x0 04060 456 NtClose (352, ... ) == 0x0 04061 456 NtOpenMutant (0x1f0001, {24, 52, 0x0, 0, 0, (0x1f0001, {24, 52, 0x0, 0, 0, "3BBE6CE7:SIMULATEEXPIRED"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04062 456 NtOpenFile (0x80100000, {24, 0, 0x40, 0, 0, (0x80100000, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.INI"}, 7, 96, ... ) }, 7, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04063 456 NtClose (0, ... ) == STATUS_INVALID_HANDLE 04064 456 NtOpenProcessToken (-1, 0x8, ... 352, ) == 0x0 04065 456 NtQueryInformationToken (352, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 04066 456 NtClose (352, ... ) == 0x0 04067 456 NtAllocateVirtualMemory (-1, 1220608, 0, 4096, 4096, 260, ... 1220608, 4096, ) == 0x0 04068 456 NtAllocateVirtualMemory (-1, 1216512, 0, 4096, 4096, 260, ... 1216512, 4096, ) == 0x0 04069 456 NtAllocateVirtualMemory (-1, 1212416, 0, 4096, 4096, 260, ... 1212416, 4096, ) == 0x0 04070 456 NtAllocateVirtualMemory (-1, 1208320, 0, 4096, 4096, 260, ... 1208320, 4096, ) == 0x0 04071 456 NtAllocateVirtualMemory (-1, 1204224, 0, 4096, 4096, 260, ... 1204224, 4096, ) == 0x0 04072 456 NtAllocateVirtualMemory (-1, 1200128, 0, 4096, 4096, 260, ... 1200128, 4096, ) == 0x0 04073 456 NtAllocateVirtualMemory (-1, 1196032, 0, 4096, 4096, 260, ... 1196032, 4096, ) == 0x0 04074 456 NtAllocateVirtualMemory (-1, 1191936, 0, 4096, 4096, 260, ... 1191936, 4096, ) == 0x0 04075 456 NtAllocateVirtualMemory (-1, 1187840, 0, 4096, 4096, 260, ... 1187840, 4096, ) == 0x0 04076 456 NtAllocateVirtualMemory (-1, 1183744, 0, 4096, 4096, 260, ... 1183744, 4096, ) == 0x0 04077 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04078 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04079 456 NtUserFindWindowEx (0, 0, (0, 0, "FileMonClass", 0x0, 0, ... ) , 0x0, 0, ... ) == 0x0 04080 456 NtUserFindWindowEx (0, 0, (0, 0, "RegMonClass", 0x0, 0, ... ) , 0x0, 0, ... ) == 0x0 04081 456 NtUserFindWindowEx (0, 0, (0, 0, "PROCMON_WINDOW_CLASS", 0x0, 0, ... ) , 0x0, 0, ... ) == 0x0 04082 456 NtUserBuildHwndList (0, 0, 0, 0, 64, ... (0x3004c, 0x100dc, 0x100aa, 0x100a8, 0x100a6, 0x60036, 0x20062, 0x10084, 0x10078, 0x10068, 0x3004a, 0x10066, 0x3003c, 0x1009c, 0x10090, 0x10080, 0x10026, 0x200ae, 0x100d2, 0x100be, 0x100bc, 0x100ba, 0x100b8, 0x100b6, 0x100b4, 0x100b2, 0x100b0, 0x20060, 0x100ce, 0x100c2, 0x100c0, 0x100ac, 0x2005c, 0x10070, 0x50050, 0x40054, 0x5004e, 0x10082, 0x1007a, 0x1, ), 40, ) == 0x0 04083 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 348, ) }, ... 348, ) == 0x0 04084 456 NtQueryValueKey (348, (348, "{0C6E3D0636B8B23B2}", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04085 456 NtClose (348, ... ) == 0x0 04086 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04087 456 NtClose (352, ... ) == 0x0 04088 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04089 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04090 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\The Silicon Realms Toolworks\Armadillo"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04091 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04092 456 NtClose (352, ... ) == 0x0 04093 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04094 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04095 456 NtAllocateVirtualMemory (-1, 11431936, 0, 28672, 4096, 4, ... 11431936, 28672, ) == 0x0 04096 456 NtQueryKey (346, Name, 384, ... {Name= (346, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES"}, 138, ) }, 138, ) == 0x0 04097 456 NtOpenKey (0x2001f, {24, 346, 0x40, 0, 0, (0x2001f, {24, 346, 0x40, 0, 0, "CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04098 456 NtOpenKey (0x2001f, {24, 0, 0x40, 0, 0, (0x2001f, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... 348, ) }, ... 348, ) == 0x0 04099 456 NtQueryKey (350, Name, 392, ... {Name= (350, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}5"}, 162, ) }, 162, ) == 0x0 04100 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04101 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 356, ) == 0x0 04102 456 NtQueryInformationToken (356, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04103 456 NtClose (356, ... ) == 0x0 04104 456 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\CLSID\{869C763B-BF37-97F5-1E0A-AAF171FC6DD1}"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04105 456 NtQueryValueKey (350, (350, "dWaw", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04106 456 NtClose (350, ... ) == 0x0 04107 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04108 456 NtClose (352, ... ) == 0x0 04109 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04110 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04111 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1189320, (0x80100080, {24, 0, 0x40, 0, 1189320, "\??\C:\DOCUME~1\SRI-user\LOCALS~1\Temp\C980DA7D.TMP"}, 0x0, 128, 1, 1, 100, 0, 0, ... ) }, 0x0, 128, 1, 1, 100, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04112 456 NtAllocateVirtualMemory (-1, 1179648, 0, 4096, 4096, 260, ... 1179648, 4096, ) == 0x0 04113 456 NtCreateSemaphore (0x1f0003, {24, 52, 0x80, 1339136, 0, (0x1f0003, {24, 52, 0x80, 1339136, 0, "shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}"}, 0, 2147483647, ... 348, ) }, 0, 2147483647, ... 348, ) == STATUS_OBJECT_NAME_EXISTS 04114 456 NtReleaseSemaphore (348, 1, ... 0, ) == 0x0 04115 456 NtWaitForSingleObject (348, 0, {0, 0}, ... ) == 0x0 04116 456 NtCreateKey (0x2000000, {24, 28, 0x40, 0, 0, (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"}, 0, 0x0, 0, ... 356, 2, ) }, 0, 0x0, 0, ... 356, 2, ) == 0x0 04117 456 NtQueryValueKey (356, (356, "Common AppData", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0A\0L\0L\0U\0S\0E\0R\0S\0P\0R\0O\0F\0I\0L\0E\0%\0\\0A\0p\0p\0l\0i\0c\0a\0t\0i\0o\0n\0 \0D\0a\0t\0a\0\0\0"}, 82, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (356, "Common AppData", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0A\0L\0L\0U\0S\0E\0R\0S\0P\0R\0O\0F\0I\0L\0E\0%\0\\0A\0p\0p\0l\0i\0c\0a\0t\0i\0o\0n\0 \0D\0a\0t\0a\0\0\0"}, 82, ) }, 82, ) == 0x0 04118 456 NtClose (356, ... ) == 0x0 04119 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\Documents and Settings\All Users\Application Data"}, 1187720, ... ) }, 1187720, ... ) == 0x0 04120 456 NtCreateKey (0x2000000, {24, 28, 0x40, 0, 0, (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"}, 0, 0x0, 0, ... 356, 2, ) }, 0, 0x0, 0, ... 356, 2, ) == 0x0 04121 456 NtSetValueKey (356, (356, "Common AppData", 0, 1, "C\0:\0\\0D\0o\0c\0u\0m\0e\0n\0t\0s\0 \0a\0n\0d\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0A\0l\0l\0 \0U\0s\0e\0r\0s\0\\0A\0p\0p\0l\0i\0c\0a\0t\0i\0o\0n\0 \0D\0a\0t\0a\0\0\0", 106, ... ) , 0, 1, (356, "Common AppData", 0, 1, "C\0:\0\\0D\0o\0c\0u\0m\0e\0n\0t\0s\0 \0a\0n\0d\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0A\0l\0l\0 \0U\0s\0e\0r\0s\0\\0A\0p\0p\0l\0i\0c\0a\0t\0i\0o\0n\0 \0D\0a\0t\0a\0\0\0", 106, ... ) , 106, ... ) == 0x0 04122 456 NtClose (356, ... ) == 0x0 04123 456 NtCreateFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\Documents and Settings\All Users\Application Data\TEMP"}, 0x0, 128, 3, 2, 16417, 0, 0, ... 356, {status=0x0, info=2}, ) }, 0x0, 128, 3, 2, 16417, 0, 0, ... 356, {status=0x0, info=2}, ) == 0x0 04124 456 NtClose (356, ... ) == 0x0 04125 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1189320, (0x80100080, {24, 0, 0x40, 0, 1189320, "\??\C:\Documents and Settings\All Users\Application Data\TEMP\C980DA7D.TMP"}, 0x0, 128, 1, 1, 100, 0, 0, ... ) }, 0x0, 128, 1, 1, 100, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04126 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1189320, (0x80100080, {24, 0, 0x40, 0, 1189320, "\??\C:\Documents and Settings\All Users\Application Data\TEMP:C980DA7D"}, 0x0, 128, 1, 1, 100, 0, 0, ... ) }, 0x0, 128, 1, 1, 100, 0, 0, ... ) == STATUS_OBJECT_NAME_INVALID 04127 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04128 456 NtClose (352, ... ) == 0x0 04129 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04130 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04131 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 356, ) }, ... 356, ) == 0x0 04132 456 NtQueryValueKey (356, (356, "{IC6E3D0636B8B23B2}", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04133 456 NtClose (356, ... ) == 0x0 04134 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04135 456 NtClose (352, ... ) == 0x0 04136 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04137 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04138 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04139 456 NtClose (352, ... ) == 0x0 04140 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04141 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235596, 616, BothDirectory, 1, (352, 0, 0, 0, 1235596, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=96}, ) , 0, ... {status=0x0, info=96}, ) == 0x0 04142 456 NtAllocateVirtualMemory (-1, 1400832, 0, 8192, 4096, 4, ... 