Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 25 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 46 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 46 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 13 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   432   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   432   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   432   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   432   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   432   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   432   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   432   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   432   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   432   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   432   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   432   NtClose  (12, ... ) == 0x0
 00014   432   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   432   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   432   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   432   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   432   NtClose  (16, ... ) == 0x0
 00021   432   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   432   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   432   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18284544}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18284544}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   432   NtClose  (16, ... ) == 0x0
 00026   432   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   432   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   432   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   432   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   432   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\27\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\27\1\4\0\0\0" ... {28, 56, reply, 0, 428, 432, 1518, 0} "\360L\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\27\1\4\0\0\0" )  ... {28, 56, reply, 0, 428, 432, 1518, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\27\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\27\1\4\0\0\0" ... {28, 56, reply, 0, 428, 432, 1518, 0} "\360L\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\27\1\4\0\0\0" )  ) == 0x0
 00032   432   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   432   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   432   NtClose  (16, ... ) == 0x0
 00036   432   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   432   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   432   NtClose  (28, ... ) == 0x0
 00041   432   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   432   NtClose  (28, ... ) == 0x0
 00045   432   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   432   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   432   NtClose  (28, ... ) == 0x0
 00049   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   432   NtClose  (28, ... ) == 0x0
 00052   432   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   432   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\27\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\27\18\6\0\0" ... {28, 56, reply, 0, 428, 432, 1524, 0} "\260.\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\27\18\6\0\0" )  ... {28, 56, reply, 0, 428, 432, 1524, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\27\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\27\18\6\0\0" ... {28, 56, reply, 0, 428, 432, 1524, 0} "\260.\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\27\18\6\0\0" )  ) == 0x0
 00056   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   432   NtClose  (28, ... ) == 0x0
 00062   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   432   NtClose  (28, ... ) == 0x0
 00065   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   432   NtClose  (28, ... ) == 0x0
 00068   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   432   NtClose  (28, ... ) == 0x0
 00071   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   432   NtClose  (28, ... ) == 0x0
 00080   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   432   NtClose  (28, ... ) == 0x0
 00083   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   432   NtClose  (28, ... ) == 0x0
 00086   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   432   NtClose  (28, ... ) == 0x0
 00095   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   432   NtClose  (28, ... ) == 0x0
 00098   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   432   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   432   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   432   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   432   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   432   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   432   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   432   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   432   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   432   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   432   NtClose  (40, ... ) == 0x0
 00115   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   432   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   432   NtClose  (40, ... ) == 0x0
 00119   432   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   432   NtClose  (36, ... ) == 0x0
 00121   432   NtClose  (28, ... ) == 0x0
 00122   432   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   432   NtClose  (32, ... ) == 0x0
 00124   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   432   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   432   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   432   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   432   NtClose  (32, ... ) == 0x0
 00132   432   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   432   NtClose  (28, ... ) == 0x0
 00134   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   432   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   432   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   432   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   432   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   432   NtClose  (28, ... ) == 0x0
 00146   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   432   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   432   NtClose  (28, ... ) == 0x0
 00149   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   432   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   432   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   432   NtClose  (28, ... ) == 0x0
 00153   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   432   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   432   NtClose  (28, ... ) == 0x0
 00156   432   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   432   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   432   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   432   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\27\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\27\1$\1\0\0" ... {28, 56, reply, 0, 428, 432, 1556, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\27\1$\1\0\0" )  ... {28, 56, reply, 0, 428, 432, 1556, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\27\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\27\1$\1\0\0" ... {28, 56, reply, 0, 428, 432, 1556, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\27\1$\1\0\0" )  ) == 0x0
 00161   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   432   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   432   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   432   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   432   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   432   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   432   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   432   NtClose  (-2147482020, ... ) == 0x0
 00169   432   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   432   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   432   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   432   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   432   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   432   NtClose  (-2147482020, ... ) == 0x0
 00175   432   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   432   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   432   NtClose  (-2147482020, ... ) == 0x0
 00178   432   NtQueryDefaultLocale  (0, -136312308, ... ) == 0x0
 00179   432   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   432   NtUserCallNoParam  (24, ... ) == 0x0
 00181   432   NtGdiCreateCompatibleDC  (0, ...
 00182   432   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   432   NtGdiCreateCompatibleDC  ... ) == 0xb010482
 00183   432   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   432   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   432   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0x8050485
 00186   432   NtGdiCreateSolidBrush  (0, 0, ...
 00187   432   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   432   NtGdiCreateSolidBrush  ... ) == 0x6100486
 00188   432   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   432   NtGdiCreateCompatibleDC  (0, ... ) == 0x6010487
 00190   432   NtGdiSelectBitmap  (100729991, 134546565, ... ) == 0x185000f
 00191   432   NtUserGetThreadDesktop  (432, 0, ... ) == 0x2c
 00192   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   432   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   432   NtClose  (52, ... ) == 0x0
 00195   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810cc017
 00197   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810cc01c
 00199   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810cc01e
 00201   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810c8002
 00203   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810cc018
 00205   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810cc01a
 00207   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810cc01d
 00209   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810cc026
 00211   432   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   432   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810cc019
 00213   432   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc020
 00214   432   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc022
 00215   432   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc023
 00216   432   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc024
 00217   432   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00218   432   NtAllocateVirtualMemory  (-1, 6074368, 0, 4096, 4096, 32, ... 6074368, 4096, ) == 0x0
 00217   432   NtUserRegisterClassExWOW  ... ) == 0x810cc025
 00219   432   NtCallbackReturn  (0, 0, 0, ...
 00220   432   NtGdiInit  (... ) == 0x1
 00221   432   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   432   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   432   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   432   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   432   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   432   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   432   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   432   NtClose  (52, ... ) == 0x0
 00230   432   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   432   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   432   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   432   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   432   NtClose  (52, ... ) == 0x0
 00236   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   432   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   432   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   432   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   432   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   432   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   432   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   432   NtClose  (52, ... ) == 0x0
 00246   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   432   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   432   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   432   NtClose  (52, ... ) == 0x0
 00250   432   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   432   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   432   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   432   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   432   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   432   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   432   NtClose  (56, ... ) == 0x0
 00258   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   432   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   432   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   432   NtClose  (56, ... ) == 0x0
 00263   432   NtQueryDefaultUILanguage  (1241756, ...
 00264   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   432   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   432   NtClose  (-2147482020, ... ) == 0x0
 00268   432   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   432   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   432   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   432   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   432   NtClose  (-2147482032, ... ) == 0x0
 00273   432   NtClose  (-2147482020, ... ) == 0x0
 00263   432   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   432   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   432   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   432   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   432   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   432   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   432   NtQueryDefaultUILanguage  (2013024600, ...
 00281   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   432   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   432   NtClose  (-2147482020, ... ) == 0x0
 00285   432   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   432   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   432   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   432   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   432   NtClose  (-2147482032, ... ) == 0x0
 00290   432   NtClose  (-2147482020, ... ) == 0x0
 00280   432   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   432   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   432   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   432   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   432   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   432   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\27\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\27\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\27\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 428, 432, 1557, 0} " S\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\27\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\27\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 428, 432, 1557, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\27\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\27\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\27\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 428, 432, 1557, 0} " S\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\27\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\27\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   432   NtClose  (56, ... ) == 0x0
 00297   432   NtClose  (60, ... ) == 0x0
 00298   432   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   432   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   432   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   432   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   432   NtClose  (56, ... ) == 0x0
 00314   432   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   432   NtClose  (64, ... ) == 0x0
 00316   432   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   432   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   432   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   432   NtClose  (64, ... ) == 0x0
 00321   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   432   NtClose  (56, ... ) == 0x0
 00323   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   432   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   432   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   432   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   432   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   432   NtQueryDefaultUILanguage  (1239368, ...
 00346   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   432   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   432   NtClose  (-2147482020, ... ) == 0x0
 00350   432   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   432   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   432   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   432   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   432   NtClose  (-2147482032, ... ) == 0x0
 00355   432   NtClose  (-2147482020, ... ) == 0x0
 00345   432   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   432   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   432   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   432   NtClose  (56, ... ) == 0x0
 00361   432   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   432   NtClose  (64, ... ) == 0x0
 00363   432   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   432   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   432   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   432   NtClose  (64, ... ) == 0x0
 00368   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   432   NtClose  (56, ... ) == 0x0
 00370   432   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   432   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   432   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   432   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   432   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   432   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   432   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\27\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\27\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\27\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 428, 432, 1558, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\27\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\27\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 428, 432, 1558, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\27\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\27\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\27\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 428, 432, 1558, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\27\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\27\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   432   NtClose  (56, ... ) == 0x0
 00378   432   NtClose  (64, ... ) == 0x0
 00379   432   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   432   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   432   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   432   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   432   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   432   NtUserGetDC  (0, ... ) == 0x1010054
 00385   432   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00386   432   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   432   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   432   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   432   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   432   NtClose  (64, ... ) == 0x0
 00391   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   432   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   432   NtClose  (64, ... ) == 0x0
 00395   432   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   432   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   432   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   432   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   432   NtClose  (56, ... ) == 0x0
 00400   432   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   432   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   432   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   432   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   432   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   432   NtClose  (68, ... ) == 0x0
 00407   432   NtClose  (56, ... ) == 0x0
 00408   432   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   432   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   432   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   432   NtClose  (56, ... ) == 0x0
 00413   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03b
 00415   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03d
 00416   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc03f
 00418   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc041
 00420   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc043
 00422   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc045
 00423   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc047
 00425   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc049
 00427   432   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04b
 00430   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04d
 00432   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04f
 00434   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc051
 00435   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc053
 00437   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc055
 00439   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc057
 00440   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc059
 00442   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05b
 00444   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05d
 00446   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05f
 00448   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc017
 00450   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc019
 00452   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc018
 00454   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01a
 00456   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   432   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc01c
 00458   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01e
 00460   432   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00461   432   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810cc01b
 00462   432   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00463   432   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810cc068
 00464   432   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00465   432   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc06a
 00466   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00467   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00468   432   NtClose  (56, ... ) == 0x0
 00469   432   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {428, 0}, ... 56, ) == 0x0
 00470   432   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00471   432   NtClose  (56, ... ) == 0x0
 00472   432   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00473   432   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00474   432   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00475   432   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00476   432   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00477   432   NtClose  (56, ... ) == 0x0
 00478   432   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00479   432   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00480   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00481   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00482   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ...
 00483   432   NtAllocateVirtualMemory  (-1, 6078464, 0, 4096, 4096, 32, ... 6078464, 4096, ) == 0x0
 00482   432   NtUserRegisterClassExWOW  ... ) == 0x810cc03b
 00484   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03d
 00486   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03f
 00489   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc041
 00492   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc043
 00495   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc045
 00497   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc047
 00500   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   432   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   432   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810cc049
 00503   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04b
 00506   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04d
 00509   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04f
 00512   432   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   432   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810cc051
 00514   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc053
 00517   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc055
 00520   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc057
 00521   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc059
 00524   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05b
 00527   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05d
 00530   432   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   432   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   432   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05f
 00533   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   432   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   432   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   432   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   432   NtTestAlert  (... ) == 0x0
 00554   432   NtContinue  (1244464, 1, ...
 00555   432   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   432   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   432   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   432   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   432   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   432   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   432   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   432   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   432   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   432   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   432   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   432   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   432   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   432   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   432   NtClose  (56, ... ) == 0x0
 00572   432   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   432   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   432   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   432   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   432   NtClose  (56, ... ) == 0x0
 00580   432   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   432   NtClose  (68, ... ) == 0x0
 00582   432   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   432   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   432   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   432   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   432   NtClose  (68, ... ) == 0x0
 00587   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   432   NtReleaseMutant  (16, ...
 00589   432   NtContinue  (-136314744, 0, ...
 00588   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   432   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   432   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   432   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   432   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   432   NtUserCallNoParam  (29, ...
 00595   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   432   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   432   NtClose  (68, ... ) == 0x0
 00599   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   432   NtClose  (56, ... ) == 0x0
 00601   432   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   432   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   432   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   432   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   432   NtClose  (56, ... ) == 0x0
 00607   432   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   432   NtClose  (68, ... ) == 0x0
 00609   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00610   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00611   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   432   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   432   NtClose  (68, ... ) == 0x0
 00615   432   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   432   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   432   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   432   NtClose  (56, ... ) == 0x0
 00619   432   NtClose  (68, ... ) == 0x0
 00620   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   432   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   432   NtClose  (68, ... ) == 0x0
 00624   432   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   432   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   432   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   432   NtClose  (56, ... ) == 0x0
 00628   432   NtClose  (68, ... ) == 0x0
 00629   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   432   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   432   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   432   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   432   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   432   NtUserGetGUIThreadInfo  (432, 1244344, ... ) == 0x1
 00636   432   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   432   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1560, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 428, 432, 1560, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1560, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   432   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1561, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 428, 432, 1561, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1561, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   432   NtUserCallNoParam  (29, ...
 00640   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   432   NtUserCallNoParam  ... ) == 0x0
 00641   432   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   432   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x70a0488
 00643   432   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0x10a0489
 00644   432   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1562, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 428, 432, 1562, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 428, 432, 1562, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   432   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00647   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00648   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00649   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00650   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00651   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00652   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00653   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00654   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00655   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00656   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00657   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00658   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00659   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00660   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00661   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00662   432   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00663   432   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0x110048b
 00664   432   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00665   432   NtUserCallNoParam  (29, ...
 00666   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   432   NtUserCallNoParam  ... ) == 0x0
 00667   432   NtUserCallNoParam  (29, ...
 00668   432   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   432   NtUserCallNoParam  ... ) == 0x0
 00594   432   NtUserCallNoParam  ... ) == 0x1
 00669   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   432   NtReleaseMutant  (16, ...
 00671   432   NtContinue  (-136314744, 0, ...
 00670   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   432   NtReleaseMutant  (16, ...
 00674   432   NtContinue  (-136314744, 0, ...
 00673   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   432   NtReleaseMutant  (16, ...
 00677   432   NtContinue  (-136314744, 0, ...
 00676   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   432   NtReleaseMutant  (16, ...
 00680   432   NtContinue  (-136314744, 0, ...
 00679   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   432   NtReleaseMutant  (16, ...
 00683   432   NtContinue  (-136314744, 0, ...
 00682   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   432   NtReleaseMutant  (16, ...
 00686   432   NtContinue  (-136314744, 0, ...
 00685   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   432   NtReleaseMutant  (16, ...
 00689   432   NtContinue  (-136314744, 0, ...
 00688   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   432   NtReleaseMutant  (16, ...
 00692   432   NtContinue  (-136314744, 0, ...
 00691   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   432   NtReleaseMutant  (16, ...
 00695   432   NtContinue  (-136314744, 0, ...
 00694   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   432   NtReleaseMutant  (16, ...
 00698   432   NtContinue  (-136314744, 0, ...
 00697   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   432   NtReleaseMutant  (16, ...
 00701   432   NtContinue  (-136314744, 0, ...
 00700   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   432   NtReleaseMutant  (16, ...
 00704   432   NtContinue  (-136314744, 0, ...
 00703   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   432   NtReleaseMutant  (16, ...
 00707   432   NtContinue  (-136314744, 0, ...
 00706   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   432   NtReleaseMutant  (16, ...
 00710   432   NtContinue  (-136314744, 0, ...
 00709   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   432   NtReleaseMutant  (16, ...
 00713   432   NtContinue  (-136314744, 0, ...
 00712   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   432   NtReleaseMutant  (16, ...
 00716   432   NtContinue  (-136314744, 0, ...
 00715   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   432   NtReleaseMutant  (16, ...
 00719   432   NtContinue  (-136314744, 0, ...
 00718   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   432   NtReleaseMutant  (16, ...
 00722   432   NtContinue  (-136314744, 0, ...
 00721   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   432   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   432   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   432   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   432   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   432   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   432   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   432   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   432   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   432   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   432   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   432   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   432   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   432   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   432   NtClose  (88, ... ) == 0x0
 00741   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   432   NtClose  (88, ... ) == 0x0
 00746   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   432   NtClose  (88, ... ) == 0x0
 00751   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   432   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   432   NtClose  (88, ... ) == 0x0
 00757   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   432   NtClose  (88, ... ) == 0x0
 00762   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   432   NtClose  (88, ... ) == 0x0
 00767   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   432   NtClose  (88, ... ) == 0x0
 00772   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   432   NtClose  (88, ... ) == 0x0
 00777   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   432   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   432   NtClose  (88, ... ) == 0x0
 00783   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\254\1\0\0\260\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   432   NtClose  (88, ... ) == 0x0
 00788   432   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   432   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\254\1\0\0\260\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\254\1\0\0\260\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\254\1\0\0\260\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\254\1\0\0\260\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\254\1\0\0\260\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\254\1\0\0\260\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\254\1\0\0\260\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\254\1\0\0\260\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\254\1\0\0\260\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\254\1\0\0\260\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   432   NtClose  (88, ... ) == 0x0
 00793   432   NtClose  (84, ... ) == 0x0
 00794   432   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   432   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   432   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   432   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   432   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   432   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   432   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   432   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   432   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   432   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   432   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   432   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   432   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   432   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   432   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   432   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   432   NtClose  (96, ... ) == 0x0
 00817   432   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   432   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   432   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   432   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   432   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   432   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   432   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   432   NtClose  (96, ... ) == 0x0
 00831   432   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   432   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   432   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   432   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   432   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   432   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   432   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   432   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   432   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   432   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   432   NtClose  (96, ... ) == 0x0
 00846   432   NtClose  (92, ... ) == 0x0
 00847   432   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   432   NtClose  (72, ... ) == 0x0
 00849   432   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   432   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   432   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   432   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   432   NtClose  (72, ... ) == 0x0
 00854   432   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   432   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   432   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   432   NtAllocateVirtualMemory  (-1, 9846784, 0, 16384, 4096, 4, ... 9846784, 16384, ) == 0x0
 00858   432   NtAllocateVirtualMemory  (-1, 0, 0, 310, 4096, 64, ... 9502720, 4096, ) == 0x0
 00859   432   NtFreeVirtualMemory  (-1, (0x964000), 16384, 16384, ... (0x964000), 16384, ) == 0x0
 00860   432   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00861   432   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00862   432   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00863   432   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00864   432   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00865   432   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00866   432   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00867   432   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00868   432   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00869   432   NtClose  (92, ... ) == 0x0
 00870   432   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00871   432   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00872   432   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00873   432   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00874   432   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00875   432   NtClose  (92, ... ) == 0x0
 00876   432   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00877   432   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00878   432   NtClose  (92, ... ) == 0x0
 00879   432   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00880   432   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00881   432   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00882   432   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00883   432   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00884   432   NtClose  (92, ... ) == 0x0
 00885   432   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00886   432   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00887   432   NtClose  (92, ... ) == 0x0
 00888   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00889   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00890   432   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00891   432   NtClose  (92, ... ) == 0x0
 00892   432   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00893   432   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00894   432   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00895   432   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00896   432   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00897   432   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00898   432   NtSetInformationFile  (-2147482808, -136314292, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00899   432   NtSetInformationFile  (-2147482808, -136313924, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00900   432   NtSetInformationFile  (-2147482808, -136313916, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   432   NtCreateKey  ... 100, 1, ) == 0x0
 00901   432   NtClose  (96, ... ) == 0x0
 00902   432   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00903   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00904   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00905   432   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00906   432   NtClose  (96, ... ) == 0x0
 00907   432   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00908   432   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00909   432   NtClose  (102, ... ) == 0x0
 00910   432   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00911   432   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00912   432   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00913   432   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00914   432   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00915   432   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00916   432   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00917   432   NtClose  (96, ... ) == 0x0
 00918   432   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00919   432   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00920   432   NtClose  (102, ... ) == 0x0
 00921   432   NtContinue  (1244252, 0, ...
 00922   432   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00923   432   NtContinue  (1244236, 0, ...
 00924   432   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00925   432   NtContinue  (1244236, 0, ...
 00926   432   NtContinue  (1244244, 0, ...
 00927   432   NtContinue  (1244232, 0, ...
 00928   432   NtContinue  (1244244, 0, ...
 00929   432   NtContinue  (1244252, 0, ...
 00930   432   NtContinue  (1244244, 0, ...
 00931   432   NtContinue  (1244244, 0, ...
 00932   432   NtContinue  (1244244, 0, ...
 00933   432   NtContinue  (1244244, 0, ...
 00934   432   NtContinue  (1244244, 0, ...
 00935   432   NtContinue  (1244244, 0, ...
 00936   432   NtContinue  (1244244, 0, ...
 00937   432   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00938   432   NtContinue  (1244252, 0, ...
 00939   432   NtContinue  (1244252, 0, ...
 00940   432   NtContinue  (1244252, 0, ...
 00941   432   NtContinue  (1244252, 0, ...
 00942   432   NtContinue  (1244252, 0, ...
 00943   432   NtContinue  (1244252, 0, ...
 00944   432   NtContinue  (1244252, 0, ...
 00945   432   NtContinue  (1244252, 0, ...
 00946   432   NtContinue  (1244252, 0, ...
 00947   432   NtContinue  (1244252, 0, ...
 00948   432   NtContinue  (1244252, 0, ...
 00949   432   NtContinue  (1244252, 0, ...
 00950   432   NtContinue  (1244252, 0, ...
 00951   432   NtContinue  (1244252, 0, ...
 00952   432   NtContinue  (1244252, 0, ...
 00953   432   NtContinue  (1244252, 0, ...
 00954   432   NtContinue  (1244252, 0, ...
 00955   432   NtContinue  (1244252, 0, ...
 00956   432   NtContinue  (1244252, 0, ...
 00957   432   NtContinue  (1244252, 0, ...
 00958   432   NtContinue  (1244252, 0, ...
 00959   432   NtContinue  (1244252, 0, ...
 00960   432   NtContinue  (1244252, 0, ...
 00961   432   NtContinue  (1244252, 0, ...
 00962   432   NtContinue  (1244252, 0, ...
 00963   432   NtContinue  (1244252, 0, ...
 00964   432   NtContinue  (1244252, 0, ...
 00965   432   NtContinue  (1244252, 0, ...
 00966   432   NtContinue  (1244252, 0, ...
 00967   432   NtContinue  (1244252, 0, ...
 00968   432   NtContinue  (1244252, 0, ...
 00969   432   NtContinue  (1244252, 0, ...
 00970   432   NtContinue  (1244252, 0, ...
 00971   432   NtContinue  (1244252, 0, ...
 00972   432   NtContinue  (1244252, 0, ...
 00973   432   NtContinue  (1244252, 0, ...
 00974   432   NtContinue  (1244252, 0, ...
 00975   432   NtContinue  (1244252, 0, ...
 00976   432   NtContinue  (1244252, 0, ...
 00977   432   NtContinue  (1244252, 0, ...
 00978   432   NtContinue  (1244252, 0, ...
 00979   432   NtContinue  (1244252, 0, ...
 00980   432   NtContinue  (1244252, 0, ...
 00981   432   NtContinue  (1244252, 0, ...
 00982   432   NtContinue  (1244252, 0, ...
 00983   432   NtContinue  (1244252, 0, ...
 00984   432   NtContinue  (1244252, 0, ...
 00985   432   NtContinue  (1244252, 0, ...
 00986   432   NtContinue  (1244252, 0, ...
 00987   432   NtContinue  (1244252, 0, ...
 00988   432   NtContinue  (1244252, 0, ...
 00989   432   NtContinue  (1244252, 0, ...
 00990   432   NtContinue  (1244252, 0, ...
 00991   432   NtContinue  (1244252, 0, ...
 00992   432   NtContinue  (1244252, 0, ...
 00993   432   NtContinue  (1244252, 0, ...
 00994   432   NtContinue  (1244252, 0, ...
 00995   432   NtContinue  (1244252, 0, ...
 00996   432   NtContinue  (1244252, 0, ...
 00997   432   NtContinue  (1244252, 0, ...
 00998   432   NtContinue  (1244252, 0, ...
 00999   432   NtContinue  (1244252, 0, ...