1400832, 8192, ) == 0x0 04143 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3982}, ) == 0x0 04144 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3950}, ) == 0x0 04145 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3978}, ) == 0x0 04146 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4062}, ) == 0x0 04147 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=2404}, ) == 0x0 04148 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04149 456 NtClose (352, ... ) == 0x0 04150 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04151 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235596, 616, BothDirectory, 1, (352, 0, 0, 0, 1235596, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=118}, ) , 0, ... {status=0x0, info=118}, ) == 0x0 04152 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4018}, ) == 0x0 04153 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=1050}, ) == 0x0 04154 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04155 456 NtClose (352, ... ) == 0x0 04156 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\u:\work\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04157 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=96}, ) , 0, ... {status=0x0, info=96}, ) == 0x0 04158 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=336}, ) == 0x0 04159 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04160 456 NtClose (352, ... ) == 0x0 04161 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04162 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=96}, ) , 0, ... {status=0x0, info=96}, ) == 0x0 04163 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3982}, ) == 0x0 04164 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3950}, ) == 0x0 04165 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3978}, ) == 0x0 04166 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4062}, ) == 0x0 04167 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=2404}, ) == 0x0 04168 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04169 456 NtClose (352, ... ) == 0x0 04170 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04171 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=96}, ) , 0, ... {status=0x0, info=96}, ) == 0x0 04172 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4094}, ) == 0x0 04173 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4016}, ) == 0x0 04174 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4022}, ) == 0x0 04175 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4054}, ) == 0x0 04176 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4044}, ) == 0x0 04177 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4050}, ) == 0x0 04178 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3990}, ) == 0x0 04179 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4012}, ) == 0x0 04180 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4028}, ) == 0x0 04181 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4018}, ) == 0x0 04182 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4052}, ) == 0x0 04183 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4062}, ) == 0x0 04184 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4022}, ) == 0x0 04185 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4038}, ) == 0x0 04186 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4038}, ) == 0x0 04187 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4038}, ) == 0x0 04188 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4032}, ) == 0x0 04189 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4020}, ) == 0x0 04190 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4000}, ) == 0x0 04191 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4030}, ) == 0x0 04192 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4038}, ) == 0x0 04193 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4048}, ) == 0x0 04194 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3990}, ) == 0x0 04195 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4010}, ) == 0x0 04196 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3988}, ) == 0x0 04197 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4004}, ) == 0x0 04198 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4044}, ) == 0x0 04199 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4066}, ) == 0x0 04200 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4096}, ) == 0x0 04201 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4028}, ) == 0x0 04202 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4062}, ) == 0x0 04203 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4022}, ) == 0x0 04204 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4010}, ) == 0x0 04205 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4014}, ) == 0x0 04206 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3990}, ) == 0x0 04207 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4026}, ) == 0x0 04208 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4052}, ) == 0x0 04209 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4030}, ) == 0x0 04210 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4030}, ) == 0x0 04211 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4090}, ) == 0x0 04212 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4036}, ) == 0x0 04213 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4054}, ) == 0x0 04214 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4008}, ) == 0x0 04215 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4046}, ) == 0x0 04216 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4054}, ) == 0x0 04217 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4010}, ) == 0x0 04218 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4096}, ) == 0x0 04219 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4036}, ) == 0x0 04220 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4024}, ) == 0x0 04221 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4022}, ) == 0x0 04222 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=4042}, ) == 0x0 04223 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=2554}, ) == 0x0 04224 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04225 456 NtClose (352, ... ) == 0x0 04226 456 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\DOCUME~1\SRI-user\LOCALS~1\Temp\"}, 3, 16417, ... 352, {status=0x0, info=1}, ) }, 3, 16417, ... 352, {status=0x0, info=1}, ) == 0x0 04227 456 NtQueryDirectoryFile (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, (352, 0, 0, 0, 1235440, 616, BothDirectory, 1, "*", 0, ... {status=0x0, info=96}, ) , 0, ... {status=0x0, info=96}, ) == 0x0 04228 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... {status=0x0, info=3022}, ) == 0x0 04229 456 NtQueryDirectoryFile (352, 0, 0, 0, 1398888, 4096, BothDirectory, 0, 0x0, 0, ... ) == STATUS_NO_MORE_FILES 04230 456 NtClose (352, ... ) == 0x0 04231 456 NtAllocateVirtualMemory (-1, 12406784, 0, 69632, 4096, 4, ... 12406784, 69632, ) == 0x0 04232 456 NtAllocateVirtualMemory (-1, 12476416, 0, 69632, 4096, 4, ... 12476416, 69632, ) == 0x0 04233 456 NtAllocateVirtualMemory (-1, 0, 0, 2097152, 8192, 4, ... 13172736, 2097152, ) == 0x0 04234 456 NtAllocateVirtualMemory (-1, 13172736, 0, 137224, 4096, 4, ... 13172736, 139264, ) == 0x0 04235 456 NtAllocateVirtualMemory (-1, 13312000, 0, 135168, 4096, 4, ... 13312000, 135168, ) == 0x0 04236 456 NtFreeVirtualMemory (-1, (0xcb1000), 139264, 16384, ... (0xcb1000), 139264, ) == 0x0 04237 456 NtFreeVirtualMemory (-1, (0xc91000), 131072, 16384, ... (0xc91000), 131072, ) == 0x0 04238 456 NtFreeVirtualMemory (-1, (0xbe4000), 77824, 16384, ... (0xbe4000), 77824, ) == 0x0 04239 456 NtFreeVirtualMemory (-1, (0xbd4000), 65536, 16384, ... (0xbd4000), 65536, ) == 0x0 04240 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1232576, (0x80100080, {24, 0, 0x40, 0, 1232576, "\??\C:\DOCUME~1\SRI-user\LOCALS~1\Temp\C6E3D0636B8B23B2.TMP"}, 0x0, 128, 1, 1, 100, 0, 0, ... ) }, 0x0, 128, 1, 1, 100, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04241 456 NtOpenProcessToken (-1, 0x8, ... 352, ) == 0x0 04242 456 NtQueryInformationToken (352, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 04243 456 NtClose (352, ... ) == 0x0 04244 456 NtWaitForSingleObject (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED 04245 456 NtReleaseMutant (16, ... 04246 456 NtContinue (-136150904, 0, ... 04245 456 NtReleaseMutant ... ) == STATUS_MUTANT_NOT_OWNED 04247 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04248 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04249 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04250 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04251 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04252 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04253 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04254 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04255 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04256 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04257 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04258 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04259 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04260 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04261 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04262 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04263 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04264 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04265 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04266 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04267 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04268 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04269 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04270 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04271 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04272 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04273 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04274 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04275 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04276 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04277 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04278 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04279 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04280 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04281 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04282 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04283 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04284 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04285 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04286 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04287 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04288 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04289 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04290 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04291 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04292 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04293 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04294 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04295 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04296 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04297 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04298 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04299 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04300 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04301 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04302 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04303 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04304 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04305 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04306 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04307 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04308 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04309 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04310 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04311 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04312 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04313 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04314 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04315 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04316 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04317 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04318 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04319 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04320 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04321 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04322 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04323 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04324 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04325 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04326 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04327 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04328 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04329 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04330 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04331 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04332 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04333 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04334 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04335 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04336 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04337 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04338 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04339 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04340 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04341 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04342 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04343 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04344 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04345 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04346 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04347 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04348 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04349 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04350 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04351 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04352 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04353 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04354 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04355 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04356 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04357 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04358 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04359 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04360 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04361 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04362 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04363 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 0, 0, (0x1f0001, {24, 52, 0x80, 0, 0, "3BBE6CE7::WK"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04364 456 NtWaitForSingleObject (352, 0, {-30000000, -1}, ... ) == 0x0 04365 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 356, ) }, 0, ... 356, ) == 0x0 04366 456 NtWaitForSingleObject (356, 0, {-150000000, -1}, ... ) == 0x0 04367 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04368 456 NtQueryValueKey (360, (360, "{IC6E3D0636B8B23B2}", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04369 456 NtClose (360, ... ) == 0x0 04370 456 NtReleaseMutant (356, ... 0x0, ) == 0x0 04371 456 NtClose (356, ... ) == 0x0 04372 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 356, ) }, 0, ... 356, ) == 0x0 04373 456 NtWaitForSingleObject (356, 0, {-50000000, -1}, ... ) == 0x0 04374 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04375 456 NtSetValueKey (360, (360, "{IC6E3D0636B8B23B2}", 0, 3, "\1\0\0\0", 4, ... ) , 0, 3, (360, "{IC6E3D0636B8B23B2}", 0, 3, "\1\0\0\0", 4, ... ) , 4, ... ) == 0x0 04376 456 NtClose (360, ... ) == 0x0 04377 456 NtReleaseMutant (356, ... 0x0, ) == 0x0 04378 456 NtClose (356, ... ) == 0x0 04379 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 356, ) }, 0, ... 356, ) == 0x0 04380 456 NtWaitForSingleObject (356, 0, {-50000000, -1}, ... ) == 0x0 04381 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04382 456 NtSetValueKey (360, (360, "{0C6E3D0636B8B23B2}", 0, 3, "V>\250\16\13\242\247\246A\6S\230]\277D\243\2754\222f\274\266\1\253\231\350\11\233\37\261R=~\343\13=!\316)\177\222\245c]\25\341\23\177\2\362\331I\242\203\307\240%1\17}\347*\326\35r\2322y6\271\323-\223\20\37\254~]o\213\37\12\357\243\34\277\262\224\216\177.\307*\226H]nX'j\204\20", 102, ... ) , 0, 3, (360, "{0C6E3D0636B8B23B2}", 0, 3, "V>\250\16\13\242\247\246A\6S\230]\277D\243\2754\222f\274\266\1\253\231\350\11\233\37\261R=~\343\13=!\316)\177\222\245c]\25\341\23\177\2\362\331I\242\203\307\240%1\17}\347*\326\35r\2322y6\271\323-\223\20\37\254~]o\213\37\12\357\243\34\277\262\224\216\177.\307*\226H]nX'j\204\20", 102, ... ) , 102, ... ) == 0x0 04383 456 NtClose (360, ... ) == 0x0 04384 456 NtReleaseMutant (356, ... 0x0, ) == 0x0 04385 456 NtClose (356, ... ) == 0x0 04386 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04387 456 NtClose (352, ... ) == 0x0 04388 456 NtUserRegisterWindowMessage ( ("ArmReReadMessage", ... ) , ... ) == 0xc0d5 04389 456 NtUserPostMessage (65535, 49365, 1002335463, 448, ... ) == 0x1 04390 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04391 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04392 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04393 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04394 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04395 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04396 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04397 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04398 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04399 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04400 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04401 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04402 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04403 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04404 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04405 456 NtFreeVirtualMemory (-1, (0xbd4000), 135168, 16384, ... (0xbd4000), 135168, ) == 0x0 04406 456 NtAllocateVirtualMemory (-1, 12402688, 0, 135168, 4096, 4, ... 