 01000   432   NtContinue  (1244252, 0, ...
 01001   432   NtContinue  (1244252, 0, ...
 01002   432   NtContinue  (1244252, 0, ...
 01003   432   NtContinue  (1244252, 0, ...
 01004   432   NtContinue  (1244252, 0, ...
 01005   432   NtContinue  (1244252, 0, ...
 01006   432   NtContinue  (1244252, 0, ...
 01007   432   NtContinue  (1244252, 0, ...
 01008   432   NtContinue  (1244252, 0, ...
 01009   432   NtContinue  (1244252, 0, ...
 01010   432   NtContinue  (1244252, 0, ...
 01011   432   NtContinue  (1244252, 0, ...
 01012   432   NtContinue  (1244252, 0, ...
 01013   432   NtContinue  (1244252, 0, ...
 01014   432   NtContinue  (1244252, 0, ...
 01015   432   NtContinue  (1244252, 0, ...
 01016   432   NtContinue  (1244252, 0, ...
 01017   432   NtContinue  (1244252, 0, ...
 01018   432   NtContinue  (1244252, 0, ...
 01019   432   NtContinue  (1244252, 0, ...
 01020   432   NtContinue  (1244252, 0, ...
 01021   432   NtContinue  (1244252, 0, ...
 01022   432   NtContinue  (1244252, 0, ...
 01023   432   NtContinue  (1244252, 0, ...
 01024   432   NtContinue  (1244252, 0, ...
 01025   432   NtContinue  (1244252, 0, ...
 01026   432   NtContinue  (1244252, 0, ...
 01027   432   NtContinue  (1244252, 0, ...
 01028   432   NtContinue  (1244252, 0, ...
 01029   432   NtContinue  (1244252, 0, ...
 01030   432   NtContinue  (1244252, 0, ...
 01031   432   NtContinue  (1244252, 0, ...
 01032   432   NtContinue  (1244252, 0, ...
 01033   432   NtContinue  (1244252, 0, ...
 01034   432   NtContinue  (1244252, 0, ...
 01035   432   NtContinue  (1244252, 0, ...
 01036   432   NtContinue  (1244252, 0, ...
 01037   432   NtContinue  (1244252, 0, ...
 01038   432   NtContinue  (1244252, 0, ...
 01039   432   NtContinue  (1244252, 0, ...
 01040   432   NtContinue  (1244252, 0, ...
 01041   432   NtContinue  (1244252, 0, ...
 01042   432   NtContinue  (1244252, 0, ...
 01043   432   NtContinue  (1244252, 0, ...
 01044   432   NtContinue  (1244252, 0, ...
 01045   432   NtContinue  (1244252, 0, ...
 01046   432   NtContinue  (1244252, 0, ...
 01047   432   NtContinue  (1244252, 0, ...
 01048   432   NtContinue  (1244252, 0, ...
 01049   432   NtContinue  (1244252, 0, ...
 01050   432   NtContinue  (1244252, 0, ...
 01051   432   NtContinue  (1244252, 0, ...
 01052   432   NtContinue  (1244252, 0, ...
 01053   432   NtContinue  (1244252, 0, ...
 01054   432   NtContinue  (1244252, 0, ...
 01055   432   NtContinue  (1244252, 0, ...
 01056   432   NtContinue  (1244252, 0, ...
 01057   432   NtContinue  (1244252, 0, ...
 01058   432   NtContinue  (1244252, 0, ...
 01059   432   NtContinue  (1244252, 0, ...
 01060   432   NtContinue  (1244252, 0, ...
 01061   432   NtContinue  (1244252, 0, ...
 01062   432   NtContinue  (1244252, 0, ...
 01063   432   NtContinue  (1244252, 0, ...
 01064   432   NtContinue  (1244252, 0, ...
 01065   432   NtContinue  (1244252, 0, ...
 01066   432   NtContinue  (1244252, 0, ...
 01067   432   NtContinue  (1244252, 0, ...
 01068   432   NtContinue  (1244252, 0, ...
 01069   432   NtContinue  (1244252, 0, ...
 01070   432   NtContinue  (1244252, 0, ...
 01071   432   NtContinue  (1244252, 0, ...
 01072   432   NtContinue  (1244252, 0, ...
 01073   432   NtContinue  (1244252, 0, ...
 01074   432   NtContinue  (1244252, 0, ...
 01075   432   NtContinue  (1244252, 0, ...
 01076   432   NtContinue  (1244252, 0, ...
 01077   432   NtContinue  (1244252, 0, ...
 01078   432   NtContinue  (1244252, 0, ...
 01079   432   NtContinue  (1244252, 0, ...
 01080   432   NtContinue  (1244252, 0, ...
 01081   432   NtContinue  (1244252, 0, ...
 01082   432   NtContinue  (1244252, 0, ...
 01083   432   NtContinue  (1244252, 0, ...
 01084   432   NtContinue  (1244252, 0, ...
 01085   432   NtContinue  (1244252, 0, ...
 01086   432   NtContinue  (1244252, 0, ...
 01087   432   NtContinue  (1244252, 0, ...
 01088   432   NtContinue  (1244252, 0, ...
 01089   432   NtContinue  (1244252, 0, ...
 01090   432   NtContinue  (1244252, 0, ...
 01091   432   NtContinue  (1244252, 0, ...
 01092   432   NtContinue  (1244252, 0, ...
 01093   432   NtContinue  (1244252, 0, ...
 01094   432   NtContinue  (1244252, 0, ...
 01095   432   NtContinue  (1244252, 0, ...
 01096   432   NtContinue  (1244252, 0, ...
 01097   432   NtContinue  (1244252, 0, ...
 01098   432   NtContinue  (1244252, 0, ...
 01099   432   NtContinue  (1244252, 0, ...
 01100   432   NtContinue  (1244252, 0, ...
 01101   432   NtContinue  (1244252, 0, ...
 01102   432   NtContinue  (1244252, 0, ...
 01103   432   NtContinue  (1244252, 0, ...
 01104   432   NtContinue  (1244252, 0, ...
 01105   432   NtContinue  (1244252, 0, ...
 01106   432   NtContinue  (1244252, 0, ...
 01107   432   NtContinue  (1244252, 0, ...
 01108   432   NtContinue  (1244252, 0, ...
 01109   432   NtContinue  (1244252, 0, ...
 01110   432   NtContinue  (1244252, 0, ...
 01111   432   NtContinue  (1244252, 0, ...
 01112   432   NtContinue  (1244252, 0, ...
 01113   432   NtContinue  (1244252, 0, ...
 01114   432   NtContinue  (1244252, 0, ...
 01115   432   NtContinue  (1244252, 0, ...
 01116   432   NtContinue  (1244252, 0, ...
 01117   432   NtContinue  (1244252, 0, ...
 01118   432   NtContinue  (1244252, 0, ...
 01119   432   NtContinue  (1244252, 0, ...
 01120   432   NtContinue  (1244252, 0, ...
 01121   432   NtContinue  (1244252, 0, ...
 01122   432   NtContinue  (1244252, 0, ...
 01123   432   NtContinue  (1244252, 0, ...
 01124   432   NtContinue  (1244252, 0, ...
 01125   432   NtContinue  (1244252, 0, ...
 01126   432   NtContinue  (1244252, 0, ...
 01127   432   NtContinue  (1244252, 0, ...
 01128   432   NtContinue  (1244252, 0, ...
 01129   432   NtContinue  (1244252, 0, ...
 01130   432   NtContinue  (1244252, 0, ...
 01131   432   NtContinue  (1244252, 0, ...
 01132   432   NtContinue  (1244252, 0, ...
 01133   432   NtContinue  (1244252, 0, ...
 01134   432   NtContinue  (1244252, 0, ...
 01135   432   NtContinue  (1244252, 0, ...
 01136   432   NtContinue  (1244252, 0, ...
 01137   432   NtContinue  (1244252, 0, ...
 01138   432   NtContinue  (1244252, 0, ...
 01139   432   NtContinue  (1244252, 0, ...
 01140   432   NtContinue  (1244252, 0, ...
 01141   432   NtContinue  (1244252, 0, ...
 01142   432   NtContinue  (1244252, 0, ...
 01143   432   NtContinue  (1244252, 0, ...
 01144   432   NtContinue  (1244252, 0, ...
 01145   432   NtContinue  (1244252, 0, ...
 01146   432   NtContinue  (1244252, 0, ...
 01147   432   NtContinue  (1244252, 0, ...
 01148   432   NtContinue  (1244252, 0, ...
 01149   432   NtContinue  (1244252, 0, ...
 01150   432   NtContinue  (1244252, 0, ...
 01151   432   NtContinue  (1244252, 0, ...
 01152   432   NtContinue  (1244252, 0, ...
 01153   432   NtContinue  (1244252, 0, ...
 01154   432   NtContinue  (1244252, 0, ...
 01155   432   NtContinue  (1244252, 0, ...
 01156   432   NtContinue  (1244252, 0, ...
 01157   432   NtContinue  (1244252, 0, ...
 01158   432   NtContinue  (1244252, 0, ...
 01159   432   NtContinue  (1244252, 0, ...
 01160   432   NtContinue  (1244252, 0, ...
 01161   432   NtContinue  (1244252, 0, ...
 01162   432   NtContinue  (1244252, 0, ...
 01163   432   NtContinue  (1244252, 0, ...
 01164   432   NtContinue  (1244252, 0, ...
 01165   432   NtContinue  (1244252, 0, ...
 01166   432   NtContinue  (1244252, 0, ...
 01167   432   NtContinue  (1244252, 0, ...
 01168   432   NtContinue  (1244252, 0, ...
 01169   432   NtContinue  (1244252, 0, ...
 01170   432   NtContinue  (1244252, 0, ...
 01171   432   NtContinue  (1244252, 0, ...
 01172   432   NtContinue  (1244252, 0, ...
 01173   432   NtContinue  (1244252, 0, ...
 01174   432   NtContinue  (1244252, 0, ...
 01175   432   NtContinue  (1244252, 0, ...
 01176   432   NtContinue  (1244252, 0, ...
 01177   432   NtContinue  (1244252, 0, ...
 01178   432   NtContinue  (1244252, 0, ...
 01179   432   NtContinue  (1244252, 0, ...
 01180   432   NtContinue  (1244252, 0, ...
 01181   432   NtContinue  (1244252, 0, ...
 01182   432   NtContinue  (1244252, 0, ...
 01183   432   NtContinue  (1244252, 0, ...
 01184   432   NtContinue  (1244252, 0, ...
 01185   432   NtContinue  (1244252, 0, ...
 01186   432   NtContinue  (1244252, 0, ...
 01187   432   NtContinue  (1244252, 0, ...
 01188   432   NtContinue  (1244252, 0, ...
 01189   432   NtContinue  (1244252, 0, ...
 01190   432   NtContinue  (1244252, 0, ...
 01191   432   NtContinue  (1244252, 0, ...
 01192   432   NtContinue  (1244252, 0, ...
 01193   432   NtContinue  (1244252, 0, ...
 01194   432   NtContinue  (1244252, 0, ...
 01195   432   NtContinue  (1244252, 0, ...
 01196   432   NtContinue  (1244252, 0, ...
 01197   432   NtContinue  (1244252, 0, ...
 01198   432   NtContinue  (1244252, 0, ...
 01199   432   NtContinue  (1244252, 0, ...
 01200   432   NtContinue  (1244252, 0, ...
 01201   432   NtContinue  (1244252, 0, ...
 01202   432   NtContinue  (1244252, 0, ...
 01203   432   NtContinue  (1244252, 0, ...
 01204   432   NtContinue  (1244252, 0, ...
 01205   432   NtContinue  (1244252, 0, ...
 01206   432   NtContinue  (1244252, 0, ...
 01207   432   NtContinue  (1244252, 0, ...
 01208   432   NtContinue  (1244252, 0, ...
 01209   432   NtContinue  (1244252, 0, ...
 01210   432   NtContinue  (1244252, 0, ...
 01211   432   NtContinue  (1244252, 0, ...
 01212   432   NtContinue  (1244252, 0, ...
 01213   432   NtContinue  (1244252, 0, ...
 01214   432   NtContinue  (1244252, 0, ...
 01215   432   NtContinue  (1244252, 0, ...
 01216   432   NtContinue  (1244252, 0, ...
 01217   432   NtContinue  (1244252, 0, ...
 01218   432   NtContinue  (1244252, 0, ...
 01219   432   NtContinue  (1244252, 0, ...
 01220   432   NtContinue  (1244252, 0, ...
 01221   432   NtContinue  (1244252, 0, ...
 01222   432   NtContinue  (1244252, 0, ...
 01223   432   NtContinue  (1244252, 0, ...
 01224   432   NtContinue  (1244252, 0, ...
 01225   432   NtContinue  (1244252, 0, ...
 01226   432   NtContinue  (1244252, 0, ...
 01227   432   NtContinue  (1244252, 0, ...
 01228   432   NtContinue  (1244252, 0, ...
 01229   432   NtContinue  (1244252, 0, ...
 01230   432   NtContinue  (1244252, 0, ...
 01231   432   NtContinue  (1244252, 0, ...
 01232   432   NtContinue  (1244252, 0, ...
 01233   432   NtContinue  (1244252, 0, ...
 01234   432   NtContinue  (1244252, 0, ...
 01235   432   NtContinue  (1244252, 0, ...
 01236   432   NtContinue  (1244252, 0, ...
 01237   432   NtContinue  (1244252, 0, ...
 01238   432   NtContinue  (1244252, 0, ...
 01239   432   NtContinue  (1244252, 0, ...
 01240   432   NtContinue  (1244252, 0, ...
 01241   432   NtContinue  (1244252, 0, ...
 01242   432   NtContinue  (1244252, 0, ...
 01243   432   NtContinue  (1244252, 0, ...
 01244   432   NtContinue  (1244252, 0, ...
 01245   432   NtContinue  (1244252, 0, ...
 01246   432   NtContinue  (1244252, 0, ...
 01247   432   NtContinue  (1244252, 0, ...
 01248   432   NtContinue  (1244252, 0, ...
 01249   432   NtContinue  (1244252, 0, ...
 01250   432   NtContinue  (1244252, 0, ...
 01251   432   NtContinue  (1244252, 0, ...
 01252   432   NtContinue  (1244252, 0, ...
 01253   432   NtContinue  (1244252, 0, ...
 01254   432   NtContinue  (1244252, 0, ...
 01255   432   NtContinue  (1244252, 0, ...
 01256   432   NtContinue  (1244252, 0, ...
 01257   432   NtContinue  (1244252, 0, ...
 01258   432   NtContinue  (1244252, 0, ...
 01259   432   NtContinue  (1244252, 0, ...
 01260   432   NtContinue  (1244252, 0, ...
 01261   432   NtContinue  (1244252, 0, ...
 01262   432   NtContinue  (1244252, 0, ...
 01263   432   NtContinue  (1244252, 0, ...
 01264   432   NtContinue  (1244252, 0, ...
 01265   432   NtContinue  (1244252, 0, ...
 01266   432   NtContinue  (1244252, 0, ...
 01267   432   NtContinue  (1244252, 0, ...
 01268   432   NtContinue  (1244252, 0, ...
 01269   432   NtContinue  (1244252, 0, ...
 01270   432   NtContinue  (1244252, 0, ...
 01271   432   NtContinue  (1244252, 0, ...
 01272   432   NtContinue  (1244252, 0, ...
 01273   432   NtContinue  (1244252, 0, ...
 01274   432   NtContinue  (1244252, 0, ...
 01275   432   NtContinue  (1244252, 0, ...
 01276   432   NtContinue  (1244252, 0, ...
 01277   432   NtContinue  (1244252, 0, ...
 01278   432   NtContinue  (1244252, 0, ...
 01279   432   NtContinue  (1244252, 0, ...
 01280   432   NtContinue  (1244252, 0, ...
 01281   432   NtContinue  (1244252, 0, ...
 01282   432   NtContinue  (1244252, 0, ...
 01283   432   NtContinue  (1244252, 0, ...
 01284   432   NtContinue  (1244252, 0, ...
 01285   432   NtContinue  (1244252, 0, ...
 01286   432   NtContinue  (1244252, 0, ...
 01287   432   NtContinue  (1244252, 0, ...
 01288   432   NtContinue  (1244252, 0, ...
 01289   432   NtContinue  (1244252, 0, ...
 01290   432   NtContinue  (1244252, 0, ...
 01291   432   NtContinue  (1244252, 0, ...
 01292   432   NtContinue  (1244252, 0, ...
 01293   432   NtContinue  (1244252, 0, ...
 01294   432   NtContinue  (1244252, 0, ...
 01295   432   NtContinue  (1244252, 0, ...
 01296   432   NtContinue  (1244252, 0, ...
 01297   432   NtContinue  (1244252, 0, ...
 01298   432   NtContinue  (1244252, 0, ...
 01299   432   NtContinue  (1244252, 0, ...
 01300   432   NtContinue  (1244252, 0, ...
 01301   432   NtContinue  (1244252, 0, ...
 01302   432   NtContinue  (1244252, 0, ...
 01303   432   NtContinue  (1244252, 0, ...
 01304   432   NtContinue  (1244252, 0, ...
 01305   432   NtContinue  (1244252, 0, ...
 01306   432   NtContinue  (1244252, 0, ...
 01307   432   NtContinue  (1244252, 0, ...
 01308   432   NtContinue  (1244252, 0, ...
 01309   432   NtContinue  (1244252, 0, ...
 01310   432   NtContinue  (1244252, 0, ...
 01311   432   NtContinue  (1244252, 0, ...
 01312   432   NtContinue  (1244252, 0, ...
 01313   432   NtContinue  (1244252, 0, ...
 01314   432   NtContinue  (1244252, 0, ...
 01315   432   NtContinue  (1244252, 0, ...
 01316   432   NtContinue  (1244252, 0, ...
 01317   432   NtContinue  (1244252, 0, ...
 01318   432   NtContinue  (1244252, 0, ...
 01319   432   NtContinue  (1244252, 0, ...
 01320   432   NtContinue  (1244252, 0, ...
 01321   432   NtContinue  (1244252, 0, ...
 01322   432   NtContinue  (1244252, 0, ...
 01323   432   NtContinue  (1244252, 0, ...
 01324   432   NtContinue  (1244252, 0, ...
 01325   432   NtContinue  (1244252, 0, ...
 01326   432   NtContinue  (1244252, 0, ...
 01327   432   NtContinue  (1244252, 0, ...
 01328   432   NtContinue  (1244252, 0, ...
 01329   432   NtContinue  (1244252, 0, ...
 01330   432   NtContinue  (1244252, 0, ...
 01331   432   NtContinue  (1244252, 0, ...
 01332   432   NtContinue  (1244252, 0, ...
 01333   432   NtContinue  (1244252, 0, ...
 01334   432   NtContinue  (1244252, 0, ...
 01335   432   NtContinue  (1244252, 0, ...
 01336   432   NtContinue  (1244252, 0, ...
 01337   432   NtContinue  (1244252, 0, ...
 01338   432   NtContinue  (1244252, 0, ...
 01339   432   NtContinue  (1244252, 0, ...
 01340   432   NtContinue  (1244252, 0, ...
 01341   432   NtContinue  (1244252, 0, ...
 01342   432   NtContinue  (1244252, 0, ...
 01343   432   NtContinue  (1244252, 0, ...
 01344   432   NtContinue  (1244252, 0, ...
 01345   432   NtContinue  (1244252, 0, ...
 01346   432   NtContinue  (1244252, 0, ...
 01347   432   NtContinue  (1244252, 0, ...
 01348   432   NtContinue  (1244252, 0, ...
 01349   432   NtContinue  (1244252, 0, ...
 01350   432   NtContinue  (1244252, 0, ...
 01351   432   NtContinue  (1244252, 0, ...
 01352   432   NtContinue  (1244252, 0, ...
 01353   432   NtContinue  (1244252, 0, ...
 01354   432   NtContinue  (1244252, 0, ...
 01355   432   NtContinue  (1244252, 0, ...
 01356   432   NtContinue  (1244252, 0, ...
 01357   432   NtContinue  (1244252, 0, ...
 01358   432   NtContinue  (1244252, 0, ...
 01359   432   NtContinue  (1244252, 0, ...
 01360   432   NtContinue  (1244252, 0, ...
 01361   432   NtContinue  (1244252, 0, ...
 01362   432   NtContinue  (1244252, 0, ...
 01363   432   NtContinue  (1244252, 0, ...
 01364   432   NtContinue  (1244252, 0, ...
 01365   432   NtContinue  (1244252, 0, ...
 01366   432   NtContinue  (1244252, 0, ...
 01367   432   NtContinue  (1244252, 0, ...
 01368   432   NtContinue  (1244252, 0, ...
 01369   432   NtContinue  (1244252, 0, ...
 01370   432   NtContinue  (1244252, 0, ...
 01371   432   NtContinue  (1244252, 0, ...
 01372   432   NtContinue  (1244252, 0, ...
 01373   432   NtContinue  (1244252, 0, ...
 01374   432   NtContinue  (1244252, 0, ...
 01375   432   NtContinue  (1244252, 0, ...
 01376   432   NtContinue  (1244252, 0, ...
 01377   432   NtContinue  (1244252, 0, ...
 01378   432   NtContinue  (1244252, 0, ...
 01379   432   NtContinue  (1244252, 0, ...
 01380   432   NtContinue  (1244252, 0, ...
 01381   432   NtContinue  (1244252, 0, ...
 01382   432   NtContinue  (1244252, 0, ...
 01383   432   NtContinue  (1244252, 0, ...
 01384   432   NtContinue  (1244252, 0, ...
 01385   432   NtContinue  (1244252, 0, ...
 01386   432   NtContinue  (1244252, 0, ...
 01387   432   NtContinue  (1244252, 0, ...
 01388   432   NtContinue  (1244252, 0, ...
 01389   432   NtContinue  (1244252, 0, ...
 01390   432   NtContinue  (1244252, 0, ...
 01391   432   NtContinue  (1244252, 0, ...
 01392   432   NtContinue  (1244252, 0, ...
 01393   432   NtContinue  (1244252, 0, ...
 01394   432   NtContinue  (1244252, 0, ...
 01395   432   NtContinue  (1244252, 0, ...
 01396   432   NtContinue  (1244252, 0, ...
 01397   432   NtContinue  (1244252, 0, ...
 01398   432   NtContinue  (1244252, 0, ...
 01399   432   NtContinue  (1244252, 0, ...
 01400   432   NtContinue  (1244252, 0, ...
 01401   432   NtContinue  (1244252, 0, ...
 01402   432   NtContinue  (1244252, 0, ...
 01403   432   NtContinue  (1244252, 0, ...
 01404   432   NtContinue  (1244252, 0, ...
 01405   432   NtContinue  (1244252, 0, ...
 01406   432   NtContinue  (1244252, 0, ...
 01407   432   NtContinue  (1244252, 0, ...
 01408   432   NtContinue  (1244252, 0, ...
 01409   432   NtContinue  (1244252, 0, ...
 01410   432   NtContinue  (1244252, 0, ...
 01411   432   NtContinue  (1244252, 0, ...
 01412   432   NtContinue  (1244252, 0, ...
 01413   432   NtContinue  (1244252, 0, ...
 01414   432   NtContinue  (1244252, 0, ...
 01415   432   NtContinue  (1244252, 0, ...
 01416   432   NtContinue  (1244252, 0, ...
 01417   432   NtContinue  (1244252, 0, ...
 01418   432   NtContinue  (1244252, 0, ...
 01419   432   NtContinue  (1244252, 0, ...
 01420   432   NtContinue  (1244252, 0, ...
 01421   432   NtContinue  (1244252, 0, ...
 01422   432   NtContinue  (1244252, 0, ...
 01423   432   NtContinue  (1244252, 0, ...
 01424   432   NtContinue  (1244252, 0, ...
 01425   432   NtContinue  (1244252, 0, ...
 01426   432   NtContinue  (1244252, 0, ...
 01427   432   NtContinue  (1244252, 0, ...
 01428   432   NtContinue  (1244252, 0, ...