12402688, 135168, ) == 0x0 04407 456 NtFreeVirtualMemory (-1, (0xbd4000), 126976, 16384, ... (0xbd4000), 126976, ) == 0x0 04408 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04409 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04410 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04411 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04412 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04413 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04414 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04415 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04416 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04417 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04418 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04419 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04420 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04421 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04422 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04423 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04424 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04425 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04426 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04427 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04428 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04429 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04430 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04431 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04432 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04433 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04434 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04435 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04436 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04437 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04438 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04439 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04440 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04441 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04442 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04443 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04444 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04445 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04446 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04447 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04448 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04449 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04450 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04451 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04452 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04453 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04454 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04455 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04456 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04457 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04458 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04459 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04460 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04461 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04462 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 352, ) }, ... 352, ) == 0x0 04463 456 NtClose (352, ... ) == 0x0 04464 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1217824, (0x100080, {24, 0, 0x40, 0, 1217824, "\??\SICE"}, 0x0, 128, 3, 1, 96, 0, 0, ... ) }, 0x0, 128, 3, 1, 96, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04465 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1217824, (0x100080, {24, 0, 0x40, 0, 1217824, "\??\NTICE"}, 0x0, 128, 3, 1, 96, 0, 0, ... ) }, 0x0, 128, 3, 1, 96, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04466 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1217824, (0x100080, {24, 0, 0x40, 0, 1217824, "\??\SIWDEBUG"}, 0x0, 128, 3, 1, 96, 0, 0, ... ) }, 0x0, 128, 3, 1, 96, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04467 456 NtCreateFile (0x100080, {24, 0, 0x40, 0, 1217824, (0x100080, {24, 0, 0x40, 0, 1217824, "\??\SIWVID"}, 0x0, 128, 3, 1, 96, 0, 0, ... ) }, 0x0, 128, 3, 1, 96, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04468 456 NtOpenEvent (0x100000, {24, 52, 0x0, 0, 0, (0x100000, {24, 52, 0x0, 0, 0, "Global\SvcctrlStartEvent_A3752DX"}, ... 352, ) }, ... 352, ) == 0x0 04469 456 NtWaitForSingleObject (352, 0, {-1800000000, -1}, ... ) == 0x0 04470 456 NtClose (352, ... ) == 0x0 04471 456 NtOpenThreadToken (-2, 0xc, 1, ... ) == STATUS_NO_TOKEN 04472 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 352, ) == 0x0 04473 456 NtOpenThreadToken (-2, 0xc, 1, ... ) == STATUS_NO_TOKEN 04474 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=0,}, 4, ... ) == 0x0 04475 456 NtCreateFile (0xc0100080, {24, 0, 0x40, 0, 1216276, (0xc0100080, {24, 0, 0x40, 0, 1216276, "\??\PIPE\svcctl"}, 0x0, 0, 3, 1, 4194368, 0, 0, ... 356, {status=0x0, info=1}, ) }, 0x0, 0, 3, 1, 4194368, 0, 0, ... 356, {status=0x0, info=1}, ) == 0x0 04476 456 NtSetInformationFile (356, 1216332, 8, Pipe, ... {status=0x0, info=0}, ) == 0x0 04477 456 NtSetInformationFile (356, 1216324, 8, Completion, ... {status=0x0, info=0}, ) == 0x0 04478 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=0,}, 4, ... ) == 0x0 04479 456 NtWriteFile (356, 309, 0, 0, (356, 309, 0, 0, "\5\0\13\3\20\0\0\0H\0\0\0\1\0\0\0\270\20\270\20\0\0\0\0\1\0\0\0\0\0\1\0\201\273z6D\230\3615\2552\230\3608\0\20\3\2\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", 72, {0, 0}, 0, ... {status=0x0, info=72}, ) , 72, {0, 0}, 0, ... {status=0x0, info=72}, ) == 0x0 04480 456 NtReadFile (356, 309, 0, 0, 1024, {0, 0}, 0, ... {status=0x0, info=68}, (356, 309, 0, 0, 1024, {0, 0}, 0, ... {status=0x0, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\247\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , ) == 0x0 04481 456 NtFsControlFile (356, 309, 0x0, 0x0, 0x11c017, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0@\0\0\0\1\0\0\0(\0\0\0\0\0\33\0\0\0\0\0\234`\254\0\17\0\0\0\0\0\0\0\17\0\0\0ServicesActive\0\21\0\0\0\200", 64, 1024, ... {status=0x103, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\247\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , 64, 1024, ... {status=0x103, info=68}, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0@\0\0\0\1\0\0\0(\0\0\0\0\0\33\0\0\0\0\0\234`\254\0\17\0\0\0\0\0\0\0\17\0\0\0ServicesActive\0\21\0\0\0\200", 64, 1024, ... {status=0x103, info=68}, "\5\0\14\3\20\0\0\0D\0\0\0\1\0\0\0\270\20\270\20\247\37\0\0\15\0\PIPE\ntsvcs\0\0\1\0\0\0\0\0\0\0\4]\210\212\353\34\311\21\237\350\10\0+\20H`\2\0\0\0", ) , ) == 0x103 04482 456 NtFsControlFile (356, 309, 0x0, 0x0, 0x11c017, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0D\0\0\0\2\0\0\0,\0\0\0\0\0\34\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305\6\0\0\0\0\0\0\0\6\0\0\0NTice\0\0\200\20\0\0\0", 68, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\1\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , 68, 1024, ... {status=0x103, info=48}, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0D\0\0\0\2\0\0\0,\0\0\0\0\0\34\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305\6\0\0\0\0\0\0\0\6\0\0\0NTice\0\0\200\20\0\0\0", 68, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\1\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305\0\0\0\0", ) , ) == 0x103 04483 456 NtFsControlFile (356, 309, 0x0, 0x0, 0x11c017, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\3\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\2\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\4\0\0", ) , 44, 1024, ... {status=0x103, info=48}, (356, 309, 0x0, 0x0, 0x11c017, "\5\0\0\3\20\0\0\0,\0\0\0\3\0\0\0\24\0\0\0\0\0\0\0\0\0\0\0\217\230M\326\211_\334\21\261\310\0\14)\371\246\305", 44, 1024, ... {status=0x103, info=48}, "\5\0\2\3\20\0\0\00\0\0\0\2\0\0\0\30\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\4\0\0", ) , ) == 0x103 04484 456 NtClose (352, ... ) == 0x0 04485 456 NtClose (356, ... ) == 0x0 04486 456 NtUserFindWindowEx (0, 0, (0, 0, "ThunderRT6FormDC", "Shareware Cheater v 3.0", 0, ... ) , (0, 0, "ThunderRT6FormDC", "Shareware Cheater v 3.0", 0, ... ) , 0, ... ) == 0x0 04487 456 NtUserFindWindowEx (0, 0, (0, 0, "ThunderRT6FormDC", 0x0, 0, ... ) , 0x0, 0, ... ) == 0x0 04488 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04489 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04490 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04491 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04492 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04493 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04494 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04495 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04496 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04497 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04498 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04499 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04500 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04501 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04502 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04503 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04504 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04505 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04506 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04507 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04508 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04509 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04510 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04511 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04512 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04513 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04514 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04515 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04516 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04517 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04518 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04519 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04520 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04521 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04522 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04523 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04524 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04525 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04526 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04527 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04528 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04529 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04530 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04531 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04532 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04533 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04534 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04535 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04536 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04537 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04538 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04539 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04540 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04541 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04542 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04543 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04544 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04545 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04546 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04547 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04548 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04549 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04550 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04551 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04552 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04553 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04554 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04555 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04556 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04557 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04558 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04559 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04560 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04561 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04562 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04563 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04564 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04565 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04566 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04567 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04568 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04569 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04570 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04571 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04572 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04573 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04574 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04575 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04576 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04577 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04578 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04579 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04580 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04581 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04582 456 NtOpenFile (0x80100000, {24, 0, 0x40, 0, 0, (0x80100000, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.INI"}, 7, 96, ... ) }, 7, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04583 456 NtClose (0, ... ) == STATUS_INVALID_HANDLE 04584 456 NtOpenProcessToken (-1, 0x8, ... 356, ) == 0x0 04585 456 NtQueryInformationToken (356, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 04586 456 NtClose (356, ... ) == 0x0 04587 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04588 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04589 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04590 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04591 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04592 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04593 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04594 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04595 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04596 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04597 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04598 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04599 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04600 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04601 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04602 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04603 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04604 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04605 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04606 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04607 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04608 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04609 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04610 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04611 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04612 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04613 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04614 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04615 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04616 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04617 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04618 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04619 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04620 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04621 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04622 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04623 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04624 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04625 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04626 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04627 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04628 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04629 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04630 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04631 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04632 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04633 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04634 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04635 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04636 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04637 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04638 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04639 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04640 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04641 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04642 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04643 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04644 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04645 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04646 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04647 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04648 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04649 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04650 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04651 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04652 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04653 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04654 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04655 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04656 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04657 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04658 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04659 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04660 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04661 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04662 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04663 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04664 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04665 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04666 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04667 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04668 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04669 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04670 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04671 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04672 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04673 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04674 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04675 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04676 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04677 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04678 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04679 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04680 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04681 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04682 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04683 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04684 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04685 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04686 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04687 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04688 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04689 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04690 