 01429   432   NtContinue  (1244252, 0, ...
 01430   432   NtContinue  (1244252, 0, ...
 01431   432   NtContinue  (1244252, 0, ...
 01432   432   NtContinue  (1244252, 0, ...
 01433   432   NtContinue  (1244252, 0, ...
 01434   432   NtContinue  (1244252, 0, ...
 01435   432   NtContinue  (1244252, 0, ...
 01436   432   NtContinue  (1244252, 0, ...
 01437   432   NtContinue  (1244252, 0, ...
 01438   432   NtContinue  (1244252, 0, ...
 01439   432   NtContinue  (1244252, 0, ...
 01440   432   NtContinue  (1244252, 0, ...
 01441   432   NtContinue  (1244252, 0, ...
 01442   432   NtContinue  (1244252, 0, ...
 01443   432   NtContinue  (1244252, 0, ...
 01444   432   NtContinue  (1244252, 0, ...
 01445   432   NtContinue  (1244252, 0, ...
 01446   432   NtContinue  (1244252, 0, ...
 01447   432   NtContinue  (1244252, 0, ...
 01448   432   NtContinue  (1244252, 0, ...
 01449   432   NtContinue  (1244252, 0, ...
 01450   432   NtContinue  (1244252, 0, ...
 01451   432   NtContinue  (1244252, 0, ...
 01452   432   NtContinue  (1244252, 0, ...
 01453   432   NtContinue  (1244252, 0, ...
 01454   432   NtContinue  (1244252, 0, ...
 01455   432   NtContinue  (1244252, 0, ...
 01456   432   NtContinue  (1244252, 0, ...
 01457   432   NtContinue  (1244252, 0, ...
 01458   432   NtContinue  (1244252, 0, ...
 01459   432   NtContinue  (1244252, 0, ...
 01460   432   NtContinue  (1244252, 0, ...
 01461   432   NtContinue  (1244252, 0, ...
 01462   432   NtContinue  (1244252, 0, ...
 01463   432   NtContinue  (1244252, 0, ...
 01464   432   NtContinue  (1244252, 0, ...
 01465   432   NtContinue  (1244252, 0, ...
 01466   432   NtContinue  (1244252, 0, ...
 01467   432   NtContinue  (1244252, 0, ...
 01468   432   NtContinue  (1244252, 0, ...
 01469   432   NtContinue  (1244252, 0, ...
 01470   432   NtContinue  (1244252, 0, ...
 01471   432   NtContinue  (1244252, 0, ...
 01472   432   NtContinue  (1244252, 0, ...
 01473   432   NtContinue  (1244252, 0, ...
 01474   432   NtContinue  (1244252, 0, ...
 01475   432   NtContinue  (1244252, 0, ...
 01476   432   NtContinue  (1244252, 0, ...
 01477   432   NtContinue  (1244252, 0, ...
 01478   432   NtContinue  (1244252, 0, ...
 01479   432   NtContinue  (1244252, 0, ...
 01480   432   NtContinue  (1244252, 0, ...
 01481   432   NtContinue  (1244252, 0, ...
 01482   432   NtContinue  (1244252, 0, ...
 01483   432   NtContinue  (1244252, 0, ...
 01484   432   NtContinue  (1244252, 0, ...
 01485   432   NtContinue  (1244252, 0, ...
 01486   432   NtContinue  (1244252, 0, ...
 01487   432   NtContinue  (1244252, 0, ...
 01488   432   NtContinue  (1244252, 0, ...
 01489   432   NtContinue  (1244252, 0, ...
 01490   432   NtContinue  (1244252, 0, ...
 01491   432   NtContinue  (1244252, 0, ...
 01492   432   NtContinue  (1244252, 0, ...
 01493   432   NtContinue  (1244252, 0, ...
 01494   432   NtContinue  (1244252, 0, ...
 01495   432   NtContinue  (1244252, 0, ...
 01496   432   NtContinue  (1244252, 0, ...
 01497   432   NtContinue  (1244252, 0, ...
 01498   432   NtContinue  (1244252, 0, ...
 01499   432   NtContinue  (1244252, 0, ...
 01500   432   NtContinue  (1244252, 0, ...
 01501   432   NtContinue  (1244252, 0, ...
 01502   432   NtContinue  (1244252, 0, ...
 01503   432   NtContinue  (1244252, 0, ...
 01504   432   NtContinue  (1244252, 0, ...
 01505   432   NtContinue  (1244252, 0, ...
 01506   432   NtContinue  (1244252, 0, ...
 01507   432   NtContinue  (1244252, 0, ...
 01508   432   NtContinue  (1244252, 0, ...
 01509   432   NtContinue  (1244252, 0, ...
 01510   432   NtContinue  (1244252, 0, ...
 01511   432   NtContinue  (1244252, 0, ...
 01512   432   NtContinue  (1244252, 0, ...
 01513   432   NtContinue  (1244252, 0, ...
 01514   432   NtContinue  (1244252, 0, ...
 01515   432   NtContinue  (1244252, 0, ...
 01516   432   NtContinue  (1244252, 0, ...
 01517   432   NtContinue  (1244252, 0, ...
 01518   432   NtContinue  (1244252, 0, ...
 01519   432   NtContinue  (1244252, 0, ...
 01520   432   NtContinue  (1244252, 0, ...
 01521   432   NtContinue  (1244252, 0, ...
 01522   432   NtContinue  (1244252, 0, ...
 01523   432   NtContinue  (1244252, 0, ...
 01524   432   NtContinue  (1244252, 0, ...
 01525   432   NtContinue  (1244252, 0, ...
 01526   432   NtContinue  (1244252, 0, ...
 01527   432   NtContinue  (1244252, 0, ...
 01528   432   NtContinue  (1244252, 0, ...
 01529   432   NtContinue  (1244252, 0, ...
 01530   432   NtContinue  (1244252, 0, ...
 01531   432   NtContinue  (1244252, 0, ...
 01532   432   NtContinue  (1244252, 0, ...
 01533   432   NtContinue  (1244252, 0, ...
 01534   432   NtContinue  (1244252, 0, ...
 01535   432   NtContinue  (1244252, 0, ...
 01536   432   NtContinue  (1244252, 0, ...
 01537   432   NtContinue  (1244252, 0, ...
 01538   432   NtContinue  (1244252, 0, ...
 01539   432   NtContinue  (1244252, 0, ...
 01540   432   NtContinue  (1244252, 0, ...
 01541   432   NtContinue  (1244252, 0, ...
 01542   432   NtContinue  (1244252, 0, ...
 01543   432   NtContinue  (1244252, 0, ...
 01544   432   NtContinue  (1244252, 0, ...
 01545   432   NtContinue  (1244252, 0, ...
 01546   432   NtContinue  (1244252, 0, ...
 01547   432   NtContinue  (1244252, 0, ...
 01548   432   NtContinue  (1244252, 0, ...
 01549   432   NtContinue  (1244252, 0, ...
 01550   432   NtContinue  (1244252, 0, ...
 01551   432   NtContinue  (1244252, 0, ...
 01552   432   NtContinue  (1244252, 0, ...
 01553   432   NtContinue  (1244252, 0, ...
 01554   432   NtContinue  (1244252, 0, ...
 01555   432   NtContinue  (1244252, 0, ...
 01556   432   NtContinue  (1244252, 0, ...
 01557   432   NtContinue  (1244252, 0, ...
 01558   432   NtContinue  (1244252, 0, ...
 01559   432   NtContinue  (1244252, 0, ...
 01560   432   NtContinue  (1244252, 0, ...
 01561   432   NtContinue  (1244252, 0, ...
 01562   432   NtContinue  (1244252, 0, ...
 01563   432   NtContinue  (1244252, 0, ...
 01564   432   NtContinue  (1244252, 0, ...
 01565   432   NtContinue  (1244252, 0, ...
 01566   432   NtContinue  (1244252, 0, ...
 01567   432   NtContinue  (1244252, 0, ...
 01568   432   NtContinue  (1244252, 0, ...
 01569   432   NtContinue  (1244252, 0, ...
 01570   432   NtContinue  (1244252, 0, ...
 01571   432   NtContinue  (1244252, 0, ...
 01572   432   NtContinue  (1244252, 0, ...
 01573   432   NtContinue  (1244252, 0, ...
 01574   432   NtContinue  (1244252, 0, ...
 01575   432   NtContinue  (1244252, 0, ...
 01576   432   NtContinue  (1244252, 0, ...
 01577   432   NtContinue  (1244252, 0, ...
 01578   432   NtContinue  (1244252, 0, ...
 01579   432   NtContinue  (1244252, 0, ...
 01580   432   NtContinue  (1244252, 0, ...
 01581   432   NtContinue  (1244252, 0, ...
 01582   432   NtContinue  (1244252, 0, ...
 01583   432   NtContinue  (1244252, 0, ...
 01584   432   NtContinue  (1244252, 0, ...
 01585   432   NtContinue  (1244252, 0, ...
 01586   432   NtContinue  (1244252, 0, ...
 01587   432   NtContinue  (1244252, 0, ...
 01588   432   NtContinue  (1244252, 0, ...
 01589   432   NtContinue  (1244252, 0, ...
 01590   432   NtContinue  (1244252, 0, ...
 01591   432   NtContinue  (1244252, 0, ...
 01592   432   NtContinue  (1244252, 0, ...
 01593   432   NtContinue  (1244252, 0, ...
 01594   432   NtContinue  (1244252, 0, ...
 01595   432   NtContinue  (1244252, 0, ...
 01596   432   NtContinue  (1244252, 0, ...
 01597   432   NtContinue  (1244252, 0, ...
 01598   432   NtContinue  (1244252, 0, ...
 01599   432   NtContinue  (1244252, 0, ...
 01600   432   NtContinue  (1244252, 0, ...
 01601   432   NtContinue  (1244252, 0, ...
 01602   432   NtContinue  (1244252, 0, ...
 01603   432   NtContinue  (1244252, 0, ...
 01604   432   NtContinue  (1244252, 0, ...
 01605   432   NtContinue  (1244252, 0, ...
 01606   432   NtContinue  (1244252, 0, ...
 01607   432   NtContinue  (1244252, 0, ...
 01608   432   NtContinue  (1244252, 0, ...
 01609   432   NtContinue  (1244252, 0, ...
 01610   432   NtContinue  (1244252, 0, ...
 01611   432   NtContinue  (1244252, 0, ...
 01612   432   NtContinue  (1244252, 0, ...
 01613   432   NtContinue  (1244252, 0, ...
 01614   432   NtContinue  (1244252, 0, ...
 01615   432   NtContinue  (1244252, 0, ...
 01616   432   NtContinue  (1244252, 0, ...
 01617   432   NtContinue  (1244252, 0, ...
 01618   432   NtContinue  (1244252, 0, ...
 01619   432   NtContinue  (1244252, 0, ...
 01620   432   NtContinue  (1244252, 0, ...
 01621   432   NtContinue  (1244252, 0, ...
 01622   432   NtContinue  (1244252, 0, ...
 01623   432   NtContinue  (1244252, 0, ...
 01624   432   NtContinue  (1244252, 0, ...
 01625   432   NtContinue  (1244252, 0, ...
 01626   432   NtContinue  (1244252, 0, ...
 01627   432   NtContinue  (1244252, 0, ...
 01628   432   NtContinue  (1244252, 0, ...
 01629   432   NtContinue  (1244252, 0, ...
 01630   432   NtContinue  (1244252, 0, ...
 01631   432   NtContinue  (1244252, 0, ...
 01632   432   NtContinue  (1244252, 0, ...
 01633   432   NtContinue  (1244252, 0, ...
 01634   432   NtContinue  (1244252, 0, ...
 01635   432   NtContinue  (1244252, 0, ...
 01636   432   NtContinue  (1244252, 0, ...
 01637   432   NtContinue  (1244252, 0, ...
 01638   432   NtContinue  (1244252, 0, ...
 01639   432   NtContinue  (1244252, 0, ...
 01640   432   NtContinue  (1244252, 0, ...
 01641   432   NtContinue  (1244252, 0, ...
 01642   432   NtContinue  (1244252, 0, ...
 01643   432   NtContinue  (1244252, 0, ...
 01644   432   NtContinue  (1244252, 0, ...
 01645   432   NtContinue  (1244252, 0, ...
 01646   432   NtContinue  (1244252, 0, ...
 01647   432   NtContinue  (1244252, 0, ...
 01648   432   NtContinue  (1244252, 0, ...
 01649   432   NtContinue  (1244252, 0, ...
 01650   432   NtContinue  (1244252, 0, ...
 01651   432   NtContinue  (1244252, 0, ...
 01652   432   NtContinue  (1244252, 0, ...
 01653   432   NtContinue  (1244252, 0, ...
 01654   432   NtContinue  (1244252, 0, ...
 01655   432   NtContinue  (1244252, 0, ...
 01656   432   NtContinue  (1244252, 0, ...
 01657   432   NtContinue  (1244252, 0, ...
 01658   432   NtContinue  (1244252, 0, ...
 01659   432   NtContinue  (1244252, 0, ...
 01660   432   NtContinue  (1244252, 0, ...
 01661   432   NtContinue  (1244252, 0, ...
 01662   432   NtContinue  (1244252, 0, ...
 01663   432   NtContinue  (1244252, 0, ...
 01664   432   NtContinue  (1244252, 0, ...
 01665   432   NtContinue  (1244252, 0, ...
 01666   432   NtContinue  (1244252, 0, ...
 01667   432   NtContinue  (1244252, 0, ...
 01668   432   NtContinue  (1244252, 0, ...
 01669   432   NtContinue  (1244252, 0, ...
 01670   432   NtContinue  (1244252, 0, ...
 01671   432   NtContinue  (1244252, 0, ...
 01672   432   NtContinue  (1244252, 0, ...
 01673   432   NtContinue  (1244252, 0, ...
 01674   432   NtContinue  (1244252, 0, ...
 01675   432   NtContinue  (1244252, 0, ...
 01676   432   NtContinue  (1244252, 0, ...
 01677   432   NtContinue  (1244252, 0, ...
 01678   432   NtContinue  (1244252, 0, ...
 01679   432   NtContinue  (1244252, 0, ...
 01680   432   NtContinue  (1244252, 0, ...
 01681   432   NtContinue  (1244252, 0, ...
 01682   432   NtContinue  (1244252, 0, ...
 01683   432   NtContinue  (1244252, 0, ...
 01684   432   NtContinue  (1244252, 0, ...
 01685   432   NtContinue  (1244252, 0, ...
 01686   432   NtContinue  (1244252, 0, ...
 01687   432   NtContinue  (1244252, 0, ...
 01688   432   NtContinue  (1244252, 0, ...
 01689   432   NtContinue  (1244252, 0, ...
 01690   432   NtContinue  (1244252, 0, ...
 01691   432   NtContinue  (1244252, 0, ...
 01692   432   NtContinue  (1244252, 0, ...
 01693   432   NtContinue  (1244252, 0, ...
 01694   432   NtContinue  (1244252, 0, ...
 01695   432   NtContinue  (1244252, 0, ...
 01696   432   NtContinue  (1244252, 0, ...
 01697   432   NtContinue  (1244252, 0, ...
 01698   432   NtContinue  (1244252, 0, ...
 01699   432   NtContinue  (1244252, 0, ...
 01700   432   NtContinue  (1244252, 0, ...
 01701   432   NtContinue  (1244252, 0, ...
 01702   432   NtContinue  (1244252, 0, ...
 01703   432   NtContinue  (1244252, 0, ...
 01704   432   NtContinue  (1244252, 0, ...
 01705   432   NtContinue  (1244252, 0, ...
 01706   432   NtContinue  (1244252, 0, ...
 01707   432   NtContinue  (1244252, 0, ...
 01708   432   NtContinue  (1244252, 0, ...
 01709   432   NtContinue  (1244252, 0, ...
 01710   432   NtContinue  (1244252, 0, ...
 01711   432   NtContinue  (1244252, 0, ...
 01712   432   NtContinue  (1244252, 0, ...
 01713   432   NtContinue  (1244252, 0, ...
 01714   432   NtContinue  (1244252, 0, ...
 01715   432   NtContinue  (1244252, 0, ...
 01716   432   NtContinue  (1244252, 0, ...
 01717   432   NtContinue  (1244252, 0, ...
 01718   432   NtContinue  (1244252, 0, ...
 01719   432   NtContinue  (1244252, 0, ...
 01720   432   NtContinue  (1244252, 0, ...
 01721   432   NtContinue  (1244252, 0, ...
 01722   432   NtContinue  (1244252, 0, ...
 01723   432   NtContinue  (1244252, 0, ...
 01724   432   NtContinue  (1244252, 0, ...
 01725   432   NtContinue  (1244252, 0, ...
 01726   432   NtContinue  (1244252, 0, ...
 01727   432   NtContinue  (1244252, 0, ...
 01728   432   NtContinue  (1244252, 0, ...
 01729   432   NtContinue  (1244252, 0, ...
 01730   432   NtContinue  (1244252, 0, ...
 01731   432   NtContinue  (1244252, 0, ...
 01732   432   NtContinue  (1244252, 0, ...
 01733   432   NtContinue  (1244252, 0, ...
 01734   432   NtContinue  (1244252, 0, ...
 01735   432   NtContinue  (1244252, 0, ...
 01736   432   NtContinue  (1244252, 0, ...
 01737   432   NtContinue  (1244252, 0, ...
 01738   432   NtContinue  (1244252, 0, ...
 01739   432   NtContinue  (1244252, 0, ...
 01740   432   NtContinue  (1244252, 0, ...
 01741   432   NtContinue  (1244252, 0, ...
 01742   432   NtContinue  (1244252, 0, ...
 01743   432   NtContinue  (1244252, 0, ...
 01744   432   NtContinue  (1244252, 0, ...
 01745   432   NtContinue  (1244252, 0, ...
 01746   432   NtContinue  (1244252, 0, ...
 01747   432   NtContinue  (1244252, 0, ...
 01748   432   NtContinue  (1244252, 0, ...
 01749   432   NtContinue  (1244252, 0, ...
 01750   432   NtContinue  (1244252, 0, ...
 01751   432   NtContinue  (1244252, 0, ...
 01752   432   NtContinue  (1244252, 0, ...
 01753   432   NtContinue  (1244252, 0, ...
 01754   432   NtContinue  (1244252, 0, ...
 01755   432   NtContinue  (1244252, 0, ...
 01756   432   NtContinue  (1244252, 0, ...
 01757   432   NtContinue  (1244252, 0, ...
 01758   432   NtContinue  (1244252, 0, ...
 01759   432   NtContinue  (1244252, 0, ...
 01760   432   NtContinue  (1244252, 0, ...
 01761   432   NtContinue  (1244252, 0, ...
 01762   432   NtContinue  (1244252, 0, ...
 01763   432   NtContinue  (1244252, 0, ...
 01764   432   NtContinue  (1244252, 0, ...
 01765   432   NtContinue  (1244252, 0, ...
 01766   432   NtContinue  (1244252, 0, ...
 01767   432   NtContinue  (1244252, 0, ...
 01768   432   NtContinue  (1244252, 0, ...
 01769   432   NtContinue  (1244252, 0, ...
 01770   432   NtContinue  (1244252, 0, ...
 01771   432   NtContinue  (1244252, 0, ...
 01772   432   NtContinue  (1244252, 0, ...
 01773   432   NtContinue  (1244252, 0, ...
 01774   432   NtContinue  (1244252, 0, ...
 01775   432   NtContinue  (1244252, 0, ...
 01776   432   NtContinue  (1244252, 0, ...
 01777   432   NtContinue  (1244252, 0, ...
 01778   432   NtContinue  (1244252, 0, ...
 01779   432   NtContinue  (1244252, 0, ...
 01780   432   NtContinue  (1244252, 0, ...
 01781   432   NtContinue  (1244252, 0, ...
 01782   432   NtContinue  (1244252, 0, ...
 01783   432   NtContinue  (1244252, 0, ...
 01784   432   NtContinue  (1244252, 0, ...
 01785   432   NtContinue  (1244252, 0, ...
 01786   432   NtContinue  (1244252, 0, ...
 01787   432   NtContinue  (1244252, 0, ...
 01788   432   NtContinue  (1244252, 0, ...
 01789   432   NtContinue  (1244252, 0, ...
 01790   432   NtContinue  (1244252, 0, ...
 01791   432   NtContinue  (1244252, 0, ...
 01792   432   NtContinue  (1244252, 0, ...
 01793   432   NtContinue  (1244252, 0, ...
 01794   432   NtContinue  (1244252, 0, ...
 01795   432   NtContinue  (1244252, 0, ...
 01796   432   NtContinue  (1244252, 0, ...
 01797   432   NtContinue  (1244252, 0, ...
 01798   432   NtContinue  (1244252, 0, ...
 01799   432   NtContinue  (1244252, 0, ...
 01800   432   NtContinue  (1244252, 0, ...
 01801   432   NtContinue  (1244252, 0, ...
 01802   432   NtContinue  (1244252, 0, ...
 01803   432   NtContinue  (1244252, 0, ...
 01804   432   NtContinue  (1244252, 0, ...
 01805   432   NtContinue  (1244252, 0, ...
 01806   432   NtContinue  (1244252, 0, ...
 01807   432   NtContinue  (1244252, 0, ...
 01808   432   NtContinue  (1244252, 0, ...
 01809   432   NtContinue  (1244252, 0, ...
 01810   432   NtContinue  (1244252, 0, ...
 01811   432   NtContinue  (1244252, 0, ...
 01812   432   NtContinue  (1244252, 0, ...
 01813   432   NtContinue  (1244252, 0, ...
 01814   432   NtContinue  (1244252, 0, ...
 01815   432   NtContinue  (1244252, 0, ...
 01816   432   NtContinue  (1244252, 0, ...
 01817   432   NtContinue  (1244252, 0, ...
 01818   432   NtContinue  (1244252, 0, ...
 01819   432   NtContinue  (1244252, 0, ...
 01820   432   NtContinue  (1244252, 0, ...
 01821   432   NtContinue  (1244252, 0, ...
 01822   432   NtContinue  (1244252, 0, ...
 01823   432   NtContinue  (1244252, 0, ...
 01824   432   NtContinue  (1244252, 0, ...
 01825   432   NtContinue  (1244252, 0, ...
 01826   432   NtContinue  (1244252, 0, ...
 01827   432   NtContinue  (1244252, 0, ...
 01828   432   NtContinue  (1244252, 0, ...
 01829   432   NtContinue  (1244252, 0, ...
 01830   432   NtContinue  (1244252, 0, ...
 01831   432   NtContinue  (1244252, 0, ...
 01832   432   NtContinue  (1244252, 0, ...
 01833   432   NtContinue  (1244252, 0, ...
 01834   432   NtContinue  (1244252, 0, ...
 01835   432   NtContinue  (1244252, 0, ...
 01836   432   NtContinue  (1244252, 0, ...
 01837   432   NtContinue  (1244252, 0, ...
 01838   432   NtContinue  (1244252, 0, ...
 01839   432   NtContinue  (1244252, 0, ...
 01840   432   NtContinue  (1244252, 0, ...
 01841   432   NtContinue  (1244252, 0, ...
 01842   432   NtContinue  (1244252, 0, ...
 01843   432   NtContinue  (1244252, 0, ...
 01844   432   NtContinue  (1244252, 0, ...
 01845   432   NtContinue  (1244252, 0, ...
 01846   432   NtContinue  (1244252, 0, ...
 01847   432   NtContinue  (1244252, 0, ...
 01848   432   NtContinue  (1244252, 0, ...
 01849   432   NtContinue  (1244252, 0, ...
 01850   432   NtContinue  (1244252, 0, ...
 01851   432   NtContinue  (1244252, 0, ...
 01852   432   NtContinue  (1244252, 0, ...
 01853   432   NtContinue  (1244252, 0, ...
 01854   432   NtContinue  (1244252, 0, ...
 01855   432   NtContinue  (1244252, 0, ...
 01856   432   NtContinue  (1244252, 0, ...
 01857   432   NtContinue  (1244252, 0, ...
 01858   432   NtContinue  (1244252, 0, ...
 01859   432   NtContinue  (1244252, 0, ...
 01860   432   NtContinue  (1244252, 0, ...
 01861   432   NtContinue  (1244252, 0, ...
 01862   432   NtContinue  (1244252, 0, ...
 01863   432   NtContinue  (1244252, 0, ...
 01864   432   NtContinue  (1244252, 0, ...
 01865   432   NtContinue  (1244252, 0, ...
 01866   432   NtContinue  (1244252, 0, ...
 01867   432   NtContinue  (1244252, 0, ...
 01868   432   NtContinue  (1244252, 0, ...
 01869   432   NtContinue  (1244252, 0, ...
 01870   432   NtContinue  (1244252, 0, ...
 01871   432   NtContinue  (1244252, 0, ...
 01872   432   NtContinue  (1244252, 0, ...
 01873   432   NtContinue  (1244252, 0, ...
 01874   432   NtContinue  (1244252, 0, ...
 01875   432   NtContinue  (1244252, 0, ...
 01876   432   NtContinue  (1244252, 0, ...
 01877   432   NtContinue  (1244252, 0, ...
 01878   432   NtContinue  (1244252, 0, ...
 01879   432   NtContinue  (1244252, 0, ...
 01880   432   NtContinue  (1244252, 0, ...
 01881   432   NtContinue  (1244252, 0, ...
 01882   432   NtContinue  (1244252, 0, ...
 01883   432   NtContinue  (1244252, 0, ...
 01884   432   NtContinue  (1244252, 0, ...
 01885   432   NtContinue  (1244252, 0, ...
 01886   432   NtContinue  (1244252, 0, ...
 01887   432   NtContinue  (1244252, 0, ...
 01888   432   NtContinue  (1244252, 0, ...
 01889   432   NtContinue  (1244252, 0, ...
 01890   432   NtContinue  (1244252, 0, ...
 01891   432   NtContinue  (1244252, 0, ...
 01892   432   NtContinue  (1244252, 0, ...
 01893   432   NtContinue  (1244252, 0, ...
 01894   432   NtContinue  (1244252, 0, ...
 01895   432   NtContinue  (1244252, 0, ...
 01896   432   NtContinue  (1244252, 0, ...
 01897   432   NtContinue  (1244252, 0, ...
 01898   432   NtContinue  (1244252, 0, ...
 01899   432   NtContinue  (1244252, 0, ...
 01900   432   NtContinue  (1244252, 0, ...
 01901   432   NtContinue  (1244252, 0, ...
 01902   432   NtContinue  (1244252, 0, ...
 01903   432   NtContinue  (1244252, 0, ...
 01904   432   NtContinue  (1244252, 0, ...
 01905   432   NtContinue  (1244252, 0, ...
 01906   432   NtContinue  (1244252, 0, ...
 01907   432   NtContinue  (1244252, 0, ...
 01908   432   NtContinue  (1244252, 0, ...
 01909   432   NtContinue  (1244252, 0, ...
 01910   432   NtContinue  (1244252, 0, ...
 01911   432   NtContinue  (1244252, 0, ...
 01912   432   NtContinue  (1244252, 0, ...
 01913   432   NtContinue  (1244252, 0, ...
 01914   432   NtContinue  (1244252, 0, ...
 01915   432   NtContinue  (1244252, 0, ...
 01916   432   NtContinue  (1244252, 0, ...
 01917   432   NtContinue  (1244252, 0, ...
 01918   432   NtContinue  (1244252, 0, ...
 01919   432   NtContinue  (1244252, 0, ...
 01920   432   NtContinue  (1244252, 0, ...
 01921   432   NtContinue  (1244252, 0, ...
 01922   432   NtContinue  (1244252, 0, ...
 01923   432   NtContinue  (1244252, 0, ...
 01924   432   NtContinue  (1244252, 0, ...
 01925   432   NtContinue  (1244252, 0, ...
 01926   432   NtContinue  (1244252, 0, ...
 01927   432   NtContinue  (1244252, 0, ...
 01928   432   NtContinue  (1244252, 0, ...
 01929   432   NtContinue  (1244252, 0, ...
 01930   432   NtContinue  (1244252, 0, ...
 01931   432   NtContinue  (1244252, 0, ...
 01932   432   NtContinue  (1244252, 0, ...
 01933   432   NtContinue  (1244252, 0, ...
 01934   432   NtContinue  (1244252, 0, ...
 01935   432   NtContinue  (1244252, 0, ...
 01936   432   NtContinue  (1244252, 0, ...
 01937   432   NtContinue  (1244252, 0, ...
 01938   432   NtContinue  (1244252, 0, ...
 01939   432   NtContinue  (1244252, 0, ...
 01940   432   NtContinue  (1244252, 0, ...
 01941   432   NtContinue  (1244252, 0, ...
 01942   432   NtContinue  (1244252, 0, ...
 01943   432   NtContinue  (1244252, 0, ...
 01944   432   NtContinue  (1244252, 0, ...
 01945   432   NtContinue  (1244252, 0, ...
 01946   432   NtContinue  (1244252, 0, ...
 01947   432   NtContinue  (1244252, 0, ...
 01948   432   NtContinue  (1244252, 0, ...
 01949   432   NtContinue  (1244252, 0, ...
 01950   432   NtContinue  (1244252, 0, ...
 01951   432   NtContinue  (1244252, 0, ...
 01952   432   NtContinue  (1244252, 0, ...
 01953   432   NtContinue  (1244252, 0, ...
 01954   432   NtContinue  (1244252, 0, ...
 01955   432   NtContinue  (1244252, 0, ...
 01956   432   NtContinue  (1244252, 0, ...
 01957   432   NtContinue  (1244252, 0, ...
 01958   432   NtContinue  (1244252, 0, ...
 01959   432   NtContinue  (1244252, 0, ...
 01960   432   NtContinue  (1244252, 0, ...
 01961   432   NtContinue  (1244252, 0, ...
 01962   432   NtContinue  (1244252, 0, ...
 01963   432   NtContinue  (1244252, 0, ...
 01964   432   NtContinue  (1244252, 0, ...
 01965   432   NtContinue  (1244252, 0, ...
 01966   432   NtContinue  (1244252, 0, ...
 01967   432   NtContinue  (1244252, 0, ...
 01968   432   NtContinue  (1244252, 0, ...
 01969   432   NtContinue  (1244252, 0, ...
 01970   432   NtContinue  (1244252, 0, ...
 01971   432   NtContinue  (1244252, 0, ...
 01972   432   NtContinue  (1244252, 0, ...
 01973   432   NtContinue  (1244252, 0, ...
 01974   432   NtContinue  (1244252, 0, ...
 01975   432   NtContinue  (1244252, 0, ...
 01976   432   NtContinue  (1244252, 0, ...
 01977   432   NtContinue  (1244252, 0, ...
 01978   432   NtContinue  (1244252, 0, ...
 01979   432   NtContinue  (1244252, 0, ...
 01980   432   NtContinue  (1244252, 0, ...
 01981   432   NtContinue  (1244252, 0, ...
 01982   432   NtContinue  (1244252, 0, ...
 01983   432   NtContinue  (1244252, 0, ...
 01984   432   NtContinue  (1244252, 0, ...
 01985   432   NtContinue  (1244252, 0, ...
 01986   432   NtContinue  (1244252, 0, ...
 01987   432   NtContinue  (1244252, 0, ...
 01988   432   NtContinue  (1244252, 0, ...
 01989   432   NtContinue  (1244252, 0, ...
 01990   432   NtContinue  (1244252, 0, ...
 01991   432   NtContinue  (1244252, 0, ...
 01992   432   NtContinue  (1244252, 0, ...
 01993   432   NtContinue  (1244252, 0, ...
 01994   432   NtContinue  (1244252, 0, ...
 01995   432   NtContinue  (1244252, 0, ...
 01996   432   NtContinue  (1244252, 0, ...
 01997   432   NtContinue  (1244252, 0, ...
 01998   432   NtContinue  (1244252, 0, ...
 01999   432   NtContinue  (1244252, 0, ...
 02000   432   NtContinue  (1244252, 0, ...
 02001   432   NtContinue  (1244252, 0, ...
 02002   432   NtContinue  (1244252, 0, ...
 02003   432   NtContinue  (1244252, 0, ...
 02004   432   NtContinue  (1244252, 0, ...
 02005   432   NtContinue  (1244252, 0, ...
 02006   432   NtContinue  (1244252, 0, ...
 02007   432   NtContinue  (1244252, 0, ...
 02008   432   NtContinue  (1244252, 0, ...
 02009   432   NtContinue  (1244252, 0, ...
 02010   432   NtContinue  (1244252, 0, ...
 02011   432   NtContinue  (1244252, 0, ...
 02012   432   NtContinue  (1244252, 0, ...
 02013   432   NtContinue  (1244252, 0, ...
 02014   432   NtContinue  (1244252, 0, ...
 02015   432   NtContinue  (1244252, 0, ...
 02016   432   NtContinue  (1244252, 0, ...
 02017   432   NtContinue  (1244252, 0, ...
 02018   432   NtContinue  (1244252, 0, ...
 02019   432   NtContinue  (1244252, 0, ...
 02020   432   NtContinue  (1244252, 0, ...
 02021   432   NtContinue  (1244252, 0, ...
 02022   432   NtContinue  (1244252, 0, ...
 02023   432   NtContinue  (1244252, 0, ...
 02024   432   NtContinue  (1244252, 0, ...
 02025   432   NtContinue  (1244252, 0, ...
 02026   432   NtContinue  (1244252, 0, ...
 02027   432   NtContinue  (1244252, 0, ...
 02028   432   NtContinue  (1244252, 0, ...
 02029   432   NtContinue  (1244252, 0, ...
 02030   432   NtContinue  (1244252, 0, ...
 02031   432   NtContinue  (1244252, 0, ...
 02032   432   NtContinue  (1244252, 0, ...
 02033   432   NtContinue  (1244252, 0, ...
 02034   432   NtContinue  (1244252, 0, ...
 02035   432   NtContinue  (1244252, 0, ...
 02036   432   NtContinue  (1244252, 0, ...
 02037   432   NtContinue  (1244252, 0, ...
 02038   432   NtContinue  (1244252, 0, ...
 02039   432   NtContinue  (1244252, 0, ...
 02040   432   NtContinue  (1244252, 0, ...
 02041   432   NtContinue  (1244252, 0, ...
 02042   432   NtContinue  (1244252, 0, ...
 02043   432   NtContinue  (1244252, 0, ...
 02044   432   NtContinue  (1244252, 0, ...
 02045   432   NtContinue  (1244252, 0, ...
 02046   432   NtContinue  (1244252, 0, ...
 02047   432   NtContinue  (1244252, 0, ...
 02048   432   NtContinue  (1244252, 0, ...
 02049   432   NtContinue  (1244252, 0, ...
 02050   432   NtContinue  (1244252, 0, ...
 02051   432   NtContinue  (1244252, 0, ...
 02052   432   NtContinue  (1244252, 0, ...
 02053   432   NtContinue  (1244252, 0, ...
 02054   432   NtContinue  (1244252, 0, ...
 02055   432   NtContinue  (1244252, 0, ...
 02056   432   NtContinue  (1244252, 0, ...
 02057   432   NtContinue  (1244252, 0, ...
 02058   432   NtContinue  (1244252, 0, ...
 02059   432   NtContinue  (1244252, 0, ...
 02060   432   NtContinue  (1244252, 0, ...
 02061   432   NtContinue  (1244252, 0, ...
 02062   432   NtContinue  (1244252, 0, ...
 02063   432   NtContinue  (1244252, 0, ...
 02064   432   NtContinue  (1244252, 0, ...
 02065   432   NtContinue  (1244252, 0, ...
 02066   432   NtContinue  (1244252, 0, ...
 02067   432   NtContinue  (1244252, 0, ...
 02068   432   NtContinue  (1244252, 0, ...
 02069   432   NtContinue  (1244252, 0, ...
 02070   432   NtContinue  (1244252, 0, ...
 02071   432   NtContinue  (1244252, 0, ...
 02072   432   NtContinue  (1244252, 0, ...
 02073   432   NtContinue  (1244252, 0, ...
 02074   432   NtContinue  (1244252, 0, ...
 02075   432   NtContinue  (1244252, 0, ...
 02076   432   NtContinue  (1244252, 0, ...
 02077   432   NtContinue  (1244252, 0, ...
 02078   432   NtContinue  (1244252, 0, ...
 02079   432   NtContinue  (1244252, 0, ...
 02080   432   NtContinue  (1244252, 0, ...
 02081   432   NtContinue  (1244252, 0, ...
 02082   432   NtContinue  (1244252, 0, ...
 02083   432   NtContinue  (1244252, 0, ...
 02084   432   NtContinue  (1244252, 0, ...
 02085   432   NtContinue  (1244252, 0, ...
 02086   432   NtContinue  (1244252, 0, ...
 02087   432   NtContinue  (1244252, 0, ...
 02088   432   NtContinue  (1244252, 0, ...
 02089   432   NtContinue  (1244252, 0, ...
 02090   432   NtContinue  (1244252, 0, ...
 02091   432   NtContinue  (1244252, 0, ...
 02092   432   NtContinue  (1244252, 0, ...
 02093   432   NtContinue  (1244252, 0, ...
 02094   432   NtContinue  (1244252, 0, ...
 02095   432   NtContinue  (1244252, 0, ...
 02096   432   NtContinue  (1244252, 0, ...
 02097   432   NtContinue  (1244252, 0, ...
 02098   432   NtContinue  (1244252, 0, ...
 02099   432   NtContinue  (1244252, 0, ...
 02100   432   NtContinue  (1244252, 0, ...
 02101   432   NtContinue  (1244252, 0, ...
 02102   432   NtContinue  (1244252, 0, ...
 02103   432   NtContinue  (1244252, 0, ...
 02104   432   NtContinue  (1244252, 0, ...
 02105   432   NtContinue  (1244252, 0, ...
 02106   432   NtContinue  (1244252, 0, ...
 02107   432   NtContinue  (1244252, 0, ...
 02108   432   NtContinue  (1244252, 0, ...
 02109   432   NtContinue  (1244252, 0, ...
 02110   432   NtContinue  (1244252, 0, ...
 02111   432   NtContinue  (1244252, 0, ...
 02112   432   NtContinue  (1244252, 0, ...
 02113   432   NtContinue  (1244252, 0, ...
 02114   432   NtContinue  (1244252, 0, ...
 02115   432   NtContinue  (1244252, 0, ...
 02116   432   NtContinue  (1244252, 0, ...
 02117   432   NtContinue  (1244252, 0, ...
 02118   432   NtContinue  (1244252, 0, ...
 02119   432   NtContinue  (1244252, 0, ...
 02120   432   NtContinue  (1244252, 0, ...
 02121   432   NtContinue  (1244252, 0, ...
 02122   432   NtContinue  (1244252, 0, ...
 02123   432   NtContinue  (1244252, 0, ...
 02124   432   NtContinue  (1244252, 0, ...
 02125   432   NtContinue  (1244252, 0, ...
 02126   432   NtContinue  (1244252, 0, ...
 02127   432   NtContinue  (1244252, 0, ...
 02128   432   NtContinue  (1244252, 0, ...
 02129   432   NtContinue  (1244252, 0, ...
 02130   432   NtContinue  (1244252, 0, ...
 02131   432   NtContinue  (1244252, 0, ...
 02132   432   NtContinue  (1244252, 0, ...
 02133   432   NtContinue  (1244252, 0, ...
 02134   432   NtContinue  (1244252, 0, ...
 02135   432   NtContinue  (1244252, 0, ...
 02136   432   NtContinue  (1244252, 0, ...
 02137   432   NtContinue  (1244252, 0, ...
 02138   432   NtContinue  (1244252, 0, ...
 02139   432   NtContinue  (1244252, 0, ...
 02140   432   NtContinue  (1244252, 0, ...
 02141   432   NtContinue  (1244252, 0, ...
 02142   432   NtContinue  (1244252, 0, ...
 02143   432   NtContinue  (1244252, 0, ...
 02144   432   NtContinue  (1244252, 0, ...
 02145   432   NtContinue  (1244252, 0, ...
 02146   432   NtContinue  (1244252, 0, ...
 02147   432   NtContinue  (1244252, 0, ...
 02148   432   NtContinue  (1244252, 0, ...
 02149   432   NtContinue  (1244252, 0, ...
 02150   432   NtContinue  (1244252, 0, ...
 02151   432   NtContinue  (1244252, 0, ...
 02152   432   NtContinue  (1244252, 0, ...
 02153   432   NtContinue  (1244252, 0, ...
 02154   432   NtContinue  (1244252, 0, ...
 02155   432   NtContinue  (1244252, 0, ...
 02156   432   NtContinue  (1244252, 0, ...
 02157   432   NtContinue  (1244252, 0, ...
 02158   432   NtContinue  (1244252, 0, ...
 02159   432   NtContinue  (1244252, 0, ...
 02160   432   NtContinue  (1244252, 0, ...
 02161   432   NtContinue  (1244252, 0, ...
 02162   432   NtContinue  (1244252, 0, ...
 02163   432   NtContinue  (1244252, 0, ...
 02164   432   NtContinue  (1244252, 0, ...
 02165   432   NtContinue  (1244252, 0, ...
 02166   432   NtContinue  (1244252, 0, ...
 02167   432   NtContinue  (1244252, 0, ...
 02168   432   NtContinue  (1244252, 0, ...
 02169   432   NtContinue  (1244252, 0, ...
 02170   432   NtContinue  (1244252, 0, ...
 02171   432   NtContinue  (1244252, 0, ...
 02172   432   NtContinue  (1244252, 0, ...
 02173   432   NtContinue  (1244252, 0, ...
 02174   432   NtContinue  (1244252, 0, ...
 02175   432   NtContinue  (1244252, 0, ...
 02176   432   NtContinue  (1244252, 0, ...
 02177   432   NtContinue  (1244252, 0, ...
 02178   432   NtContinue  (1244252, 0, ...
 02179   432   NtContinue  (1244252, 0, ...
 02180   432   NtContinue  (1244252, 0, ...
 02181   432   NtContinue  (1244252, 0, ...
 02182   432   NtContinue  (1244252, 0, ...
 02183   432   NtContinue  (1244252, 0, ...
 02184   432   NtContinue  (1244252, 0, ...
 02185   432   NtContinue  (1244252, 0, ...
 02186   432   NtContinue  (1244252, 0, ...
 02187   432   NtContinue  (1244252, 0, ...
 02188   432   NtContinue  (1244252, 0, ...
 02189   432   NtContinue  (1244252, 0, ...
 02190   432   NtContinue  (1244252, 0, ...
 02191   432   NtContinue  (1244252, 0, ...
 02192   432   NtContinue  (1244252, 0, ...
 02193   432   NtContinue  (1244252, 0, ...
 02194   432   NtContinue  (1244252, 0, ...
 02195   432   NtContinue  (1244252, 0, ...
 02196   432   NtContinue  (1244252, 0, ...
 02197   432   NtContinue  (1244252, 0, ...
 02198   432   NtContinue  (1244252, 0, ...
 02199   432   NtContinue  (1244252, 0, ...
 02200   432   NtContinue  (1244252, 0, ...
 02201   432   NtContinue  (1244252, 0, ...
 02202   432   NtContinue  (1244252, 0, ...
 02203   432   NtContinue  (1244252, 0, ...
 02204   432   NtContinue  (1244252, 0, ...
 02205   432   NtContinue  (1244252, 0, ...
 02206   432   NtContinue  (1244252, 0, ...
 02207   432   NtContinue  (1244252, 0, ...
 02208   432   NtContinue  (1244252, 0, ...
 02209   432   NtContinue  (1244252, 0, ...
 02210   432   NtContinue  (1244252, 0, ...
 02211   432   NtContinue  (1244252, 0, ...
 02212   432   NtContinue  (1244252, 0, ...
 02213   432   NtContinue  (1244252, 0, ...
 02214   432   NtContinue  (1244252, 0, ...
 02215   432   NtContinue  (1244252, 0, ...
 02216   432   NtContinue  (1244252, 0, ...
 02217   432   NtContinue  (1244252, 0, ...
 02218   432   NtContinue  (1244252, 0, ...
 02219   432   NtContinue  (1244252, 0, ...
 02220   432   NtContinue  (1244252, 0, ...
 02221   432   NtContinue  (1244252, 0, ...
 02222   432   NtContinue  (1244252, 0, ...
 02223   432   NtContinue  (1244252, 0, ...
 02224   432   NtContinue  (1244252, 0, ...
 02225   432   NtContinue  (1244252, 0, ...
 02226   432   NtContinue  (1244252, 0, ...
 02227   432   NtContinue  (1244252, 0, ...
 02228   432   NtContinue  (1244252, 0, ...
 02229   432   NtContinue  (1244252, 0, ...
 02230   432   NtContinue  (1244252, 0, ...
 02231   432   NtContinue  (1244252, 0, ...
 02232   432   NtContinue  (1244252, 0, ...
 02233   432   NtContinue  (1244252, 0, ...
 02234   432   NtContinue  (1244252, 0, ...
 02235   432   NtContinue  (1244252, 0, ...
 02236   432   NtContinue  (1244252, 0, ...
 02237   432   NtContinue  (1244252, 0, ...
 02238   432   NtContinue  (1244252, 0, ...
 02239   432   NtContinue  (1244252, 0, ...
 02240   432   NtContinue  (1244252, 0, ...
 02241   432   NtContinue  (1244252, 0, ...
 02242   432   NtContinue  (1244252, 0, ...
 02243   432   NtContinue  (1244252, 0, ...
 02244   432   NtContinue  (1244252, 0, ...
 02245   432   NtContinue  (1244252, 0, ...
 02246   432   NtContinue  (1244252, 0, ...
 02247   432   NtContinue  (1244252, 0, ...
 02248   432   NtContinue  (1244252, 0, ...
 02249   432   NtContinue  (1244252, 0, ...
 02250   432   NtContinue  (1244252, 0, ...
 02251   432   NtContinue  (1244252, 0, ...
 02252   432   NtContinue  (1244252, 0, ...
 02253   432   NtContinue  (1244252, 0, ...
 02254   432   NtContinue  (1244252, 0, ...
 02255   432   NtContinue  (1244252, 0, ...
 02256   432   NtContinue  (1244252, 0, ...
 02257   432   NtContinue  (1244252, 0, ...
 02258   432   NtContinue  (1244252, 0, ...
 02259   432   NtContinue  (1244252, 0, ...
 02260   432   NtContinue  (1244252, 0, ...
 02261   432   NtContinue  (1244252, 0, ...
 02262   432   NtContinue  (1244252, 0, ...
 02263   432   NtContinue  (1244252, 0, ...
 02264   432   NtContinue  (1244252, 0, ...
 02265   432   NtContinue  (1244252, 0, ...
 02266   432   NtContinue  (1244252, 0, ...
 02267   432   NtContinue  (1244252, 0, ...
 02268   432   NtContinue  (1244252, 0, ...
 02269   432   NtContinue  (1244252, 0, ...
 02270   432   NtContinue  (1244252, 0, ...
 02271   432   NtContinue  (1244252, 0, ...
 02272   432   NtContinue  (1244252, 0, ...
 02273   432   NtContinue  (1244252, 0, ...
 02274   432   NtContinue  (1244252, 0, ...
 02275   432   NtContinue  (1244252, 0, ...
 02276   432   NtContinue  (1244252, 0, ...
 02277   432   NtContinue  (1244252, 0, ...
 02278   432   NtContinue  (1244252, 0, ...
 02279   432   NtContinue  (1244252, 0, ...
 02280   432   NtContinue  (1244252, 0, ...
 02281   432   NtContinue  (1244252, 0, ...
 02282   432   NtContinue  (1244252, 0, ...
 02283   432   NtContinue  (1244252, 0, ...
 02284   432   NtContinue  (1244252, 0, ...