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04691 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04692 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04693 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04694 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04695 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04696 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04697 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04698 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04699 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04700 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04701 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04702 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04703 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04704 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04705 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04706 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04707 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04708 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04709 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04710 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04711 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04712 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04713 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04714 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04715 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04716 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04717 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04718 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04719 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04720 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04721 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04722 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04723 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04724 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04725 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04726 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04727 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04728 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04729 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04730 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04731 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04732 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04733 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04734 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04735 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04736 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04737 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04738 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04739 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04740 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04741 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04742 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04743 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04744 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04745 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04746 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04747 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04748 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04749 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04750 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04751 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04752 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04753 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04754 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04755 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04756 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04757 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04758 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04759 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04760 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04761 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04762 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04763 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04764 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04765 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04766 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04767 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04768 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04769 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04770 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04771 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04772 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04773 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04774 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04775 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04776 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04777 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04778 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04779 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04780 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04781 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04782 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04783 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04784 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04785 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04786 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04787 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04788 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04789 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04790 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04791 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04792 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04793 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04794 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04795 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04796 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04797 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04798 456 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 15269888, 4096, ) == 0x0 04799 456 NtQueryPerformanceCounter (... {102095067, 0}, {3579545, 0}, ) == 0x0 04800 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04801 456 NtQueryPerformanceCounter (... {102095220, 0}, 0x0, ) == 0x0 04802 456 NtAllocateVirtualMemory (-1, 13176832, 0, 135168, 4096, 4, ... 13176832, 135168, ) == 0x0 04803 456 NtQueryPerformanceCounter (... {102095345, 0}, 0x0, ) == 0x0 04804 456 NtCreateFile (0x80100080, {24, 0, 0x42, 0, 1218028, (0x80100080, {24, 0, 0x42, 0, 1218028, "\??\C:\DOCUME~1\SRI-user\LOCALS~1\Temp\C6E3D063.RREF"}, 0x0, 128, 3, 1, 96, 0, 0, ... ) }, 0x0, 128, 3, 1, 96, 0, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04805 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 0, 0, (0x1f0001, {24, 52, 0x80, 0, 0, "3BBE6CE7::WK"}, 0, ... 356, ) }, 0, ... 356, ) == 0x0 04806 456 NtWaitForSingleObject (356, 0, {-30000000, -1}, ... ) == 0x0 04807 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04808 456 NtWaitForSingleObject (352, 0, {-150000000, -1}, ... ) == 0x0 04809 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04810 456 NtQueryValueKey (360, (360, "{IC6E3D0636B8B23B2}", Partial, 144, ... TitleIdx=0, Type=3, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (360, "{IC6E3D0636B8B23B2}", Partial, 144, ... TitleIdx=0, Type=3, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 04811 456 NtClose (360, ... ) == 0x0 04812 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04813 456 NtClose (352, ... ) == 0x0 04814 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04815 456 NtWaitForSingleObject (352, 0, {-50000000, -1}, ... ) == 0x0 04816 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04817 456 NtSetValueKey (360, (360, "{IC6E3D0636B8B23B2}", 0, 3, "\2\0\0\0", 4, ... ) , 0, 3, (360, "{IC6E3D0636B8B23B2}", 0, 3, "\2\0\0\0", 4, ... ) , 4, ... ) == 0x0 04818 456 NtClose (360, ... ) == 0x0 04819 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04820 456 NtClose (352, ... ) == 0x0 04821 456 NtCreateMutant (0x1f0001, {24, 52, 0x80, 11346568, 0, (0x1f0001, {24, 52, 0x80, 11346568, 0, "RAL3BBE6CE7"}, 0, ... 352, ) }, 0, ... 352, ) == 0x0 04822 456 NtWaitForSingleObject (352, 0, {-50000000, -1}, ... ) == 0x0 04823 456 NtOpenKey (0x20006, {24, 28, 0x40, 0, 0, (0x20006, {24, 28, 0x40, 0, 0, "Software\Licenses"}, ... 360, ) }, ... 360, ) == 0x0 04824 456 NtSetValueKey (360, (360, "{0C6E3D0636B8B23B2}", 0, 3, "V>\250\16\13\242\247\246A\6S\230]\277D\243\2754\222f\274\266\1\253\231\350\11\233\37\261R=~\343\13=!\316)\177\222\245c]\25\341\23\177\2\362\331I\242\203\307\240%1\17}\347*\326\35r\2322y7\271\323-\223\20\36\254~]o\213\37\12\357\243\34\277\262\224\216\177.\307*\225H]nX\330\226a\352", 102, ... ) , 0, 3, (360, "{0C6E3D0636B8B23B2}", 0, 3, "V>\250\16\13\242\247\246A\6S\230]\277D\243\2754\222f\274\266\1\253\231\350\11\233\37\261R=~\343\13=!\316)\177\222\245c]\25\341\23\177\2\362\331I\242\203\307\240%1\17}\347*\326\35r\2322y7\271\323-\223\20\36\254~]o\213\37\12\357\243\34\277\262\224\216\177.\307*\225H]nX\330\226a\352", 102, ... ) , 102, ... ) == 0x0 04825 456 NtClose (360, ... ) == 0x0 04826 456 NtReleaseMutant (352, ... 0x0, ) == 0x0 04827 456 NtClose (352, ... ) == 0x0 04828 456 NtReleaseMutant (356, ... 0x0, ) == 0x0 04829 456 NtClose (356, ... ) == 0x0 04830 456 NtUserRegisterWindowMessage ( ("ArmReReadMessage", ... ) , ... ) == 0xc0d5 04831 456 NtUserPostMessage (65535, 49365, 1002335463, 448, ... ) == 0x1 04832 456 NtFreeVirtualMemory (-1, (0xc91000), 135168, 16384, ... (0xc91000), 135168, ) == 0x0 04833 456 NtAllocateVirtualMemory (-1, 11460608, 0, 8192, 4096, 4, ... 11460608, 8192, ) == 0x0 04834 456 NtAllocateVirtualMemory (-1, 13176832, 0, 167936, 4096, 4, ... 13176832, 167936, ) == 0x0 04835 456 NtAllocateVirtualMemory (-1, 12402688, 0, 102400, 4096, 4, ... 12402688, 102400, ) == 0x0 04836 456 NtAllocateVirtualMemory (-1, 10031104, 0, 36864, 4096, 4, ... 10031104, 36864, ) == 0x0 04837 456 NtFreeVirtualMemory (-1, (0x991000), 36864, 16384, ... (0x991000), 36864, ) == 0x0 04838 456 NtProtectVirtualMemory (-1, (0x473000), 102400, 4, ... (0x473000), 102400, 128, ) == 0x0 04839 456 NtProtectVirtualMemory (-1, (0x473000), 102400, 128, ... (0x473000), 102400, 4, ) == 0x0 04840 456 NtAllocateVirtualMemory (-1, 10031104, 0, 36864, 4096, 4, ... 10031104, 36864, ) == 0x0 04841 456 NtFreeVirtualMemory (-1, (0x991000), 36864, 16384, ... (0x991000), 36864, ) == 0x0 04842 456 NtProtectVirtualMemory (-1, (0x48c000), 4096, 4, ... (0x48c000), 4096, 8, ) == 0x0 04843 456 NtProtectVirtualMemory (-1, (0x48c000), 4096, 8, ... (0x48c000), 4096, 4, ) == 0x0 04844 456 NtAllocateVirtualMemory (-1, 10031104, 0, 36864, 4096, 4, ... 10031104, 36864, ) == 0x0 04845 456 NtFreeVirtualMemory (-1, (0x991000), 36864, 16384, ... (0x991000), 36864, ) == 0x0 04846 456 NtProtectVirtualMemory (-1, (0x48c050), 16, 4, ... (0x48c000), 4096, 4, ) == 0x0 04847 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "MPR.dll"}, ... 356, ) }, ... 356, ) == 0x0 04848 456 NtMapViewOfSection (356, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71b20000), 0x0, 69632, ) == 0x0 04849 456 NtClose (356, ... ) == 0x0 04850 456 NtCreateSemaphore (0x1f0003, 0x0, 1, 1, ... 356, ) == 0x0 04851 456 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 352, ) == 0x0 04852 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "system\CurrentControlSet\control\NetworkProvider\HwOrder"}, ... 360, ) }, ... 360, ) == 0x0 04853 456 NtNotifyChangeKey (360, 352, 0, 0, 2011390432, 4, 0, 0, 0, 1, ... ) == 0x103 04854 456 NtQueryInformationProcess (-1, 28, 4, ... {process info, class 28, size 4}, 0x0, ) == 0x0 04855 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 368, ) == 0x0 04856 456 NtCreateSemaphore (0x100003, 0x0, 0, 2147483647, ... 364, ) == 0x0 04857 456 NtProtectVirtualMemory (-1, (0x48c060), 8, 4, ... (0x48c000), 4096, 4, ) == 0x0 04858 456 NtProtectVirtualMemory (-1, (0x48c068), 8, 4, ... (0x48c000), 4096, 4, ) == 0x0 04859 456 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1217272, (0x80100080, {24, 0, 0x40, 0, 1217272, "\??\u:\work\packed.exe"}, 0x0, 0, 1, 1, 100, 0, 0, ... 372, {status=0x0, info=1}, ) }, 0x0, 0, 1, 1, 100, 0, 0, ... 372, {status=0x0, info=1}, ) == 0x0 04860 456 NtQueryInformationFile (372, 1217324, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 04861 456 NtClose (372, ... ) == 0x0 04862 456 NtProtectVirtualMemory (-1, (0x400000), 64, 4, ... (0x400000), 4096, 2, ) == 0x0 04863 456 NtProtectVirtualMemory (-1, (0x400000), 64, 2, ... (0x400000), 4096, 4, ) == 0x0 04864 456 NtProtectVirtualMemory (-1, (0x52e446), 99685, 4, ... (0x52e000), 102400, 4, ) == 0x0 04865 456 NtProtectVirtualMemory (-1, (0x52e446), 99685, 4, ... (0x52e000), 102400, 4, ) == 0x0 04866 456 NtProtectVirtualMemory (-1, (0x400000), 64, 4, ... (0x400000), 4096, 2, ) == 0x0 04867 456 NtProtectVirtualMemory (-1, (0x400000), 64, 2, ... (0x400000), 4096, 4, ) == 0x0 04868 456 NtProtectVirtualMemory (-1, (0x4000d8), 248, 4, ... (0x400000), 4096, 2, ) == 0x0 04869 456 NtProtectVirtualMemory (-1, (0x4000d8), 248, 2, ... (0x400000), 4096, 4, ) == 0x0 04870 456 NtOpenThreadToken (-2, 0x28, 0, ... ) == STATUS_NO_TOKEN 04871 456 NtOpenProcessToken (-1, 0x2, ... 372, ) == 0x0 04872 456 NtDuplicateToken (372, 0x4, {24, 0, 0x0, 0, 1239980, 0x0}, 0, 2, ... 376, ) == 0x0 04873 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=376,}, 4, ... ) == 0x0 04874 456 NtClose (376, ... ) == 0x0 04875 456 NtClose (372, ... ) == 0x0 04876 456 NtOpenThreadToken (-2, 0x28, 0, ... 372, ) == 0x0 04877 456 NtAdjustPrivilegesToken (372, 0, 1401500, 1024, 1400476, 1240024, ... ) == 0x0 04878 456 NtSetInformationProcess (-1, QuotaLimits, {process info, class 1, size 32}, 32, ... ) == 0x0 04879 456 NtClose (372, ... ) == 0x0 04880 456 NtSetInformationThread (-2, ImpersonationToken, {ImpToken=0,}, 4, ... ) == 0x0 04881 456 NtProtectVirtualMemory (-1, (0x48c068), 8, 4, ... (0x48c000), 4096, 4, ) == 0x0 04882 456 NtProtectVirtualMemory (-1, (0x48c060), 8, 4, ... (0x48c000), 4096, 4, ) == 0x0 04883 456 NtProtectVirtualMemory (-1, (0x48c050), 16, 4, ... (0x48c000), 4096, 4, ) == 0x0 04884 456 NtDuplicateObject (-1, -2, -1, 0x0, 0, 2, ... 372, ) == 0x0 04885 456 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 376, ) == 0x0 04886 456 NtUserRegisterWindowMessage ( ("ArmReReadMessage", ... ) , ... ) == 0xc0d5 04887 456 NtUserRegisterWindowMessage ( ("CommandLine", ... ) , ... ) == 0xc0d6 04888 456 NtUserRegisterClassExWOW (1242396, 1242472, 1242488, 1242460, 0, 386, 0, ... ) == 0x810cc0d7 04889 456 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 15335424, 1048576, ) == 0x0 04890 456 NtAllocateVirtualMemory (-1, 16375808, 0, 8192, 4096, 4, ... 16375808, 8192, ) == 0x0 04891 456 NtProtectVirtualMemory (-1, (0xf9e000), 4096, 260, ... (0xf9e000), 4096, 4, ) == 0x0 04892 456 NtCreateThread (0x1f03ff, 0x0, -1, 1242072, 1242788, 1, ... 380, {448, 1112}, ) == 0x0 04893 456 NtQueryInformationThread (380, Basic, 28, ... {ExitStatus=0x103,TebBaseAddress=0x7ffdd000,Pid=448,Tid=1112,}, 0x0, ) == 0x0 04894 456 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1315512, 2012550797, 0, 512} (24, {28, 56, new_msg, 0, 1315512, 2012550797, 0, 512} "\0\0\0\0\1\0\1\0\261\236\7}D\223\17\360|\1\0\0\300\1\0\0X\4\0\0" ... {28, 56, reply, 0, 448, 456, 1556, 0} "\0\0\0\0\1\0\1\0\0\0\0\0D\223\17\360|\1\0\0\300\1\0\0X\4\0\0" ) ... {28, 56, reply, 0, 448, 456, 1556, 0} (24, {28, 56, new_msg, 0, 1315512, 2012550797, 0, 512} "\0\0\0\0\1\0\1\0\261\236\7}D\223\17\360|\1\0\0\300\1\0\0X\4\0\0" ... {28, 56, reply, 0, 448, 456, 1556, 0} "\0\0\0\0\1\0\1\0\0\0\0\0D\223\17\360|\1\0\0\300\1\0\0X\4\0\0" ) ) == 0x0 04895 456 NtResumeThread (380, ... 1, ) == 0x0 04896 456 NtClose (380, ... ) == 0x0 04897 456 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 04898 456 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 04899 1112 NtTestAlert (... ) == 0x0 04900 1112 NtContinue (16383280, 1, ... 04901 1112 NtRegisterThreadTerminatePort (24, ... ) == 0x0 04902 1112 NtQueryInformationProcess (-1, Basic, 24, ... {ExitStatus=0x103,PebBaseAddress=0x7ffdf000,AffinityMask=0x1,BasePriority=8,Pid=448,ParentPid=148,}, 0x0, ) == 0x0 04903 1112 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 380, ) == 0x0 04904 1112 NtCallbackReturn (0, 0, 0, ... 04905 1112 NtUserWaitForInputIdle (448, 2000, 0, ... 04898 456 NtAllocateVirtualMemory ... 16384000, 65536, ) == 0x0 04906 456 NtAllocateVirtualMemory (-1, 16384000, 0, 4096, 4096, 4, ... 16384000, 4096, ) == 0x0 04907 456 NtAllocateVirtualMemory (-1, 16388096, 0, 20480, 4096, 4, ... 16388096, 20480, ) == 0x0 04908 456 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 16449536, 1048576, ) == 0x0 04909 456 NtAllocateVirtualMemory (-1, 16449536, 0, 32768, 4096, 4, ... 16449536, 32768, ) == 0x0 04910 456 NtContinue (1240736, 0, ... 04911 456 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "wininet.dll"}, ... 384, ) }, ... 384, ) == 0x0 04912 1112 NtCreateEvent (0x1f0003, 0x0, 0, 0, ... 388, ) == 0x0 04913 1112 NtClose (388, ... ) == 0x0 04914 456 NtMapViewOfSection (384, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76200000), 0x0, 618496, ) == 0x0 04915 456 NtClose (384, ... ) == 0x0 04916 456 NtCreateKey (0xf003f, {24, 56, 0x40, 0, 0, (0xf003f, {24, 56, 0x40, 0, 0, "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History"}, 0, 0x0, 0, ... 384, 2, ) }, 0, 0x0, 0, ... 384, 2, ) == 0x0 04917 456 NtQueryDefaultUILanguage (1236612, ... 04918 456 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 04919 456 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482032, ) == 0x0 04920 456 NtQueryInformationToken (-2147482032, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 04921 456 NtClose (-2147482032, ... ) == 0x0 04922 456 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0 04923 456 NtOpenKey (0x80000000, {24, 0, 0x240, 0, 0, (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04924 456 NtOpenKey (0x80000000, {24, -2147482032, 0x640, 0, 0, (0x80000000, {24, -2147482032, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482044, ) }, ... -2147482044, ) == 0x0 04925 456 NtQueryValueKey (-2147482044, (-2147482044, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04926 456 NtClose (-2147482044, ... ) == 0x0 04927 456 NtClose (-2147482032, ... ) == 0x0 04917 456 NtQueryDefaultUILanguage ... ) == 0x0 04928 456 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04929 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\wininet.dll"}, 1, 96, ... 388, {status=0x0, info=1}, ) }, 1, 96, ... 388, {status=0x0, info=1}, ) == 0x0 04930 456 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 388, ... 392, ) == 0x0 04931 456 NtMapViewOfSection (392, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x10b0000), 0x0, 593920, ) == 0x0 04932 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\wininet.dll.123.