 02285   432   NtContinue  (1244252, 0, ...
 02286   432   NtContinue  (1244252, 0, ...
 02287   432   NtContinue  (1244252, 0, ...
 02288   432   NtContinue  (1244252, 0, ...
 02289   432   NtContinue  (1244252, 0, ...
 02290   432   NtContinue  (1244252, 0, ...
 02291   432   NtContinue  (1244252, 0, ...
 02292   432   NtContinue  (1244252, 0, ...
 02293   432   NtContinue  (1244252, 0, ...
 02294   432   NtContinue  (1244252, 0, ...
 02295   432   NtContinue  (1244252, 0, ...
 02296   432   NtContinue  (1244252, 0, ...
 02297   432   NtContinue  (1244252, 0, ...
 02298   432   NtContinue  (1244252, 0, ...
 02299   432   NtContinue  (1244252, 0, ...
 02300   432   NtContinue  (1244252, 0, ...
 02301   432   NtContinue  (1244252, 0, ...
 02302   432   NtContinue  (1244252, 0, ...
 02303   432   NtContinue  (1244252, 0, ...
 02304   432   NtContinue  (1244252, 0, ...
 02305   432   NtContinue  (1244252, 0, ...
 02306   432   NtContinue  (1244252, 0, ...
 02307   432   NtContinue  (1244252, 0, ...
 02308   432   NtContinue  (1244252, 0, ...
 02309   432   NtContinue  (1244252, 0, ...
 02310   432   NtContinue  (1244252, 0, ...
 02311   432   NtContinue  (1244252, 0, ...
 02312   432   NtContinue  (1244252, 0, ...
 02313   432   NtContinue  (1244252, 0, ...
 02314   432   NtContinue  (1244252, 0, ...
 02315   432   NtContinue  (1244252, 0, ...
 02316   432   NtContinue  (1244252, 0, ...
 02317   432   NtContinue  (1244252, 0, ...
 02318   432   NtContinue  (1244252, 0, ...
 02319   432   NtContinue  (1244252, 0, ...
 02320   432   NtContinue  (1244252, 0, ...
 02321   432   NtContinue  (1244252, 0, ...
 02322   432   NtContinue  (1244252, 0, ...
 02323   432   NtContinue  (1244252, 0, ...
 02324   432   NtContinue  (1244252, 0, ...
 02325   432   NtContinue  (1244252, 0, ...
 02326   432   NtContinue  (1244252, 0, ...
 02327   432   NtContinue  (1244252, 0, ...
 02328   432   NtContinue  (1244252, 0, ...
 02329   432   NtContinue  (1244252, 0, ...
 02330   432   NtContinue  (1244252, 0, ...
 02331   432   NtContinue  (1244252, 0, ...
 02332   432   NtContinue  (1244252, 0, ...
 02333   432   NtContinue  (1244252, 0, ...
 02334   432   NtContinue  (1244252, 0, ...
 02335   432   NtContinue  (1244252, 0, ...
 02336   432   NtContinue  (1244252, 0, ...
 02337   432   NtContinue  (1244252, 0, ...
 02338   432   NtContinue  (1244252, 0, ...
 02339   432   NtContinue  (1244252, 0, ...
 02340   432   NtContinue  (1244252, 0, ...
 02341   432   NtContinue  (1244252, 0, ...
 02342   432   NtContinue  (1244252, 0, ...
 02343   432   NtContinue  (1244252, 0, ...
 02344   432   NtContinue  (1244252, 0, ...
 02345   432   NtContinue  (1244252, 0, ...
 02346   432   NtContinue  (1244252, 0, ...
 02347   432   NtContinue  (1244252, 0, ...
 02348   432   NtContinue  (1244252, 0, ...
 02349   432   NtContinue  (1244252, 0, ...
 02350   432   NtContinue  (1244252, 0, ...
 02351   432   NtContinue  (1244252, 0, ...
 02352   432   NtContinue  (1244252, 0, ...
 02353   432   NtContinue  (1244252, 0, ...
 02354   432   NtContinue  (1244252, 0, ...
 02355   432   NtContinue  (1244252, 0, ...
 02356   432   NtContinue  (1244252, 0, ...
 02357   432   NtContinue  (1244252, 0, ...
 02358   432   NtContinue  (1244252, 0, ...
 02359   432   NtContinue  (1244252, 0, ...
 02360   432   NtContinue  (1244252, 0, ...
 02361   432   NtContinue  (1244252, 0, ...
 02362   432   NtContinue  (1244252, 0, ...
 02363   432   NtContinue  (1244252, 0, ...
 02364   432   NtContinue  (1244252, 0, ...
 02365   432   NtContinue  (1244252, 0, ...
 02366   432   NtContinue  (1244252, 0, ...
 02367   432   NtContinue  (1244252, 0, ...
 02368   432   NtContinue  (1244252, 0, ...
 02369   432   NtContinue  (1244252, 0, ...
 02370   432   NtContinue  (1244252, 0, ...
 02371   432   NtContinue  (1244252, 0, ...
 02372   432   NtContinue  (1244252, 0, ...
 02373   432   NtContinue  (1244252, 0, ...
 02374   432   NtContinue  (1244252, 0, ...
 02375   432   NtContinue  (1244252, 0, ...
 02376   432   NtContinue  (1244252, 0, ...
 02377   432   NtContinue  (1244252, 0, ...
 02378   432   NtContinue  (1244252, 0, ...
 02379   432   NtContinue  (1244252, 0, ...
 02380   432   NtContinue  (1244252, 0, ...
 02381   432   NtContinue  (1244252, 0, ...
 02382   432   NtContinue  (1244252, 0, ...
 02383   432   NtContinue  (1244252, 0, ...
 02384   432   NtContinue  (1244252, 0, ...
 02385   432   NtContinue  (1244252, 0, ...
 02386   432   NtContinue  (1244252, 0, ...
 02387   432   NtContinue  (1244252, 0, ...
 02388   432   NtContinue  (1244252, 0, ...
 02389   432   NtContinue  (1244252, 0, ...
 02390   432   NtContinue  (1244252, 0, ...
 02391   432   NtContinue  (1244252, 0, ...
 02392   432   NtContinue  (1244252, 0, ...
 02393   432   NtContinue  (1244252, 0, ...
 02394   432   NtContinue  (1244252, 0, ...
 02395   432   NtContinue  (1244252, 0, ...
 02396   432   NtContinue  (1244252, 0, ...
 02397   432   NtContinue  (1244252, 0, ...
 02398   432   NtContinue  (1244252, 0, ...
 02399   432   NtContinue  (1244252, 0, ...
 02400   432   NtContinue  (1244252, 0, ...
 02401   432   NtContinue  (1244252, 0, ...
 02402   432   NtContinue  (1244252, 0, ...
 02403   432   NtContinue  (1244252, 0, ...
 02404   432   NtContinue  (1244252, 0, ...
 02405   432   NtContinue  (1244252, 0, ...
 02406   432   NtContinue  (1244252, 0, ...
 02407   432   NtContinue  (1244252, 0, ...
 02408   432   NtContinue  (1244252, 0, ...
 02409   432   NtContinue  (1244252, 0, ...
 02410   432   NtContinue  (1244252, 0, ...
 02411   432   NtContinue  (1244252, 0, ...
 02412   432   NtContinue  (1244252, 0, ...
 02413   432   NtContinue  (1244252, 0, ...
 02414   432   NtContinue  (1244252, 0, ...
 02415   432   NtContinue  (1244252, 0, ...
 02416   432   NtContinue  (1244252, 0, ...
 02417   432   NtContinue  (1244252, 0, ...
 02418   432   NtContinue  (1244252, 0, ...
 02419   432   NtContinue  (1244252, 0, ...
 02420   432   NtContinue  (1244252, 0, ...
 02421   432   NtContinue  (1244252, 0, ...
 02422   432   NtContinue  (1244252, 0, ...
 02423   432   NtContinue  (1244252, 0, ...
 02424   432   NtContinue  (1244252, 0, ...
 02425   432   NtContinue  (1244252, 0, ...
 02426   432   NtContinue  (1244252, 0, ...
 02427   432   NtContinue  (1244252, 0, ...
 02428   432   NtContinue  (1244252, 0, ...
 02429   432   NtContinue  (1244252, 0, ...
 02430   432   NtContinue  (1244252, 0, ...
 02431   432   NtContinue  (1244252, 0, ...
 02432   432   NtContinue  (1244252, 0, ...
 02433   432   NtContinue  (1244252, 0, ...
 02434   432   NtContinue  (1244252, 0, ...
 02435   432   NtContinue  (1244252, 0, ...
 02436   432   NtContinue  (1244252, 0, ...
 02437   432   NtContinue  (1244252, 0, ...
 02438   432   NtContinue  (1244252, 0, ...
 02439   432   NtContinue  (1244252, 0, ...
 02440   432   NtContinue  (1244252, 0, ...
 02441   432   NtContinue  (1244252, 0, ...
 02442   432   NtContinue  (1244252, 0, ...
 02443   432   NtContinue  (1244252, 0, ...
 02444   432   NtContinue  (1244252, 0, ...
 02445   432   NtContinue  (1244252, 0, ...
 02446   432   NtContinue  (1244252, 0, ...
 02447   432   NtContinue  (1244252, 0, ...
 02448   432   NtContinue  (1244252, 0, ...
 02449   432   NtContinue  (1244252, 0, ...
 02450   432   NtContinue  (1244252, 0, ...
 02451   432   NtContinue  (1244252, 0, ...
 02452   432   NtContinue  (1244252, 0, ...
 02453   432   NtContinue  (1244252, 0, ...
 02454   432   NtContinue  (1244252, 0, ...
 02455   432   NtContinue  (1244252, 0, ...
 02456   432   NtContinue  (1244252, 0, ...
 02457   432   NtContinue  (1244252, 0, ...
 02458   432   NtContinue  (1244252, 0, ...
 02459   432   NtContinue  (1244252, 0, ...
 02460   432   NtContinue  (1244252, 0, ...
 02461   432   NtContinue  (1244252, 0, ...
 02462   432   NtContinue  (1244252, 0, ...
 02463   432   NtContinue  (1244252, 0, ...
 02464   432   NtContinue  (1244252, 0, ...
 02465   432   NtContinue  (1244252, 0, ...
 02466   432   NtContinue  (1244252, 0, ...
 02467   432   NtContinue  (1244252, 0, ...
 02468   432   NtContinue  (1244252, 0, ...
 02469   432   NtContinue  (1244252, 0, ...
 02470   432   NtContinue  (1244252, 0, ...
 02471   432   NtContinue  (1244252, 0, ...
 02472   432   NtContinue  (1244252, 0, ...
 02473   432   NtContinue  (1244252, 0, ...
 02474   432   NtContinue  (1244252, 0, ...
 02475   432   NtContinue  (1244252, 0, ...
 02476   432   NtContinue  (1244252, 0, ...
 02477   432   NtContinue  (1244252, 0, ...
 02478   432   NtContinue  (1244252, 0, ...
 02479   432   NtContinue  (1244252, 0, ...
 02480   432   NtContinue  (1244252, 0, ...
 02481   432   NtContinue  (1244252, 0, ...
 02482   432   NtContinue  (1244252, 0, ...
 02483   432   NtContinue  (1244252, 0, ...
 02484   432   NtContinue  (1244252, 0, ...
 02485   432   NtContinue  (1244252, 0, ...
 02486   432   NtContinue  (1244252, 0, ...
 02487   432   NtContinue  (1244252, 0, ...
 02488   432   NtContinue  (1244252, 0, ...
 02489   432   NtContinue  (1244252, 0, ...
 02490   432   NtContinue  (1244252, 0, ...
 02491   432   NtContinue  (1244252, 0, ...
 02492   432   NtContinue  (1244252, 0, ...
 02493   432   NtContinue  (1244252, 0, ...
 02494   432   NtContinue  (1244252, 0, ...
 02495   432   NtContinue  (1244252, 0, ...
 02496   432   NtContinue  (1244252, 0, ...
 02497   432   NtContinue  (1244252, 0, ...
 02498   432   NtContinue  (1244252, 0, ...
 02499   432   NtContinue  (1244252, 0, ...
 02500   432   NtContinue  (1244252, 0, ...
 02501   432   NtContinue  (1244252, 0, ...
 02502   432   NtContinue  (1244252, 0, ...
 02503   432   NtContinue  (1244252, 0, ...
 02504   432   NtContinue  (1244252, 0, ...
 02505   432   NtContinue  (1244252, 0, ...
 02506   432   NtContinue  (1244252, 0, ...
 02507   432   NtContinue  (1244252, 0, ...
 02508   432   NtContinue  (1244252, 0, ...
 02509   432   NtContinue  (1244252, 0, ...
 02510   432   NtContinue  (1244252, 0, ...
 02511   432   NtContinue  (1244252, 0, ...
 02512   432   NtContinue  (1244252, 0, ...
 02513   432   NtContinue  (1244252, 0, ...
 02514   432   NtContinue  (1244252, 0, ...
 02515   432   NtContinue  (1244252, 0, ...
 02516   432   NtContinue  (1244252, 0, ...
 02517   432   NtContinue  (1244252, 0, ...
 02518   432   NtContinue  (1244252, 0, ...
 02519   432   NtContinue  (1244252, 0, ...
 02520   432   NtContinue  (1244252, 0, ...
 02521   432   NtContinue  (1244252, 0, ...
 02522   432   NtContinue  (1244252, 0, ...
 02523   432   NtContinue  (1244252, 0, ...
 02524   432   NtContinue  (1244252, 0, ...
 02525   432   NtContinue  (1244252, 0, ...
 02526   432   NtContinue  (1244252, 0, ...
 02527   432   NtContinue  (1244252, 0, ...
 02528   432   NtContinue  (1244252, 0, ...
 02529   432   NtContinue  (1244252, 0, ...
 02530   432   NtContinue  (1244252, 0, ...
 02531   432   NtContinue  (1244252, 0, ...
 02532   432   NtContinue  (1244252, 0, ...
 02533   432   NtContinue  (1244252, 0, ...
 02534   432   NtContinue  (1244252, 0, ...
 02535   432   NtContinue  (1244252, 0, ...
 02536   432   NtContinue  (1244252, 0, ...
 02537   432   NtContinue  (1244252, 0, ...
 02538   432   NtContinue  (1244252, 0, ...
 02539   432   NtContinue  (1244252, 0, ...
 02540   432   NtContinue  (1244252, 0, ...
 02541   432   NtContinue  (1244252, 0, ...
 02542   432   NtContinue  (1244252, 0, ...
 02543   432   NtContinue  (1244252, 0, ...
 02544   432   NtContinue  (1244252, 0, ...
 02545   432   NtContinue  (1244252, 0, ...
 02546   432   NtContinue  (1244252, 0, ...
 02547   432   NtContinue  (1244252, 0, ...
 02548   432   NtContinue  (1244252, 0, ...
 02549   432   NtContinue  (1244252, 0, ...
 02550   432   NtContinue  (1244252, 0, ...
 02551   432   NtContinue  (1244252, 0, ...
 02552   432   NtContinue  (1244252, 0, ...
 02553   432   NtContinue  (1244252, 0, ...
 02554   432   NtContinue  (1244252, 0, ...
 02555   432   NtContinue  (1244252, 0, ...
 02556   432   NtContinue  (1244252, 0, ...
 02557   432   NtContinue  (1244252, 0, ...
 02558   432   NtContinue  (1244252, 0, ...
 02559   432   NtContinue  (1244252, 0, ...
 02560   432   NtContinue  (1244252, 0, ...
 02561   432   NtContinue  (1244252, 0, ...
 02562   432   NtContinue  (1244252, 0, ...
 02563   432   NtContinue  (1244252, 0, ...
 02564   432   NtContinue  (1244252, 0, ...
 02565   432   NtContinue  (1244252, 0, ...
 02566   432   NtContinue  (1244252, 0, ...
 02567   432   NtContinue  (1244252, 0, ...
 02568   432   NtContinue  (1244252, 0, ...
 02569   432   NtContinue  (1244252, 0, ...
 02570   432   NtContinue  (1244252, 0, ...
 02571   432   NtContinue  (1244252, 0, ...
 02572   432   NtContinue  (1244252, 0, ...
 02573   432   NtContinue  (1244252, 0, ...
 02574   432   NtContinue  (1244252, 0, ...
 02575   432   NtContinue  (1244252, 0, ...
 02576   432   NtContinue  (1244252, 0, ...
 02577   432   NtContinue  (1244252, 0, ...
 02578   432   NtContinue  (1244252, 0, ...
 02579   432   NtContinue  (1244252, 0, ...
 02580   432   NtContinue  (1244252, 0, ...
 02581   432   NtContinue  (1244252, 0, ...
 02582   432   NtContinue  (1244252, 0, ...
 02583   432   NtContinue  (1244252, 0, ...
 02584   432   NtContinue  (1244252, 0, ...
 02585   432   NtContinue  (1244252, 0, ...
 02586   432   NtContinue  (1244252, 0, ...
 02587   432   NtContinue  (1244252, 0, ...
 02588   432   NtContinue  (1244252, 0, ...
 02589   432   NtContinue  (1244252, 0, ...
 02590   432   NtContinue  (1244252, 0, ...
 02591   432   NtContinue  (1244252, 0, ...
 02592   432   NtContinue  (1244252, 0, ...
 02593   432   NtContinue  (1244252, 0, ...
 02594   432   NtContinue  (1244252, 0, ...
 02595   432   NtContinue  (1244252, 0, ...
 02596   432   NtContinue  (1244252, 0, ...
 02597   432   NtContinue  (1244252, 0, ...
 02598   432   NtContinue  (1244252, 0, ...
 02599   432   NtContinue  (1244252, 0, ...
 02600   432   NtContinue  (1244252, 0, ...
 02601   432   NtContinue  (1244252, 0, ...
 02602   432   NtContinue  (1244252, 0, ...
 02603   432   NtContinue  (1244252, 0, ...
 02604   432   NtContinue  (1244252, 0, ...
 02605   432   NtContinue  (1244252, 0, ...
 02606   432   NtContinue  (1244252, 0, ...
 02607   432   NtContinue  (1244252, 0, ...
 02608   432   NtContinue  (1244252, 0, ...
 02609   432   NtContinue  (1244252, 0, ...
 02610   432   NtContinue  (1244252, 0, ...
 02611   432   NtContinue  (1244252, 0, ...
 02612   432   NtContinue  (1244252, 0, ...
 02613   432   NtContinue  (1244252, 0, ...
 02614   432   NtContinue  (1244252, 0, ...
 02615   432   NtContinue  (1244252, 0, ...
 02616   432   NtContinue  (1244252, 0, ...
 02617   432   NtContinue  (1244252, 0, ...
 02618   432   NtContinue  (1244252, 0, ...
 02619   432   NtContinue  (1244252, 0, ...
 02620   432   NtContinue  (1244252, 0, ...
 02621   432   NtContinue  (1244252, 0, ...
 02622   432   NtContinue  (1244252, 0, ...
 02623   432   NtContinue  (1244252, 0, ...
 02624   432   NtContinue  (1244252, 0, ...
 02625   432   NtContinue  (1244252, 0, ...
 02626   432   NtContinue  (1244252, 0, ...
 02627   432   NtContinue  (1244252, 0, ...
 02628   432   NtContinue  (1244252, 0, ...
 02629   432   NtContinue  (1244252, 0, ...
 02630   432   NtContinue  (1244252, 0, ...
 02631   432   NtContinue  (1244252, 0, ...
 02632   432   NtContinue  (1244252, 0, ...
 02633   432   NtContinue  (1244252, 0, ...
 02634   432   NtContinue  (1244252, 0, ...
 02635   432   NtContinue  (1244252, 0, ...
 02636   432   NtContinue  (1244252, 0, ...
 02637   432   NtContinue  (1244252, 0, ...
 02638   432   NtContinue  (1244252, 0, ...
 02639   432   NtContinue  (1244252, 0, ...
 02640   432   NtContinue  (1244252, 0, ...
 02641   432   NtContinue  (1244252, 0, ...
 02642   432   NtContinue  (1244252, 0, ...
 02643   432   NtContinue  (1244252, 0, ...
 02644   432   NtContinue  (1244252, 0, ...
 02645   432   NtContinue  (1244252, 0, ...
 02646   432   NtContinue  (1244252, 0, ...
 02647   432   NtContinue  (1244252, 0, ...
 02648   432   NtContinue  (1244252, 0, ...
 02649   432   NtContinue  (1244252, 0, ...
 02650   432   NtContinue  (1244252, 0, ...
 02651   432   NtContinue  (1244252, 0, ...
 02652   432   NtContinue  (1244252, 0, ...
 02653   432   NtContinue  (1244252, 0, ...
 02654   432   NtContinue  (1244252, 0, ...
 02655   432   NtContinue  (1244252, 0, ...
 02656   432   NtContinue  (1244252, 0, ...
 02657   432   NtContinue  (1244252, 0, ...
 02658   432   NtContinue  (1244252, 0, ...
 02659   432   NtContinue  (1244252, 0, ...
 02660   432   NtContinue  (1244252, 0, ...
 02661   432   NtContinue  (1244252, 0, ...
 02662   432   NtContinue  (1244252, 0, ...
 02663   432   NtContinue  (1244252, 0, ...
 02664   432   NtContinue  (1244252, 0, ...
 02665   432   NtContinue  (1244252, 0, ...
 02666   432   NtContinue  (1244252, 0, ...
 02667   432   NtContinue  (1244252, 0, ...
 02668   432   NtContinue  (1244252, 0, ...
 02669   432   NtContinue  (1244252, 0, ...
 02670   432   NtContinue  (1244252, 0, ...
 02671   432   NtContinue  (1244252, 0, ...
 02672   432   NtContinue  (1244252, 0, ...
 02673   432   NtContinue  (1244252, 0, ...
 02674   432   NtContinue  (1244252, 0, ...
 02675   432   NtContinue  (1244252, 0, ...
 02676   432   NtContinue  (1244252, 0, ...
 02677   432   NtContinue  (1244252, 0, ...
 02678   432   NtContinue  (1244252, 0, ...
 02679   432   NtContinue  (1244252, 0, ...
 02680   432   NtContinue  (1244252, 0, ...
 02681   432   NtContinue  (1244252, 0, ...
 02682   432   NtContinue  (1244252, 0, ...
 02683   432   NtContinue  (1244252, 0, ...
 02684   432   NtContinue  (1244252, 0, ...
 02685   432   NtContinue  (1244252, 0, ...
 02686   432   NtContinue  (1244252, 0, ...
 02687   432   NtContinue  (1244252, 0, ...
 02688   432   NtContinue  (1244252, 0, ...
 02689   432   NtContinue  (1244252, 0, ...
 02690   432   NtContinue  (1244252, 0, ...
 02691   432   NtContinue  (1244252, 0, ...
 02692   432   NtContinue  (1244252, 0, ...
 02693   432   NtContinue  (1244252, 0, ...
 02694   432   NtContinue  (1244252, 0, ...
 02695   432   NtContinue  (1244252, 0, ...
 02696   432   NtContinue  (1244252, 0, ...
 02697   432   NtContinue  (1244252, 0, ...
 02698   432   NtContinue  (1244252, 0, ...
 02699   432   NtContinue  (1244252, 0, ...
 02700   432   NtContinue  (1244252, 0, ...
 02701   432   NtContinue  (1244252, 0, ...
 02702   432   NtContinue  (1244252, 0, ...
 02703   432   NtContinue  (1244252, 0, ...
 02704   432   NtContinue  (1244252, 0, ...
 02705   432   NtContinue  (1244252, 0, ...
 02706   432   NtContinue  (1244252, 0, ...
 02707   432   NtContinue  (1244252, 0, ...
 02708   432   NtContinue  (1244252, 0, ...
 02709   432   NtContinue  (1244252, 0, ...
 02710   432   NtContinue  (1244252, 0, ...
 02711   432   NtContinue  (1244252, 0, ...
 02712   432   NtContinue  (1244252, 0, ...
 02713   432   NtContinue  (1244252, 0, ...
 02714   432   NtContinue  (1244252, 0, ...
 02715   432   NtContinue  (1244252, 0, ...
 02716   432   NtContinue  (1244252, 0, ...
 02717   432   NtContinue  (1244252, 0, ...
 02718   432   NtContinue  (1244252, 0, ...
 02719   432   NtContinue  (1244252, 0, ...
 02720   432   NtContinue  (1244252, 0, ...
 02721   432   NtContinue  (1244252, 0, ...
 02722   432   NtContinue  (1244252, 0, ...
 02723   432   NtContinue  (1244252, 0, ...
 02724   432   NtContinue  (1244252, 0, ...
 02725   432   NtContinue  (1244252, 0, ...
 02726   432   NtContinue  (1244252, 0, ...
 02727   432   NtContinue  (1244252, 0, ...
 02728   432   NtContinue  (1244252, 0, ...
 02729   432   NtContinue  (1244252, 0, ...
 02730   432   NtContinue  (1244252, 0, ...
 02731   432   NtContinue  (1244252, 0, ...
 02732   432   NtContinue  (1244252, 0, ...
 02733   432   NtContinue  (1244252, 0, ...
 02734   432   NtContinue  (1244252, 0, ...
 02735   432   NtContinue  (1244252, 0, ...
 02736   432   NtContinue  (1244252, 0, ...
 02737   432   NtContinue  (1244252, 0, ...
 02738   432   NtContinue  (1244252, 0, ...
 02739   432   NtContinue  (1244252, 0, ...
 02740   432   NtContinue  (1244252, 0, ...
 02741   432   NtContinue  (1244252, 0, ...
 02742   432   NtContinue  (1244252, 0, ...
 02743   432   NtContinue  (1244252, 0, ...
 02744   432   NtContinue  (1244252, 0, ...
 02745   432   NtContinue  (1244252, 0, ...
 02746   432   NtContinue  (1244252, 0, ...
 02747   432   NtContinue  (1244252, 0, ...
 02748   432   NtContinue  (1244252, 0, ...
 02749   432   NtContinue  (1244252, 0, ...
 02750   432   NtContinue  (1244252, 0, ...
 02751   432   NtContinue  (1244252, 0, ...
 02752   432   NtContinue  (1244252, 0, ...
 02753   432   NtContinue  (1244252, 0, ...
 02754   432   NtContinue  (1244252, 0, ...
 02755   432   NtContinue  (1244252, 0, ...
 02756   432   NtContinue  (1244252, 0, ...
 02757   432   NtContinue  (1244252, 0, ...
 02758   432   NtContinue  (1244252, 0, ...
 02759   432   NtContinue  (1244252, 0, ...
 02760   432   NtContinue  (1244252, 0, ...
 02761   432   NtContinue  (1244252, 0, ...
 02762   432   NtContinue  (1244252, 0, ...
 02763   432   NtContinue  (1244252, 0, ...
 02764   432   NtContinue  (1244252, 0, ...
 02765   432   NtContinue  (1244252, 0, ...
 02766   432   NtContinue  (1244252, 0, ...
 02767   432   NtContinue  (1244252, 0, ...
 02768   432   NtContinue  (1244252, 0, ...
 02769   432   NtContinue  (1244252, 0, ...
 02770   432   NtContinue  (1244252, 0, ...
 02771   432   NtContinue  (1244252, 0, ...
 02772   432   NtContinue  (1244252, 0, ...
 02773   432   NtContinue  (1244252, 0, ...
 02774   432   NtContinue  (1244252, 0, ...
 02775   432   NtContinue  (1244252, 0, ...
 02776   432   NtContinue  (1244252, 0, ...
 02777   432   NtContinue  (1244252, 0, ...
 02778   432   NtContinue  (1244252, 0, ...
 02779   432   NtContinue  (1244252, 0, ...
 02780   432   NtContinue  (1244252, 0, ...
 02781   432   NtContinue  (1244252, 0, ...
 02782   432   NtContinue  (1244252, 0, ...
 02783   432   NtContinue  (1244252, 0, ...
 02784   432   NtContinue  (1244252, 0, ...
 02785   432   NtContinue  (1244252, 0, ...
 02786   432   NtContinue  (1244252, 0, ...
 02787   432   NtContinue  (1244252, 0, ...
 02788   432   NtContinue  (1244252, 0, ...
 02789   432   NtContinue  (1244252, 0, ...
 02790   432   NtContinue  (1244252, 0, ...
 02791   432   NtContinue  (1244252, 0, ...
 02792   432   NtContinue  (1244252, 0, ...
 02793   432   NtContinue  (1244252, 0, ...
 02794   432   NtContinue  (1244252, 0, ...
 02795   432   NtContinue  (1244252, 0, ...
 02796   432   NtContinue  (1244252, 0, ...
 02797   432   NtContinue  (1244252, 0, ...
 02798   432   NtContinue  (1244252, 0, ...
 02799   432   NtContinue  (1244252, 0, ...
 02800   432   NtContinue  (1244252, 0, ...
 02801   432   NtContinue  (1244252, 0, ...
 02802   432   NtContinue  (1244252, 0, ...
 02803   432   NtContinue  (1244252, 0, ...
 02804   432   NtContinue  (1244252, 0, ...
 02805   432   NtContinue  (1244252, 0, ...
 02806   432   NtContinue  (1244252, 0, ...
 02807   432   NtContinue  (1244252, 0, ...
 02808   432   NtContinue  (1244252, 0, ...
 02809   432   NtContinue  (1244252, 0, ...
 02810   432   NtContinue  (1244252, 0, ...
 02811   432   NtContinue  (1244252, 0, ...
 02812   432   NtContinue  (1244252, 0, ...
 02813   432   NtContinue  (1244252, 0, ...
 02814   432   NtContinue  (1244252, 0, ...
 02815   432   NtContinue  (1244252, 0, ...
 02816   432   NtContinue  (1244252, 0, ...
 02817   432   NtContinue  (1244252, 0, ...
 02818   432   NtContinue  (1244252, 0, ...
 02819   432   NtContinue  (1244252, 0, ...
 02820   432   NtContinue  (1244252, 0, ...
 02821   432   NtContinue  (1244252, 0, ...
 02822   432   NtContinue  (1244252, 0, ...
 02823   432   NtContinue  (1244252, 0, ...
 02824   432   NtContinue  (1244252, 0, ...
 02825   432   NtContinue  (1244252, 0, ...
 02826   432   NtContinue  (1244252, 0, ...
 02827   432   NtContinue  (1244252, 0, ...
 02828   432   NtContinue  (1244252, 0, ...
 02829   432   NtContinue  (1244252, 0, ...
 02830   432   NtContinue  (1244252, 0, ...
 02831   432   NtContinue  (1244252, 0, ...
 02832   432   NtContinue  (1244252, 0, ...
 02833   432   NtContinue  (1244252, 0, ...
 02834   432   NtContinue  (1244252, 0, ...
 02835   432   NtContinue  (1244252, 0, ...
 02836   432   NtContinue  (1244252, 0, ...
 02837   432   NtContinue  (1244252, 0, ...
 02838   432   NtContinue  (1244252, 0, ...
 02839   432   NtContinue  (1244252, 0, ...
 02840   432   NtContinue  (1244252, 0, ...
 02841   432   NtContinue  (1244252, 0, ...
 02842   432   NtContinue  (1244252, 0, ...
 02843   432   NtContinue  (1244252, 0, ...
 02844   432   NtContinue  (1244252, 0, ...
 02845   432   NtContinue  (1244252, 0, ...
 02846   432   NtContinue  (1244252, 0, ...
 02847   432   NtContinue  (1244252, 0, ...
 02848   432   NtContinue  (1244252, 0, ...
 02849   432   NtContinue  (1244252, 0, ...
 02850   432   NtContinue  (1244252, 0, ...
 02851   432   NtContinue  (1244252, 0, ...
 02852   432   NtContinue  (1244252, 0, ...
 02853   432   NtContinue  (1244252, 0, ...
 02854   432   NtContinue  (1244252, 0, ...
 02855   432   NtContinue  (1244252, 0, ...
 02856   432   NtContinue  (1244252, 0, ...
 02857   432   NtContinue  (1244252, 0, ...
 02858   432   NtContinue  (1244252, 0, ...
 02859   432   NtContinue  (1244252, 0, ...
 02860   432   NtContinue  (1244252, 0, ...
 02861   432   NtContinue  (1244252, 0, ...
 02862   432   NtContinue  (1244252, 0, ...
 02863   432   NtContinue  (1244252, 0, ...
 02864   432   NtContinue  (1244252, 0, ...
 02865   432   NtContinue  (1244252, 0, ...
 02866   432   NtContinue  (1244252, 0, ...
 02867   432   NtContinue  (1244252, 0, ...
 02868   432   NtContinue  (1244252, 0, ...
 02869   432   NtContinue  (1244252, 0, ...
 02870   432   NtContinue  (1244252, 0, ...
 02871   432   NtContinue  (1244252, 0, ...
 02872   432   NtContinue  (1244252, 0, ...
 02873   432   NtContinue  (1244252, 0, ...
 02874   432   NtContinue  (1244252, 0, ...
 02875   432   NtContinue  (1244252, 0, ...
 02876   432   NtContinue  (1244252, 0, ...
 02877   432   NtContinue  (1244252, 0, ...
 02878   432   NtContinue  (1244252, 0, ...
 02879   432   NtContinue  (1244252, 0, ...
 02880   432   NtContinue  (1244252, 0, ...
 02881   432   NtContinue  (1244252, 0, ...
 02882   432   NtContinue  (1244252, 0, ...
 02883   432   NtContinue  (1244252, 0, ...
 02884   432   NtContinue  (1244252, 0, ...
 02885   432   NtContinue  (1244252, 0, ...
 02886   432   NtContinue  (1244252, 0, ...
 02887   432   NtContinue  (1244252, 0, ...
 02888   432   NtContinue  (1244252, 0, ...
 02889   432   NtContinue  (1244252, 0, ...
 02890   432   NtContinue  (1244252, 0, ...
 02891   432   NtContinue  (1244252, 0, ...
 02892   432   NtContinue  (1244252, 0, ...
 02893   432   NtContinue  (1244252, 0, ...
 02894   432   NtContinue  (1244252, 0, ...
 02895   432   NtContinue  (1244252, 0, ...
 02896   432   NtContinue  (1244252, 0, ...
 02897   432   NtContinue  (1244252, 0, ...
 02898   432   NtContinue  (1244252, 0, ...
 02899   432   NtContinue  (1244252, 0, ...
 02900   432   NtContinue  (1244252, 0, ...
 02901   432   NtContinue  (1244252, 0, ...
 02902   432   NtContinue  (1244252, 0, ...
 02903   432   NtContinue  (1244252, 0, ...
 02904   432   NtContinue  (1244252, 0, ...
 02905   432   NtContinue  (1244252, 0, ...
 02906   432   NtContinue  (1244252, 0, ...
 02907   432   NtContinue  (1244252, 0, ...
 02908   432   NtContinue  (1244252, 0, ...
 02909   432   NtContinue  (1244252, 0, ...
 02910   432   NtContinue  (1244252, 0, ...
 02911   432   NtContinue  (1244252, 0, ...
 02912   432   NtContinue  (1244252, 0, ...
 02913   432   NtContinue  (1244252, 0, ...
 02914   432   NtContinue  (1244252, 0, ...
 02915   432   NtContinue  (1244252, 0, ...
 02916   432   NtContinue  (1244252, 0, ...
 02917   432   NtContinue  (1244252, 0, ...
 02918   432   NtContinue  (1244252, 0, ...
 02919   432   NtContinue  (1244252, 0, ...
 02920   432   NtContinue  (1244252, 0, ...
 02921   432   NtContinue  (1244252, 0, ...
 02922   432   NtContinue  (1244252, 0, ...
 02923   432   NtContinue  (1244252, 0, ...
 02924   432   NtContinue  (1244252, 0, ...
 02925   432   NtContinue  (1244252, 0, ...
 02926   432   NtContinue  (1244252, 0, ...
 02927   432   NtContinue  (1244252, 0, ...
 02928   432   NtContinue  (1244252, 0, ...
 02929   432   NtContinue  (1244252, 0, ...
 02930   432   NtContinue  (1244252, 0, ...
 02931   432   NtContinue  (1244252, 0, ...
 02932   432   NtContinue  (1244252, 0, ...
 02933   432   NtContinue  (1244252, 0, ...
 02934   432   NtContinue  (1244252, 0, ...
 02935   432   NtContinue  (1244252, 0, ...
 02936   432   NtContinue  (1244252, 0, ...
 02937   432   NtContinue  (1244252, 0, ...
 02938   432   NtContinue  (1244252, 0, ...
 02939   432   NtContinue  (1244252, 0, ...
 02940   432   NtContinue  (1244252, 0, ...
 02941   432   NtContinue  (1244252, 0, ...
 02942   432   NtContinue  (1244252, 0, ...
 02943   432   NtContinue  (1244252, 0, ...
 02944   432   NtContinue  (1244252, 0, ...
 02945   432   NtContinue  (1244252, 0, ...
 02946   432   NtContinue  (1244252, 0, ...
 02947   432   NtContinue  (1244252, 0, ...
 02948   432   NtContinue  (1244252, 0, ...
 02949   432   NtContinue  (1244252, 0, ...
 02950   432   NtContinue  (1244252, 0, ...
 02951   432   NtContinue  (1244252, 0, ...
 02952   432   NtContinue  (1244252, 0, ...
 02953   432   NtContinue  (1244252, 0, ...
 02954   432   NtContinue  (1244252, 0, ...
 02955   432   NtContinue  (1244252, 0, ...
 02956   432   NtContinue  (1244252, 0, ...
 02957   432   NtContinue  (1244252, 0, ...
 02958   432   NtContinue  (1244252, 0, ...
 02959   432   NtContinue  (1244252, 0, ...
 02960   432   NtContinue  (1244252, 0, ...
 02961   432   NtContinue  (1244252, 0, ...
 02962   432   NtContinue  (1244252, 0, ...
 02963   432   NtContinue  (1244252, 0, ...
 02964   432   NtContinue  (1244252, 0, ...
 02965   432   NtContinue  (1244252, 0, ...
 02966   432   NtContinue  (1244252, 0, ...
 02967   432   NtContinue  (1244252, 0, ...
 02968   432   NtContinue  (1244252, 0, ...
 02969   432   NtContinue  (1244252, 0, ...
 02970   432   NtContinue  (1244252, 0, ...
 02971   432   NtContinue  (1244252, 0, ...
 02972   432   NtContinue  (1244252, 0, ...
 02973   432   NtContinue  (1244252, 0, ...
 02974   432   NtContinue  (1244252, 0, ...
 02975   432   NtContinue  (1244252, 0, ...
 02976   432   NtContinue  (1244252, 0, ...
 02977   432   NtContinue  (1244252, 0, ...
 02978   432   NtContinue  (1244252, 0, ...
 02979   432   NtContinue  (1244252, 0, ...
 02980   432   NtContinue  (1244252, 0, ...
 02981   432   NtContinue  (1244252, 0, ...
 02982   432   NtContinue  (1244252, 0, ...
 02983   432   NtContinue  (1244252, 0, ...
 02984   432   NtContinue  (1244252, 0, ...
 02985   432   NtContinue  (1244252, 0, ...
 02986   432   NtContinue  (1244252, 0, ...
 02987   432   NtContinue  (1244252, 0, ...
 02988   432   NtContinue  (1244252, 0, ...
 02989   432   NtContinue  (1244252, 0, ...
 02990   432   NtContinue  (1244252, 0, ...
 02991   432   NtContinue  (1244252, 0, ...
 02992   432   NtContinue  (1244252, 0, ...
 02993   432   NtContinue  (1244252, 0, ...
 02994   432   NtContinue  (1244252, 0, ...
 02995   432   NtContinue  (1244252, 0, ...
 02996   432   NtContinue  (1244252, 0, ...
 02997   432   NtContinue  (1244252, 0, ...
 02998   432   NtContinue  (1244252, 0, ...
 02999   432   NtContinue  (1244252, 0, ...
 03000   432   NtContinue  (1244252, 0, ...
 03001   432   NtContinue  (1244252, 0, ...
 03002   432   NtContinue  (1244252, 0, ...
 03003   432   NtContinue  (1244252, 0, ...
 03004   432   NtContinue  (1244252, 0, ...
 03005   432   NtContinue  (1244252, 0, ...
 03006   432   NtContinue  (1244252, 0, ...
 03007   432   NtContinue  (1244252, 0, ...
 03008   432   NtContinue  (1244252, 0, ...
 03009   432   NtContinue  (1244252, 0, ...
 03010   432   NtContinue  (1244252, 0, ...
 03011   432   NtContinue  (1244252, 0, ...
 03012   432   NtContinue  (1244252, 0, ...
 03013   432   NtContinue  (1244252, 0, ...
 03014   432   NtContinue  (1244252, 0, ...
 03015   432   NtContinue  (1244252, 0, ...
 03016   432   NtContinue  (1244252, 0, ...
 03017   432   NtContinue  (1244252, 0, ...
 03018   432   NtContinue  (1244252, 0, ...
 03019   432   NtContinue  (1244252, 0, ...
 03020   432   NtContinue  (1244252, 0, ...
 03021   432   NtContinue  (1244252, 0, ...
 03022   432   NtContinue  (1244252, 0, ...
 03023   432   NtContinue  (1244252, 0, ...
 03024   432   NtContinue  (1244252, 0, ...
 03025   432   NtContinue  (1244252, 0, ...
 03026   432   NtContinue  (1244252, 0, ...
 03027   432   NtContinue  (1244252, 0, ...
 03028   432   NtContinue  (1244252, 0, ...
 03029   432   NtContinue  (1244252, 0, ...
 03030   432   NtContinue  (1244252, 0, ...
 03031   432   NtContinue  (1244252, 0, ...
 03032   432   NtContinue  (1244252, 0, ...
 03033   432   NtContinue  (1244252, 0, ...
 03034   432   NtContinue  (1244252, 0, ...
 03035   432   NtContinue  (1244252, 0, ...
 03036   432   NtContinue  (1244252, 0, ...
 03037   432   NtContinue  (1244252, 0, ...
 03038   432   NtContinue  (1244252, 0, ...
 03039   432   NtContinue  (1244252, 0, ...
 03040   432   NtContinue  (1244252, 0, ...
 03041   432   NtContinue  (1244252, 0, ...
 03042   432   NtContinue  (1244252, 0, ...
 03043   432   NtContinue  (1244252, 0, ...
 03044   432   NtContinue  (1244252, 0, ...
 03045   432   NtContinue  (1244252, 0, ...
 03046   432   NtContinue  (1244252, 0, ...
 03047   432   NtContinue  (1244252, 0, ...
 03048   432   NtContinue  (1244252, 0, ...
 03049   432   NtContinue  (1244252, 0, ...
 03050   432   NtContinue  (1244252, 0, ...
 03051   432   NtContinue  (1244252, 0, ...
 03052   432   NtContinue  (1244252, 0, ...
 03053   432   NtContinue  (1244252, 0, ...
 03054   432   NtContinue  (1244252, 0, ...
 03055   432   NtContinue  (1244252, 0, ...
 03056   432   NtContinue  (1244252, 0, ...
 03057   432   NtContinue  (1244252, 0, ...
 03058   432   NtContinue  (1244252, 0, ...
 03059   432   NtContinue  (1244252, 0, ...
 03060   432   NtContinue  (1244252, 0, ...
 03061   432   NtContinue  (1244252, 0, ...
 03062   432   NtContinue  (1244252, 0, ...
 03063   432   NtContinue  (1244252, 0, ...
 03064   432   NtContinue  (1244252, 0, ...
 03065   432   NtContinue  (1244252, 0, ...
 03066   432   NtContinue  (1244252, 0, ...
 03067   432   NtContinue  (1244252, 0, ...
 03068   432   NtContinue  (1244252, 0, ...
 03069   432   NtContinue  (1244252, 0, ...
 03070   432   NtContinue  (1244252, 0, ...
 03071   432   NtContinue  (1244252, 0, ...
 03072   432   NtContinue  (1244252, 0, ...
 03073   432   NtContinue  (1244252, 0, ...
 03074   432   NtContinue  (1244252, 0, ...
 03075   432   NtContinue  (1244252, 0, ...
 03076   432   NtContinue  (1244252, 0, ...
 03077   432   NtContinue  (1244252, 0, ...
 03078   432   NtContinue  (1244252, 0, ...
 03079   432   NtContinue  (1244252, 0, ...
 03080   432   NtContinue  (1244252, 0, ...
 03081   432   NtContinue  (1244252, 0, ...
 03082   432   NtContinue  (1244252, 0, ...
 03083   432   NtContinue  (1244252, 0, ...
 03084   432   NtContinue  (1244252, 0, ...
 03085   432   NtContinue  (1244252, 0, ...
 03086   432   NtContinue  (1244252, 0, ...
 03087   432   NtContinue  (1244252, 0, ...
 03088   432   NtContinue  (1244252, 0, ...
 03089   432   NtContinue  (1244252, 0, ...
 03090   432   NtContinue  (1244252, 0, ...
 03091   432   NtContinue  (1244252, 0, ...
 03092   432   NtContinue  (1244252, 0, ...
 03093   432   NtContinue  (1244252, 0, ...
 03094   432   NtContinue  (1244252, 0, ...
 03095   432   NtContinue  (1244252, 0, ...
 03096   432   NtContinue  (1244252, 0, ...
 03097   432   NtContinue  (1244252, 0, ...
 03098   432   NtContinue  (1244252, 0, ...
 03099   432   NtContinue  (1244252, 0, ...
 03100   432   NtContinue  (1244252, 0, ...
 03101   432   NtContinue  (1244252, 0, ...
 03102   432   NtContinue  (1244252, 0, ...
 03103   432   NtContinue  (1244252, 0, ...
 03104   432   NtContinue  (1244252, 0, ...
 03105   432   NtContinue  (1244252, 0, ...
 03106   432   NtContinue  (1244252, 0, ...
 03107   432   NtContinue  (1244252, 0, ...
 03108   432   NtContinue  (1244252, 0, ...
 03109   432   NtContinue  (1244252, 0, ...
 03110   432   NtContinue  (1244252, 0, ...
 03111   432   NtContinue  (1244252, 0, ...
 03112   432   NtContinue  (1244252, 0, ...
 03113   432   NtContinue  (1244252, 0, ...
 03114   432   NtContinue  (1244252, 0, ...
 03115   432   NtContinue  (1244252, 0, ...
 03116   432   NtContinue  (1244252, 0, ...
 03117   432   NtContinue  (1244252, 0, ...
 03118   432   NtContinue  (1244252, 0, ...
 03119   432   NtContinue  (1244252, 0, ...
 03120   432   NtContinue  (1244252, 0, ...
 03121   432   NtContinue  (1244252, 0, ...
 03122   432   NtContinue  (1244252, 0, ...
 03123   432   NtContinue  (1244252, 0, ...
 03124   432   NtContinue  (1244252, 0, ...
 03125   432   NtContinue  (1244252, 0, ...
 03126   432   NtContinue  (1244252, 0, ...
 03127   432   NtContinue  (1244252, 0, ...
 03128   432   NtContinue  (1244252, 0, ...
 03129   432   NtContinue  (1244252, 0, ...
 03130   432   NtContinue  (1244252, 0, ...
 03131   432   NtContinue  (1244252, 0, ...
 03132   432   NtContinue  (1244252, 0, ...
 03133   432   NtContinue  (1244252, 0, ...
 03134   432   NtContinue  (1244252, 0, ...
 03135   432   NtContinue  (1244252, 0, ...
 03136   432   NtContinue  (1244252, 0, ...
 03137   432   NtContinue  (1244252, 0, ...
 03138   432   NtContinue  (1244252, 0, ...
 03139   432   NtContinue  (1244252, 0, ...
 03140   432   NtContinue  (1244252, 0, ...
 03141   432   NtContinue  (1244252, 0, ...