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04933 456 NtQueryDefaultLocale (1, 1234648, ... ) == 0x0 04934 456 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\wininet.dll.123.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04935 456 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 1235504, 1, 96, 0} (24, {128, 156, new_msg, 0, 1235504, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\335\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1\204\1\0\0\377\377\377\377\0\0\0\0P\275\22\1\0\0\0\0\312\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\00\341\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1557, 0} " S\26\0\33\0\1\0\0\0\0\0\1\335\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1\204\1\0\0\377\377\377\377\0\0\0\0P\275\22\1\0\0\0\0\312\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\00\341\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 448, 456, 1557, 0} (24, {128, 156, new_msg, 0, 1235504, 1, 96, 0} "\210\6\36\1\33\0\1\0\0\0\0\0\1\335\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1\204\1\0\0\377\377\377\377\0\0\0\0P\275\22\1\0\0\0\0\312\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\00\341\22\0\0\0\0\0" ... {128, 156, reply, 0, 448, 456, 1557, 0} " S\26\0\33\0\1\0\0\0\0\0\1\335\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\36\1\204\1\0\0\377\377\377\377\0\0\0\0P\275\22\1\0\0\0\0\312\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\36\1\0\0\0\0\0\0\0\00\341\22\0\0\0\0\0" ) ) == 0x0 04936 456 NtClose (388, ... ) == 0x0 04937 456 NtClose (392, ... ) == 0x0 04938 456 NtUnmapViewOfSection (-1, 0x10b0000, ... ) == 0x0 04939 456 NtUnmapViewOfSection (-1, 0x12e130, ... ) == STATUS_NOT_MAPPED_VIEW 04940 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04941 456 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04942 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04943 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04944 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1233188, ... ) }, 1233188, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04945 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04946 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04947 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04948 456 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1233780, ... ) }, 1233780, ... ) == 0x0 04949 456 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 392, {status=0x0, info=1}, ) }, 3, 33, ... 392, {status=0x0, info=1}, ) == 0x0 04950 456 NtQueryDebugFilterState (53, 2, ... ) == 0x0 04951 456 NtCreateKey (0x2001f, {24, 56, 0x40, 0, 0, (0x2001f, {24, 56, 0x40, 0, 0, "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings"}, 0, 0x0, 0, ... 388, 2, ) }, 0, 0x0, 0, ... 388, 2, ) == 0x0 04952 456 NtQueryValueKey (388, (388, "FromCacheTimeout", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04953 456 NtQueryValueKey (388, (388, "SecureProtocols", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04954 456 NtQueryValueKey (388, (388, "CertificateRevocation", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04955 456 NtQueryValueKey (388, (388, "DisableKeepAlive", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04956 456 NtQueryValueKey (388, (388, "DisablePassport", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04957 456 NtQueryValueKey (388, (388, "CacheMode", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04958 456 NtQueryValueKey (388, (388, "EnableHttp1_1", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (388, "EnableHttp1_1", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 04959 456 NtQueryValueKey (388, (388, "ProxyHttp1.1", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04960 456 NtQueryValueKey (388, (388, "EnableNegotiate", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (388, "EnableNegotiate", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 04961 456 NtOpenEvent (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\SECURITY\LSA_AUTHENTICATION_INITIALIZED"}, ... 396, ) }, ... 396, ) == 0x0 04962 456 NtQueryEvent (396, Basic, 8, ... {EventType=0,SignalState=1,}, 0x0, ) == 0x0 04963 456 NtClose (396, ... ) == 0x0 04964 456 NtConnectPort ( ("\LsaAuthenticationPort", {12, 2, 1, 0}, 0x0, 0x0, 1239216, 140, ... 396, 0x0, 0x0, 256, 140, ) , {12, 2, 1, 0}, 0x0, 0x0, 1239216, 140, ... 396, 0x0, 0x0, 256, 140, ) == 0x0 04965 456 NtRequestWaitReplyPort (396, {28, 52, new_msg, 0, 0, 0, 0, 0} (396, {28, 52, new_msg, 0, 0, 0, 0, 0} "\37\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\1\0\13\30\10\2XV\25\0" ... {176, 200, reply, 0, 448, 456, 1559, 0} "\37\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\1\0\20\0\10\2\220\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0S\0R\0I\0-\0u\0s\0e\0r\0" ) ... {176, 200, reply, 0, 448, 456, 1559, 0} (396, {28, 52, new_msg, 0, 0, 0, 0, 0} "\37\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\1\0\13\30\10\2XV\25\0" ... {176, 200, reply, 0, 448, 456, 1559, 0} "\37\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\1\0\20\0\10\2\220\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0S\0R\0I\0-\0u\0s\0e\0r\0" ) ) == 0x0 04966 456 NtQueryValueKey (388, (388, "SyncMode5", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04967 456 NtOpenKey (0xf, {24, 28, 0x40, 0, 0, (0xf, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache"}, ... 400, ) }, ... 400, ) == 0x0 04968 456 NtQueryValueKey (400, (400, "FixupKey", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04969 456 NtClose (400, ... ) == 0x0 04970 456 NtOpenKey (0xf, {24, 28, 0x40, 0, 0, (0xf, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache"}, ... 400, ) }, ... 400, ) == 0x0 04971 456 NtQueryValueKey (400, (400, "SessionStartTimeDefaultDeltaSecs", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 04972 456 NtClose (400, ... ) == 0x0 04973 456 NtOpenKey (0xf, {24, 28, 0x40, 0, 0, (0xf, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache"}, ... 400, ) }, ... 400, ) == 0x0 04974 456 NtOpenKey (0x20019, {24, 28, 0x40, 0, 0, (0x20019, {24, 28, 0x40, 0, 0, "System\Setup"}, ... 404, ) }, ... 404, ) == 0x0 04975 456 NtQueryValueKey (404, (404, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (404, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 04976 456 NtClose (404, ... ) == 0x0 04977 456 NtOpenKey (0xf, {24, 56, 0x40, 0, 0, (0xf, {24, 56, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"}, ... 404, ) }, ... 404, ) == 0x0 04978 456 NtOpenKey (0xf, {24, 56, 0x40, 0, 0, (0xf, {24, 56, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache"}, ... 408, ) }, ... 408, ) == 0x0 04979 456 NtOpenKey (0xf, {24, 56, 0x40, 0, 0, (0xf, {24, 56, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"}, ... 412, ) }, ... 412, ) == 0x0 04980 456 NtOpenKey (0xf, {24, 56, 0x40, 0, 0, (0xf, {24, 56, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache"}, ... 416, ) }, ... 416, ) == 0x0 04981 456 NtQueryValueKey (416, (416, "Signature", Partial, 144, ... TitleIdx=0, Type=1, Data="C\0l\0i\0e\0n\0t\0 \0U\0r\0l\0C\0a\0c\0h\0e\0 \0M\0M\0F\0 \0V\0e\0r\0 \05\0.\02\0\0\0"}, 68, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (416, "Signature", Partial, 144, ... TitleIdx=0, Type=1, Data="C\0l\0i\0e\0n\0t\0 \0U\0r\0l\0C\0a\0c\0h\0e\0 \0M\0M\0F\0 \0V\0e\0r\0 \05\0.\02\0\0\0"}, 68, ) }, 68, ) == 0x0 04982 456 NtQueryValueKey (416, (416, "Signature", Partial, 144, ... TitleIdx=0, Type=1, Data="C\0l\0i\0e\0n\0t\0 \0U\0r\0l\0C\0a\0c\0h\0e\0 \0M\0M\0F\0 \0V\0e\0r\0 \05\0.\02\0\0\0"}, 68, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (416, "Signature", Partial, 144, ... TitleIdx=0, Type=1, Data="C\0l\0i\0e\0n\0t\0 \0U\0r\0l\0C\0a\0c\0h\0e\0 \0M\0M\0F\0 \0V\0e\0r\0 \05\0.\02\0\0\0"}, 68, ) }, 68, ) == 0x0 04983 456 NtClose (416, ... ) == 0x0 04984 456 NtOpenKey (0xf, {24, 56, 0x40, 0, 0, (0xf, {24, 56, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"}, ... 416, ) }, ... 416, ) == 0x0 04985 456 NtQueryValueKey (416, (416, "Cache", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0L\0o\0c\0a\0l\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0T\0e\0m\0p\0o\0r\0a\0r\0y\0 \0I\0n\0t\0e\0r\0n\0e\0t\0 \0F\0i\0l\0e\0s\0\0\0"}, 120, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (416, "Cache", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0L\0o\0c\0a\0l\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0T\0e\0m\0p\0o\0r\0a\0r\0y\0 \0I\0n\0t\0e\0r\0n\0e\0t\0 \0F\0i\0l\0e\0s\0\0\0"}, 120, ) }, 120, ) == 0x0 04986 456 NtQueryValueKey (416, (416, "Cache", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0L\0o\0c\0a\0l\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0T\0e\0m\0p\0o\0r\0a\0r\0y\0 \0I\0n\0t\0e\0r\0n\0e\0t\0 \0F\0i\0l\0e\0s\0\0\0"}, 120, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (416, "Cache", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0L\0o\0c\0a\0l\0 \0S\0e\0t\0t\0i\0n\0g\0s\0\\0T\0e\0m\0p\0o\0r\0a\0r\0y\0 \0I\0n\0t\0e\0r\0n\0e\0t\0 \0F\0i\0l\0e\0s\0\0\0"}, 120, ) }, 120, ) == 0x0 04987 456 NtQueryValueKey (416, (416, "Cookies", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0C\0o\0o\0k\0i\0e\0s\0\0\0"}, 56, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (416, "Cookies", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0C\0o\0o\0k\0i\0e\0s\0\0\0"}, 56, ) }, 56, ) == 0x0 04988 456 NtQueryValueKey (416, (416, "Cookies", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0C\0o\0o\0k\0i\0e\0s\0\0\0"}, 56, ) , Partial, 144, ... TitleIdx=0, Type=2, Data= (416, "Cookies", Partial, 144, ... TitleIdx=0, Type=2, Data="%\0U\0S\0E\0R\0P\0R\0O\0F\0I\0L\0E\0%\0\\0C\0o\0o\0k\0i\0e\0s\0\0\0"}, 56, ) }, 56, ) == 0x0