 03142   432   NtContinue  (1244252, 0, ...
 03143   432   NtContinue  (1244252, 0, ...
 03144   432   NtContinue  (1244252, 0, ...
 03145   432   NtContinue  (1244252, 0, ...
 03146   432   NtContinue  (1244252, 0, ...
 03147   432   NtContinue  (1244252, 0, ...
 03148   432   NtContinue  (1244252, 0, ...
 03149   432   NtContinue  (1244252, 0, ...
 03150   432   NtContinue  (1244252, 0, ...
 03151   432   NtContinue  (1244252, 0, ...
 03152   432   NtContinue  (1244252, 0, ...
 03153   432   NtContinue  (1244252, 0, ...
 03154   432   NtContinue  (1244252, 0, ...
 03155   432   NtContinue  (1244252, 0, ...
 03156   432   NtContinue  (1244252, 0, ...
 03157   432   NtContinue  (1244252, 0, ...
 03158   432   NtContinue  (1244252, 0, ...
 03159   432   NtContinue  (1244252, 0, ...
 03160   432   NtContinue  (1244252, 0, ...
 03161   432   NtContinue  (1244252, 0, ...
 03162   432   NtContinue  (1244252, 0, ...
 03163   432   NtContinue  (1244252, 0, ...
 03164   432   NtContinue  (1244252, 0, ...
 03165   432   NtContinue  (1244252, 0, ...
 03166   432   NtContinue  (1244252, 0, ...
 03167   432   NtContinue  (1244252, 0, ...
 03168   432   NtContinue  (1244252, 0, ...
 03169   432   NtContinue  (1244252, 0, ...
 03170   432   NtContinue  (1244252, 0, ...
 03171   432   NtContinue  (1244252, 0, ...
 03172   432   NtContinue  (1244252, 0, ...
 03173   432   NtContinue  (1244252, 0, ...
 03174   432   NtContinue  (1244252, 0, ...
 03175   432   NtContinue  (1244252, 0, ...
 03176   432   NtContinue  (1244252, 0, ...
 03177   432   NtContinue  (1244252, 0, ...
 03178   432   NtContinue  (1244252, 0, ...
 03179   432   NtContinue  (1244252, 0, ...
 03180   432   NtContinue  (1244252, 0, ...
 03181   432   NtContinue  (1244252, 0, ...
 03182   432   NtContinue  (1244252, 0, ...
 03183   432   NtContinue  (1244252, 0, ...
 03184   432   NtContinue  (1244252, 0, ...
 03185   432   NtContinue  (1244252, 0, ...
 03186   432   NtContinue  (1244252, 0, ...
 03187   432   NtContinue  (1244252, 0, ...
 03188   432   NtContinue  (1244252, 0, ...
 03189   432   NtContinue  (1244252, 0, ...
 03190   432   NtContinue  (1244252, 0, ...
 03191   432   NtContinue  (1244252, 0, ...
 03192   432   NtContinue  (1244252, 0, ...
 03193   432   NtContinue  (1244252, 0, ...
 03194   432   NtContinue  (1244252, 0, ...
 03195   432   NtContinue  (1244252, 0, ...
 03196   432   NtContinue  (1244252, 0, ...
 03197   432   NtContinue  (1244252, 0, ...
 03198   432   NtContinue  (1244252, 0, ...
 03199   432   NtContinue  (1244252, 0, ...
 03200   432   NtContinue  (1244252, 0, ...
 03201   432   NtContinue  (1244252, 0, ...
 03202   432   NtContinue  (1244252, 0, ...
 03203   432   NtContinue  (1244252, 0, ...
 03204   432   NtContinue  (1244252, 0, ...
 03205   432   NtContinue  (1244252, 0, ...
 03206   432   NtContinue  (1244252, 0, ...
 03207   432   NtContinue  (1244252, 0, ...
 03208   432   NtContinue  (1244252, 0, ...
 03209   432   NtContinue  (1244252, 0, ...
 03210   432   NtContinue  (1244252, 0, ...
 03211   432   NtContinue  (1244252, 0, ...
 03212   432   NtContinue  (1244252, 0, ...
 03213   432   NtContinue  (1244252, 0, ...
 03214   432   NtContinue  (1244252, 0, ...
 03215   432   NtContinue  (1244252, 0, ...
 03216   432   NtContinue  (1244252, 0, ...
 03217   432   NtContinue  (1244252, 0, ...
 03218   432   NtContinue  (1244252, 0, ...
 03219   432   NtContinue  (1244252, 0, ...
 03220   432   NtContinue  (1244252, 0, ...
 03221   432   NtContinue  (1244252, 0, ...
 03222   432   NtContinue  (1244252, 0, ...
 03223   432   NtContinue  (1244252, 0, ...
 03224   432   NtContinue  (1244252, 0, ...
 03225   432   NtContinue  (1244252, 0, ...
 03226   432   NtContinue  (1244252, 0, ...
 03227   432   NtContinue  (1244252, 0, ...
 03228   432   NtContinue  (1244252, 0, ...
 03229   432   NtContinue  (1244252, 0, ...
 03230   432   NtContinue  (1244252, 0, ...
 03231   432   NtContinue  (1244252, 0, ...
 03232   432   NtContinue  (1244252, 0, ...
 03233   432   NtContinue  (1244252, 0, ...
 03234   432   NtContinue  (1244252, 0, ...
 03235   432   NtContinue  (1244252, 0, ...
 03236   432   NtContinue  (1244252, 0, ...
 03237   432   NtContinue  (1244252, 0, ...
 03238   432   NtContinue  (1244252, 0, ...
 03239   432   NtContinue  (1244252, 0, ...
 03240   432   NtContinue  (1244252, 0, ...
 03241   432   NtContinue  (1244252, 0, ...
 03242   432   NtContinue  (1244252, 0, ...
 03243   432   NtContinue  (1244252, 0, ...
 03244   432   NtContinue  (1244252, 0, ...
 03245   432   NtContinue  (1244252, 0, ...
 03246   432   NtContinue  (1244252, 0, ...
 03247   432   NtContinue  (1244252, 0, ...
 03248   432   NtContinue  (1244252, 0, ...
 03249   432   NtContinue  (1244252, 0, ...
 03250   432   NtContinue  (1244252, 0, ...
 03251   432   NtContinue  (1244252, 0, ...
 03252   432   NtContinue  (1244252, 0, ...
 03253   432   NtContinue  (1244252, 0, ...
 03254   432   NtContinue  (1244252, 0, ...
 03255   432   NtContinue  (1244252, 0, ...
 03256   432   NtContinue  (1244252, 0, ...
 03257   432   NtContinue  (1244252, 0, ...
 03258   432   NtContinue  (1244252, 0, ...
 03259   432   NtContinue  (1244252, 0, ...
 03260   432   NtContinue  (1244252, 0, ...
 03261   432   NtContinue  (1244252, 0, ...
 03262   432   NtContinue  (1244252, 0, ...
 03263   432   NtContinue  (1244252, 0, ...
 03264   432   NtContinue  (1244252, 0, ...
 03265   432   NtContinue  (1244252, 0, ...
 03266   432   NtContinue  (1244252, 0, ...
 03267   432   NtContinue  (1244252, 0, ...
 03268   432   NtContinue  (1244252, 0, ...
 03269   432   NtContinue  (1244252, 0, ...
 03270   432   NtContinue  (1244252, 0, ...
 03271   432   NtContinue  (1244252, 0, ...
 03272   432   NtContinue  (1244252, 0, ...
 03273   432   NtContinue  (1244252, 0, ...
 03274   432   NtContinue  (1244252, 0, ...
 03275   432   NtContinue  (1244252, 0, ...
 03276   432   NtContinue  (1244252, 0, ...
 03277   432   NtContinue  (1244252, 0, ...
 03278   432   NtContinue  (1244252, 0, ...
 03279   432   NtContinue  (1244252, 0, ...
 03280   432   NtContinue  (1244252, 0, ...
 03281   432   NtContinue  (1244252, 0, ...
 03282   432   NtContinue  (1244252, 0, ...
 03283   432   NtContinue  (1244252, 0, ...
 03284   432   NtContinue  (1244252, 0, ...
 03285   432   NtContinue  (1244252, 0, ...
 03286   432   NtContinue  (1244252, 0, ...
 03287   432   NtContinue  (1244252, 0, ...
 03288   432   NtContinue  (1244252, 0, ...
 03289   432   NtContinue  (1244252, 0, ...
 03290   432   NtContinue  (1244252, 0, ...
 03291   432   NtContinue  (1244252, 0, ...
 03292   432   NtContinue  (1244252, 0, ...
 03293   432   NtContinue  (1244252, 0, ...
 03294   432   NtContinue  (1244252, 0, ...
 03295   432   NtContinue  (1244252, 0, ...
 03296   432   NtContinue  (1244252, 0, ...
 03297   432   NtContinue  (1244252, 0, ...
 03298   432   NtContinue  (1244252, 0, ...
 03299   432   NtContinue  (1244252, 0, ...
 03300   432   NtContinue  (1244252, 0, ...
 03301   432   NtContinue  (1244252, 0, ...
 03302   432   NtContinue  (1244252, 0, ...
 03303   432   NtContinue  (1244252, 0, ...
 03304   432   NtContinue  (1244252, 0, ...
 03305   432   NtContinue  (1244252, 0, ...
 03306   432   NtContinue  (1244252, 0, ...
 03307   432   NtContinue  (1244252, 0, ...
 03308   432   NtContinue  (1244252, 0, ...
 03309   432   NtContinue  (1244252, 0, ...
 03310   432   NtContinue  (1244252, 0, ...
 03311   432   NtContinue  (1244252, 0, ...
 03312   432   NtContinue  (1244252, 0, ...
 03313   432   NtContinue  (1244252, 0, ...
 03314   432   NtContinue  (1244252, 0, ...
 03315   432   NtContinue  (1244252, 0, ...
 03316   432   NtContinue  (1244252, 0, ...
 03317   432   NtContinue  (1244252, 0, ...
 03318   432   NtContinue  (1244252, 0, ...
 03319   432   NtContinue  (1244252, 0, ...
 03320   432   NtContinue  (1244252, 0, ...
 03321   432   NtContinue  (1244252, 0, ...
 03322   432   NtContinue  (1244252, 0, ...
 03323   432   NtContinue  (1244252, 0, ...
 03324   432   NtContinue  (1244252, 0, ...
 03325   432   NtContinue  (1244252, 0, ...
 03326   432   NtContinue  (1244252, 0, ...
 03327   432   NtContinue  (1244252, 0, ...
 03328   432   NtContinue  (1244252, 0, ...
 03329   432   NtContinue  (1244252, 0, ...
 03330   432   NtContinue  (1244252, 0, ...
 03331   432   NtContinue  (1244252, 0, ...
 03332   432   NtContinue  (1244252, 0, ...
 03333   432   NtContinue  (1244252, 0, ...
 03334   432   NtContinue  (1244252, 0, ...
 03335   432   NtContinue  (1244252, 0, ...
 03336   432   NtContinue  (1244252, 0, ...
 03337   432   NtContinue  (1244252, 0, ...
 03338   432   NtContinue  (1244252, 0, ...
 03339   432   NtContinue  (1244252, 0, ...
 03340   432   NtContinue  (1244252, 0, ...
 03341   432   NtContinue  (1244252, 0, ...
 03342   432   NtContinue  (1244252, 0, ...
 03343   432   NtContinue  (1244252, 0, ...
 03344   432   NtContinue  (1244252, 0, ...
 03345   432   NtContinue  (1244252, 0, ...
 03346   432   NtContinue  (1244252, 0, ...
 03347   432   NtContinue  (1244252, 0, ...
 03348   432   NtContinue  (1244252, 0, ...
 03349   432   NtContinue  (1244252, 0, ...
 03350   432   NtContinue  (1244252, 0, ...
 03351   432   NtContinue  (1244252, 0, ...
 03352   432   NtContinue  (1244252, 0, ...
 03353   432   NtContinue  (1244252, 0, ...
 03354   432   NtContinue  (1244252, 0, ...
 03355   432   NtContinue  (1244252, 0, ...
 03356   432   NtContinue  (1244252, 0, ...
 03357   432   NtContinue  (1244252, 0, ...
 03358   432   NtContinue  (1244252, 0, ...
 03359   432   NtContinue  (1244252, 0, ...
 03360   432   NtContinue  (1244252, 0, ...
 03361   432   NtContinue  (1244252, 0, ...
 03362   432   NtContinue  (1244252, 0, ...
 03363   432   NtContinue  (1244252, 0, ...
 03364   432   NtContinue  (1244252, 0, ...
 03365   432   NtContinue  (1244252, 0, ...
 03366   432   NtContinue  (1244252, 0, ...
 03367   432   NtContinue  (1244252, 0, ...
 03368   432   NtContinue  (1244252, 0, ...
 03369   432   NtContinue  (1244252, 0, ...
 03370   432   NtContinue  (1244252, 0, ...
 03371   432   NtContinue  (1244252, 0, ...
 03372   432   NtContinue  (1244252, 0, ...
 03373   432   NtContinue  (1244252, 0, ...
 03374   432   NtContinue  (1244252, 0, ...
 03375   432   NtContinue  (1244252, 0, ...
 03376   432   NtContinue  (1244252, 0, ...
 03377   432   NtContinue  (1244252, 0, ...
 03378   432   NtContinue  (1244252, 0, ...
 03379   432   NtContinue  (1244252, 0, ...
 03380   432   NtContinue  (1244252, 0, ...
 03381   432   NtContinue  (1244252, 0, ...
 03382   432   NtContinue  (1244252, 0, ...
 03383   432   NtContinue  (1244252, 0, ...
 03384   432   NtContinue  (1244252, 0, ...
 03385   432   NtContinue  (1244252, 0, ...
 03386   432   NtContinue  (1244252, 0, ...
 03387   432   NtContinue  (1244252, 0, ...
 03388   432   NtContinue  (1244252, 0, ...
 03389   432   NtContinue  (1244252, 0, ...
 03390   432   NtContinue  (1244252, 0, ...
 03391   432   NtContinue  (1244252, 0, ...
 03392   432   NtContinue  (1244252, 0, ...
 03393   432   NtContinue  (1244252, 0, ...
 03394   432   NtContinue  (1244252, 0, ...
 03395   432   NtContinue  (1244252, 0, ...
 03396   432   NtContinue  (1244252, 0, ...
 03397   432   NtContinue  (1244252, 0, ...
 03398   432   NtContinue  (1244252, 0, ...
 03399   432   NtContinue  (1244252, 0, ...
 03400   432   NtContinue  (1244252, 0, ...
 03401   432   NtContinue  (1244252, 0, ...
 03402   432   NtContinue  (1244252, 0, ...
 03403   432   NtContinue  (1244252, 0, ...
 03404   432   NtContinue  (1244252, 0, ...
 03405   432   NtContinue  (1244252, 0, ...
 03406   432   NtContinue  (1244252, 0, ...
 03407   432   NtContinue  (1244252, 0, ...
 03408   432   NtContinue  (1244252, 0, ...
 03409   432   NtContinue  (1244252, 0, ...
 03410   432   NtContinue  (1244252, 0, ...
 03411   432   NtContinue  (1244252, 0, ...
 03412   432   NtContinue  (1244252, 0, ...
 03413   432   NtContinue  (1244252, 0, ...
 03414   432   NtContinue  (1244252, 0, ...
 03415   432   NtContinue  (1244252, 0, ...
 03416   432   NtContinue  (1244252, 0, ...
 03417   432   NtContinue  (1244252, 0, ...
 03418   432   NtContinue  (1244252, 0, ...
 03419   432   NtContinue  (1244252, 0, ...
 03420   432   NtContinue  (1244252, 0, ...
 03421   432   NtContinue  (1244252, 0, ...
 03422   432   NtContinue  (1244252, 0, ...
 03423   432   NtContinue  (1244252, 0, ...
 03424   432   NtContinue  (1244252, 0, ...
 03425   432   NtContinue  (1244252, 0, ...
 03426   432   NtContinue  (1244252, 0, ...
 03427   432   NtContinue  (1244252, 0, ...
 03428   432   NtContinue  (1244252, 0, ...
 03429   432   NtContinue  (1244252, 0, ...
 03430   432   NtContinue  (1244252, 0, ...
 03431   432   NtContinue  (1244252, 0, ...
 03432   432   NtContinue  (1244252, 0, ...
 03433   432   NtContinue  (1244252, 0, ...
 03434   432   NtContinue  (1244252, 0, ...
 03435   432   NtContinue  (1244252, 0, ...
 03436   432   NtContinue  (1244252, 0, ...
 03437   432   NtContinue  (1244252, 0, ...
 03438   432   NtContinue  (1244252, 0, ...
 03439   432   NtContinue  (1244252, 0, ...
 03440   432   NtContinue  (1244252, 0, ...
 03441   432   NtContinue  (1244252, 0, ...
 03442   432   NtContinue  (1244252, 0, ...
 03443   432   NtContinue  (1244252, 0, ...
 03444   432   NtContinue  (1244252, 0, ...
 03445   432   NtContinue  (1244252, 0, ...
 03446   432   NtContinue  (1244252, 0, ...
 03447   432   NtContinue  (1244252, 0, ...
 03448   432   NtContinue  (1244252, 0, ...
 03449   432   NtContinue  (1244252, 0, ...
 03450   432   NtContinue  (1244252, 0, ...
 03451   432   NtContinue  (1244252, 0, ...
 03452   432   NtContinue  (1244252, 0, ...
 03453   432   NtContinue  (1244252, 0, ...
 03454   432   NtContinue  (1244252, 0, ...
 03455   432   NtContinue  (1244252, 0, ...
 03456   432   NtContinue  (1244252, 0, ...
 03457   432   NtContinue  (1244252, 0, ...
 03458   432   NtContinue  (1244252, 0, ...
 03459   432   NtContinue  (1244252, 0, ...
 03460   432   NtContinue  (1244252, 0, ...
 03461   432   NtContinue  (1244252, 0, ...
 03462   432   NtContinue  (1244252, 0, ...
 03463   432   NtContinue  (1244252, 0, ...
 03464   432   NtContinue  (1244252, 0, ...
 03465   432   NtContinue  (1244252, 0, ...
 03466   432   NtContinue  (1244252, 0, ...
 03467   432   NtContinue  (1244252, 0, ...
 03468   432   NtContinue  (1244252, 0, ...
 03469   432   NtContinue  (1244252, 0, ...
 03470   432   NtContinue  (1244252, 0, ...
 03471   432   NtContinue  (1244252, 0, ...
 03472   432   NtContinue  (1244252, 0, ...
 03473   432   NtContinue  (1244252, 0, ...
 03474   432   NtContinue  (1244252, 0, ...
 03475   432   NtContinue  (1244252, 0, ...
 03476   432   NtContinue  (1244252, 0, ...
 03477   432   NtContinue  (1244252, 0, ...
 03478   432   NtContinue  (1244252, 0, ...
 03479   432   NtContinue  (1244252, 0, ...
 03480   432   NtContinue  (1244252, 0, ...
 03481   432   NtContinue  (1244252, 0, ...
 03482   432   NtContinue  (1244252, 0, ...
 03483   432   NtContinue  (1244252, 0, ...
 03484   432   NtContinue  (1244252, 0, ...
 03485   432   NtContinue  (1244252, 0, ...
 03486   432   NtContinue  (1244252, 0, ...
 03487   432   NtContinue  (1244252, 0, ...
 03488   432   NtContinue  (1244252, 0, ...
 03489   432   NtContinue  (1244252, 0, ...
 03490   432   NtContinue  (1244252, 0, ...
 03491   432   NtContinue  (1244252, 0, ...
 03492   432   NtContinue  (1244252, 0, ...
 03493   432   NtContinue  (1244252, 0, ...
 03494   432   NtContinue  (1244252, 0, ...
 03495   432   NtContinue  (1244252, 0, ...
 03496   432   NtContinue  (1244252, 0, ...
 03497   432   NtContinue  (1244252, 0, ...
 03498   432   NtContinue  (1244252, 0, ...
 03499   432   NtContinue  (1244252, 0, ...
 03500   432   NtContinue  (1244252, 0, ...
 03501   432   NtContinue  (1244252, 0, ...
 03502   432   NtContinue  (1244252, 0, ...
 03503   432   NtContinue  (1244252, 0, ...
 03504   432   NtContinue  (1244252, 0, ...
 03505   432   NtContinue  (1244252, 0, ...
 03506   432   NtContinue  (1244252, 0, ...
 03507   432   NtContinue  (1244252, 0, ...
 03508   432   NtContinue  (1244252, 0, ...
 03509   432   NtContinue  (1244252, 0, ...
 03510   432   NtContinue  (1244252, 0, ...
 03511   432   NtContinue  (1244252, 0, ...
 03512   432   NtContinue  (1244252, 0, ...
 03513   432   NtContinue  (1244252, 0, ...
 03514   432   NtContinue  (1244252, 0, ...
 03515   432   NtContinue  (1244252, 0, ...
 03516   432   NtContinue  (1244252, 0, ...
 03517   432   NtContinue  (1244252, 0, ...
 03518   432   NtContinue  (1244252, 0, ...
 03519   432   NtContinue  (1244252, 0, ...
 03520   432   NtContinue  (1244252, 0, ...
 03521   432   NtContinue  (1244252, 0, ...
 03522   432   NtContinue  (1244252, 0, ...
 03523   432   NtContinue  (1244252, 0, ...
 03524   432   NtContinue  (1244252, 0, ...
 03525   432   NtContinue  (1244252, 0, ...
 03526   432   NtContinue  (1244252, 0, ...
 03527   432   NtContinue  (1244252, 0, ...
 03528   432   NtContinue  (1244252, 0, ...
 03529   432   NtContinue  (1244252, 0, ...
 03530   432   NtContinue  (1244252, 0, ...
 03531   432   NtContinue  (1244252, 0, ...
 03532   432   NtContinue  (1244252, 0, ...
 03533   432   NtContinue  (1244252, 0, ...
 03534   432   NtContinue  (1244252, 0, ...
 03535   432   NtContinue  (1244252, 0, ...
 03536   432   NtContinue  (1244252, 0, ...
 03537   432   NtContinue  (1244252, 0, ...
 03538   432   NtContinue  (1244252, 0, ...
 03539   432   NtContinue  (1244252, 0, ...
 03540   432   NtContinue  (1244252, 0, ...
 03541   432   NtContinue  (1244252, 0, ...
 03542   432   NtContinue  (1244252, 0, ...
 03543   432   NtContinue  (1244252, 0, ...
 03544   432   NtContinue  (1244252, 0, ...
 03545   432   NtContinue  (1244252, 0, ...
 03546   432   NtContinue  (1244252, 0, ...
 03547   432   NtContinue  (1244252, 0, ...
 03548   432   NtContinue  (1244252, 0, ...
 03549   432   NtContinue  (1244252, 0, ...
 03550   432   NtContinue  (1244252, 0, ...
 03551   432   NtContinue  (1244252, 0, ...
 03552   432   NtContinue  (1244252, 0, ...
 03553   432   NtContinue  (1244252, 0, ...
 03554   432   NtContinue  (1244252, 0, ...
 03555   432   NtContinue  (1244252, 0, ...
 03556   432   NtContinue  (1244252, 0, ...
 03557   432   NtContinue  (1244252, 0, ...
 03558   432   NtContinue  (1244252, 0, ...
 03559   432   NtContinue  (1244252, 0, ...
 03560   432   NtContinue  (1244252, 0, ...
 03561   432   NtContinue  (1244252, 0, ...
 03562   432   NtContinue  (1244252, 0, ...
 03563   432   NtContinue  (1244252, 0, ...
 03564   432   NtContinue  (1244252, 0, ...
 03565   432   NtContinue  (1244252, 0, ...
 03566   432   NtContinue  (1244252, 0, ...
 03567   432   NtContinue  (1244252, 0, ...
 03568   432   NtContinue  (1244252, 0, ...
 03569   432   NtContinue  (1244252, 0, ...
 03570   432   NtContinue  (1244252, 0, ...
 03571   432   NtContinue  (1244252, 0, ...
 03572   432   NtContinue  (1244252, 0, ...
 03573   432   NtContinue  (1244252, 0, ...
 03574   432   NtContinue  (1244252, 0, ...
 03575   432   NtContinue  (1244252, 0, ...
 03576   432   NtContinue  (1244252, 0, ...
 03577   432   NtContinue  (1244252, 0, ...
 03578   432   NtContinue  (1244252, 0, ...
 03579   432   NtContinue  (1244252, 0, ...
 03580   432   NtContinue  (1244252, 0, ...
 03581   432   NtContinue  (1244252, 0, ...
 03582   432   NtContinue  (1244252, 0, ...
 03583   432   NtContinue  (1244252, 0, ...
 03584   432   NtContinue  (1244252, 0, ...
 03585   432   NtContinue  (1244252, 0, ...
 03586   432   NtContinue  (1244252, 0, ...
 03587   432   NtContinue  (1244252, 0, ...
 03588   432   NtContinue  (1244252, 0, ...
 03589   432   NtContinue  (1244252, 0, ...
 03590   432   NtContinue  (1244252, 0, ...
 03591   432   NtContinue  (1244252, 0, ...
 03592   432   NtContinue  (1244252, 0, ...
 03593   432   NtContinue  (1244252, 0, ...
 03594   432   NtContinue  (1244252, 0, ...
 03595   432   NtContinue  (1244252, 0, ...
 03596   432   NtContinue  (1244252, 0, ...
 03597   432   NtContinue  (1244252, 0, ...
 03598   432   NtContinue  (1244252, 0, ...
 03599   432   NtContinue  (1244252, 0, ...
 03600   432   NtContinue  (1244252, 0, ...
 03601   432   NtContinue  (1244252, 0, ...
 03602   432   NtContinue  (1244252, 0, ...
 03603   432   NtContinue  (1244252, 0, ...
 03604   432   NtContinue  (1244252, 0, ...
 03605   432   NtContinue  (1244252, 0, ...
 03606   432   NtContinue  (1244252, 0, ...
 03607   432   NtContinue  (1244252, 0, ...
 03608   432   NtContinue  (1244252, 0, ...
 03609   432   NtContinue  (1244252, 0, ...
 03610   432   NtContinue  (1244252, 0, ...
 03611   432   NtContinue  (1244252, 0, ...
 03612   432   NtContinue  (1244252, 0, ...
 03613   432   NtContinue  (1244252, 0, ...
 03614   432   NtContinue  (1244252, 0, ...
 03615   432   NtContinue  (1244252, 0, ...
 03616   432   NtContinue  (1244252, 0, ...
 03617   432   NtContinue  (1244252, 0, ...
 03618   432   NtContinue  (1244252, 0, ...
 03619   432   NtContinue  (1244252, 0, ...
 03620   432   NtContinue  (1244252, 0, ...
 03621   432   NtContinue  (1244252, 0, ...
 03622   432   NtContinue  (1244252, 0, ...
 03623   432   NtContinue  (1244252, 0, ...
 03624   432   NtContinue  (1244252, 0, ...
 03625   432   NtContinue  (1244252, 0, ...
 03626   432   NtContinue  (1244252, 0, ...
 03627   432   NtContinue  (1244252, 0, ...
 03628   432   NtContinue  (1244252, 0, ...
 03629   432   NtContinue  (1244252, 0, ...
 03630   432   NtContinue  (1244252, 0, ...
 03631   432   NtContinue  (1244252, 0, ...
 03632   432   NtContinue  (1244252, 0, ...
 03633   432   NtContinue  (1244252, 0, ...
 03634   432   NtContinue  (1244252, 0, ...
 03635   432   NtContinue  (1244252, 0, ...
 03636   432   NtContinue  (1244252, 0, ...
 03637   432   NtContinue  (1244252, 0, ...
 03638   432   NtContinue  (1244252, 0, ...
 03639   432   NtContinue  (1244252, 0, ...
 03640   432   NtContinue  (1244252, 0, ...
 03641   432   NtContinue  (1244252, 0, ...
 03642   432   NtContinue  (1244252, 0, ...
 03643   432   NtContinue  (1244252, 0, ...
 03644   432   NtContinue  (1244252, 0, ...
 03645   432   NtContinue  (1244252, 0, ...
 03646   432   NtContinue  (1244252, 0, ...
 03647   432   NtContinue  (1244252, 0, ...
 03648   432   NtContinue  (1244252, 0, ...
 03649   432   NtContinue  (1244252, 0, ...
 03650   432   NtContinue  (1244252, 0, ...
 03651   432   NtContinue  (1244252, 0, ...
 03652   432   NtContinue  (1244252, 0, ...
 03653   432   NtContinue  (1244252, 0, ...
 03654   432   NtContinue  (1244252, 0, ...
 03655   432   NtContinue  (1244252, 0, ...
 03656   432   NtContinue  (1244252, 0, ...
 03657   432   NtContinue  (1244252, 0, ...
 03658   432   NtContinue  (1244252, 0, ...
 03659   432   NtContinue  (1244252, 0, ...
 03660   432   NtContinue  (1244252, 0, ...
 03661   432   NtContinue  (1244252, 0, ...
 03662   432   NtContinue  (1244252, 0, ...
 03663   432   NtContinue  (1244252, 0, ...
 03664   432   NtContinue  (1244252, 0, ...
 03665   432   NtContinue  (1244252, 0, ...
 03666   432   NtContinue  (1244252, 0, ...
 03667   432   NtContinue  (1244252, 0, ...
 03668   432   NtContinue  (1244252, 0, ...
 03669   432   NtContinue  (1244252, 0, ...
 03670   432   NtContinue  (1244252, 0, ...
 03671   432   NtContinue  (1244252, 0, ...
 03672   432   NtContinue  (1244252, 0, ...
 03673   432   NtContinue  (1244252, 0, ...
 03674   432   NtContinue  (1244252, 0, ...
 03675   432   NtContinue  (1244252, 0, ...
 03676   432   NtContinue  (1244252, 0, ...
 03677   432   NtContinue  (1244252, 0, ...
 03678   432   NtContinue  (1244252, 0, ...
 03679   432   NtContinue  (1244252, 0, ...
 03680   432   NtContinue  (1244252, 0, ...
 03681   432   NtContinue  (1244252, 0, ...
 03682   432   NtContinue  (1244252, 0, ...
 03683   432   NtContinue  (1244252, 0, ...
 03684   432   NtContinue  (1244252, 0, ...
 03685   432   NtContinue  (1244252, 0, ...
 03686   432   NtContinue  (1244252, 0, ...
 03687   432   NtContinue  (1244252, 0, ...
 03688   432   NtContinue  (1244252, 0, ...
 03689   432   NtContinue  (1244252, 0, ...
 03690   432   NtContinue  (1244252, 0, ...
 03691   432   NtContinue  (1244252, 0, ...
 03692   432   NtContinue  (1244252, 0, ...
 03693   432   NtContinue  (1244252, 0, ...
 03694   432   NtContinue  (1244252, 0, ...
 03695   432   NtContinue  (1244252, 0, ...
 03696   432   NtContinue  (1244252, 0, ...
 03697   432   NtContinue  (1244252, 0, ...
 03698   432   NtContinue  (1244252, 0, ...
 03699   432   NtContinue  (1244252, 0, ...
 03700   432   NtContinue  (1244252, 0, ...
 03701   432   NtContinue  (1244252, 0, ...
 03702   432   NtContinue  (1244252, 0, ...
 03703   432   NtContinue  (1244252, 0, ...
 03704   432   NtContinue  (1244252, 0, ...
 03705   432   NtContinue  (1244252, 0, ...
 03706   432   NtContinue  (1244252, 0, ...
 03707   432   NtContinue  (1244252, 0, ...
 03708   432   NtContinue  (1244252, 0, ...
 03709   432   NtContinue  (1244252, 0, ...
 03710   432   NtContinue  (1244252, 0, ...
 03711   432   NtContinue  (1244252, 0, ...
 03712   432   NtContinue  (1244252, 0, ...
 03713   432   NtContinue  (1244252, 0, ...
 03714   432   NtContinue  (1244252, 0, ...
 03715   432   NtContinue  (1244252, 0, ...
 03716   432   NtContinue  (1244252, 0, ...
 03717   432   NtContinue  (1244252, 0, ...
 03718   432   NtContinue  (1244252, 0, ...
 03719   432   NtContinue  (1244252, 0, ...
 03720   432   NtContinue  (1244252, 0, ...
 03721   432   NtContinue  (1244252, 0, ...
 03722   432   NtContinue  (1244252, 0, ...
 03723   432   NtContinue  (1244252, 0, ...
 03724   432   NtContinue  (1244252, 0, ...
 03725   432   NtContinue  (1244252, 0, ...
 03726   432   NtContinue  (1244252, 0, ...
 03727   432   NtContinue  (1244252, 0, ...
 03728   432   NtContinue  (1244252, 0, ...
 03729   432   NtContinue  (1244252, 0, ...
 03730   432   NtContinue  (1244252, 0, ...
 03731   432   NtContinue  (1244252, 0, ...
 03732   432   NtContinue  (1244252, 0, ...
 03733   432   NtContinue  (1244252, 0, ...
 03734   432   NtContinue  (1244252, 0, ...
 03735   432   NtContinue  (1244252, 0, ...
 03736   432   NtContinue  (1244252, 0, ...
 03737   432   NtContinue  (1244252, 0, ...
 03738   432   NtContinue  (1244252, 0, ...
 03739   432   NtContinue  (1244252, 0, ...
 03740   432   NtContinue  (1244252, 0, ...
 03741   432   NtContinue  (1244252, 0, ...
 03742   432   NtContinue  (1244252, 0, ...
 03743   432   NtContinue  (1244252, 0, ...
 03744   432   NtContinue  (1244252, 0, ...
 03745   432   NtContinue  (1244252, 0, ...
 03746   432   NtContinue  (1244252, 0, ...
 03747   432   NtContinue  (1244252, 0, ...
 03748   432   NtContinue  (1244252, 0, ...
 03749   432   NtContinue  (1244252, 0, ...
 03750   432   NtContinue  (1244252, 0, ...
 03751   432   NtContinue  (1244252, 0, ...
 03752   432   NtContinue  (1244252, 0, ...
 03753   432   NtContinue  (1244252, 0, ...
 03754   432   NtContinue  (1244252, 0, ...
 03755   432   NtContinue  (1244252, 0, ...
 03756   432   NtContinue  (1244252, 0, ...
 03757   432   NtContinue  (1244252, 0, ...
 03758   432   NtContinue  (1244252, 0, ...
 03759   432   NtContinue  (1244252, 0, ...
 03760   432   NtContinue  (1244252, 0, ...
 03761   432   NtContinue  (1244252, 0, ...
 03762   432   NtContinue  (1244252, 0, ...
 03763   432   NtContinue  (1244252, 0, ...
 03764   432   NtContinue  (1244252, 0, ...
 03765   432   NtContinue  (1244252, 0, ...
 03766   432   NtContinue  (1244252, 0, ...
 03767   432   NtContinue  (1244252, 0, ...
 03768   432   NtContinue  (1244252, 0, ...
 03769   432   NtContinue  (1244252, 0, ...
 03770   432   NtContinue  (1244252, 0, ...
 03771   432   NtContinue  (1244252, 0, ...
 03772   432   NtContinue  (1244252, 0, ...
 03773   432   NtContinue  (1244252, 0, ...
 03774   432   NtContinue  (1244252, 0, ...
 03775   432   NtContinue  (1244252, 0, ...
 03776   432   NtContinue  (1244252, 0, ...
 03777   432   NtContinue  (1244252, 0, ...
 03778   432   NtContinue  (1244252, 0, ...
 03779   432   NtContinue  (1244252, 0, ...
 03780   432   NtContinue  (1244252, 0, ...
 03781   432   NtContinue  (1244252, 0, ...
 03782   432   NtContinue  (1244252, 0, ...
 03783   432   NtContinue  (1244252, 0, ...
 03784   432   NtContinue  (1244252, 0, ...
 03785   432   NtContinue  (1244252, 0, ...
 03786   432   NtContinue  (1244252, 0, ...
 03787   432   NtContinue  (1244252, 0, ...
 03788   432   NtContinue  (1244252, 0, ...
 03789   432   NtContinue  (1244252, 0, ...
 03790   432   NtContinue  (1244252, 0, ...
 03791   432   NtContinue  (1244252, 0, ...
 03792   432   NtContinue  (1244252, 0, ...
 03793   432   NtContinue  (1244252, 0, ...
 03794   432   NtContinue  (1244252, 0, ...
 03795   432   NtContinue  (1244252, 0, ...
 03796   432   NtContinue  (1244252, 0, ...
 03797   432   NtContinue  (1244252, 0, ...
 03798   432   NtContinue  (1244252, 0, ...
 03799   432   NtContinue  (1244252, 0, ...
 03800   432   NtContinue  (1244252, 0, ...
 03801   432   NtContinue  (1244252, 0, ...
 03802   432   NtContinue  (1244252, 0, ...
 03803   432   NtContinue  (1244252, 0, ...
 03804   432   NtContinue  (1244252, 0, ...
 03805   432   NtContinue  (1244252, 0, ...
 03806   432   NtContinue  (1244252, 0, ...
 03807   432   NtContinue  (1244252, 0, ...
 03808   432   NtContinue  (1244252, 0, ...
 03809   432   NtContinue  (1244252, 0, ...
 03810   432   NtContinue  (1244252, 0, ...
 03811   432   NtContinue  (1244252, 0, ...
 03812   432   NtContinue  (1244252, 0, ...
 03813   432   NtContinue  (1244252, 0, ...
 03814   432   NtContinue  (1244252, 0, ...
 03815   432   NtContinue  (1244252, 0, ...
 03816   432   NtContinue  (1244252, 0, ...
 03817   432   NtContinue  (1244252, 0, ...
 03818   432   NtContinue  (1244252, 0, ...
 03819   432   NtContinue  (1244252, 0, ...
 03820   432   NtContinue  (1244252, 0, ...
 03821   432   NtContinue  (1244252, 0, ...
 03822   432   NtContinue  (1244252, 0, ...
 03823   432   NtContinue  (1244252, 0, ...
 03824   432   NtContinue  (1244252, 0, ...
 03825   432   NtContinue  (1244252, 0, ...
 03826   432   NtContinue  (1244252, 0, ...
 03827   432   NtContinue  (1244252, 0, ...
 03828   432   NtContinue  (1244252, 0, ...
 03829   432   NtContinue  (1244252, 0, ...
 03830   432   NtContinue  (1244252, 0, ...
 03831   432   NtContinue  (1244252, 0, ...
 03832   432   NtContinue  (1244252, 0, ...
 03833   432   NtContinue  (1244252, 0, ...
 03834   432   NtContinue  (1244252, 0, ...
 03835   432   NtContinue  (1244252, 0, ...
 03836   432   NtContinue  (1244252, 0, ...
 03837   432   NtContinue  (1244252, 0, ...
 03838   432   NtContinue  (1244252, 0, ...
 03839   432   NtContinue  (1244252, 0, ...
 03840   432   NtContinue  (1244252, 0, ...
 03841   432   NtContinue  (1244252, 0, ...
 03842   432   NtContinue  (1244252, 0, ...
 03843   432   NtContinue  (1244252, 0, ...
 03844   432   NtContinue  (1244252, 0, ...
 03845   432   NtContinue  (1244252, 0, ...
 03846   432   NtContinue  (1244252, 0, ...
 03847   432   NtContinue  (1244252, 0, ...
 03848   432   NtContinue  (1244252, 0, ...
 03849   432   NtContinue  (1244252, 0, ...
 03850   432   NtContinue  (1244252, 0, ...
 03851   432   NtContinue  (1244252, 0, ...
 03852   432   NtContinue  (1244252, 0, ...
 03853   432   NtContinue  (1244252, 0, ...
 03854   432   NtContinue  (1244252, 0, ...
 03855   432   NtContinue  (1244252, 0, ...
 03856   432   NtContinue  (1244252, 0, ...
 03857   432   NtContinue  (1244252, 0, ...
 03858   432   NtContinue  (1244252, 0, ...
 03859   432   NtContinue  (1244252, 0, ...
 03860   432   NtContinue  (1244252, 0, ...
 03861   432   NtContinue  (1244252, 0, ...
 03862   432   NtContinue  (1244252, 0, ...
 03863   432   NtContinue  (1244252, 0, ...
 03864   432   NtContinue  (1244252, 0, ...
 03865   432   NtContinue  (1244252, 0, ...
 03866   432   NtContinue  (1244252, 0, ...
 03867   432   NtContinue  (1244252, 0, ...
 03868   432   NtContinue  (1244252, 0, ...
 03869   432   NtContinue  (1244252, 0, ...
 03870   432   NtContinue  (1244252, 0, ...
 03871   432   NtContinue  (1244252, 0, ...
 03872   432   NtContinue  (1244252, 0, ...
 03873   432   NtContinue  (1244252, 0, ...
 03874   432   NtContinue  (1244252, 0, ...
 03875   432   NtContinue  (1244252, 0, ...
 03876   432   NtContinue  (1244252, 0, ...
 03877   432   NtContinue  (1244252, 0, ...
 03878   432   NtContinue  (1244252, 0, ...
 03879   432   NtContinue  (1244252, 0, ...
 03880   432   NtContinue  (1244252, 0, ...
 03881   432   NtContinue  (1244252, 0, ...
 03882   432   NtContinue  (1244252, 0, ...
 03883   432   NtContinue  (1244252, 0, ...
 03884   432   NtContinue  (1244252, 0, ...
 03885   432   NtContinue  (1244252, 0, ...
 03886   432   NtContinue  (1244252, 0, ...
 03887   432   NtContinue  (1244252, 0, ...
 03888   432   NtContinue  (1244252, 0, ...
 03889   432   NtContinue  (1244252, 0, ...
 03890   432   NtContinue  (1244252, 0, ...
 03891   432   NtContinue  (1244252, 0, ...
 03892   432   NtContinue  (1244252, 0, ...
 03893   432   NtContinue  (1244252, 0, ...
 03894   432   NtContinue  (1244252, 0, ...
 03895   432   NtContinue  (1244252, 0, ...
 03896   432   NtContinue  (1244252, 0, ...
 03897   432   NtContinue  (1244252, 0, ...
 03898   432   NtContinue  (1244252, 0, ...
 03899   432   NtContinue  (1244252, 0, ...
 03900   432   NtContinue  (1244252, 0, ...
 03901   432   NtContinue  (1244252, 0, ...
 03902   432   NtContinue  (1244252, 0, ...
 03903   432   NtContinue  (1244252, 0, ...
 03904   432   NtContinue  (1244252, 0, ...
 03905   432   NtContinue  (1244252, 0, ...
 03906   432   NtContinue  (1244252, 0, ...
 03907   432   NtContinue  (1244252, 0, ...
 03908   432   NtContinue  (1244252, 0, ...
 03909   432   NtContinue  (1244252, 0, ...
 03910   432   NtContinue  (1244252, 0, ...
 03911   432   NtContinue  (1244252, 0, ...
 03912   432   NtContinue  (1244252, 0, ...
 03913   432   NtContinue  (1244252, 0, ...
 03914   432   NtContinue  (1244252, 0, ...
 03915   432   NtContinue  (1244252, 0, ...
 03916   432   NtContinue  (1244252, 0, ...
 03917   432   NtContinue  (1244252, 0, ...
 03918   432   NtContinue  (1244252, 0, ...
 03919   432   NtContinue  (1244252, 0, ...
 03920   432   NtContinue  (1244252, 0, ...
 03921   432   NtContinue  (1244252, 0, ...
 03922   432   NtContinue  (1244252, 0, ...
 03923   432   NtContinue  (1244252, 0, ...
 03924   432   NtContinue  (1244252, 0, ...
 03925   432   NtContinue  (1244252, 0, ...
 03926   432   NtContinue  (1244252, 0, ...
 03927   432   NtContinue  (1244252, 0, ...
 03928   432   NtContinue  (1244252, 0, ...
 03929   432   NtContinue  (1244252, 0, ...
 03930   432   NtContinue  (1244252, 0, ...
 03931   432   NtContinue  (1244252, 0, ...
 03932   432   NtContinue  (1244252, 0, ...
 03933   432   NtContinue  (1244252, 0, ...
 03934   432   NtContinue  (1244252, 0, ...
 03935   432   NtContinue  (1244252, 0, ...
 03936   432   NtContinue  (1244252, 0, ...
 03937   432   NtContinue  (1244252, 0, ...
 03938   432   NtContinue  (1244252, 0, ...
 03939   432   NtContinue  (1244252, 0, ...
 03940   432   NtContinue  (1244252, 0, ...
 03941   432   NtContinue  (1244252, 0, ...
 03942   432   NtContinue  (1244252, 0, ...
 03943   432   NtContinue  (1244252, 0, ...
 03944   432   NtContinue  (1244252, 0, ...
 03945   432   NtContinue  (1244252, 0, ...
 03946   432   NtContinue  (1244252, 0, ...
 03947   432   NtContinue  (1244252, 0, ...
 03948   432   NtContinue  (1244252, 0, ...
 03949   432   NtContinue  (1244252, 0, ...
 03950   432   NtContinue  (1244252, 0, ...
 03951   432   NtContinue  (1244252, 0, ...
 03952   432   NtContinue  (1244252, 0, ...
 03953   432   NtContinue  (1244252, 0, ...
 03954   432   NtContinue  (1244252, 0, ...
 03955   432   NtContinue  (1244252, 0, ...
 03956   432   NtContinue  (1244252, 0, ...
 03957   432   NtContinue  (1244252, 0, ...
 03958   432   NtContinue  (1244252, 0, ...
 03959   432   NtContinue  (1244252, 0, ...
 03960   432   NtContinue  (1244252, 0, ...
 03961   432   NtContinue  (1244252, 0, ...
 03962   432   NtContinue  (1244252, 0, ...
 03963   432   NtContinue  (1244252, 0, ...
 03964   432   NtContinue  (1244252, 0, ...
 03965   432   NtContinue  (1244252, 0, ...
 03966   432   NtContinue  (1244252, 0, ...
 03967   432   NtContinue  (1244252, 0, ...
 03968   432   NtContinue  (1244252, 0, ...
 03969   432   NtContinue  (1244252, 0, ...
 03970   432   NtContinue  (1244252, 0, ...
 03971   432   NtContinue  (1244252, 0, ...
 03972   432   NtContinue  (1244252, 0, ...
 03973   432   NtContinue  (1244252, 0, ...
 03974   432   NtContinue  (1244252, 0, ...
 03975   432   NtContinue  (1244252, 0, ...
 03976   432   NtContinue  (1244252, 0, ...
 03977   432   NtContinue  (1244252, 0, ...
 03978   432   NtContinue  (1244252, 0, ...
 03979   432   NtContinue  (1244252, 0, ...
 03980   432   NtContinue  (1244252, 0, ...
 03981   432   NtContinue  (1244252, 0, ...
 03982   432   NtContinue  (1244252, 0, ...
 03983   432   NtContinue  (1244252, 0, ...
 03984   432   NtContinue  (1244252, 0, ...
 03985   432   NtContinue  (1244252, 0, ...
 03986   432   NtContinue  (1244252, 0, ...
 03987   432   NtContinue  (1244252, 0, ...
 03988   432   NtContinue  (1244252, 0, ...
 03989   432   NtContinue  (1244252, 0, ...
 03990   432   NtContinue  (1244252, 0, ...
 03991   432   NtContinue  (1244252, 0, ...
 03992   432   NtContinue  (1244252, 0, ...
 03993   432   NtContinue  (1244252, 0, ...
 03994   432   NtContinue  (1244252, 0, ...
 03995   432   NtContinue  (1244252, 0, ...
 03996   432   NtContinue  (1244252, 0, ...
 03997   432   NtContinue  (1244252, 0, ...
 03998   432   NtContinue  (1244252, 0, ...
 03999   432   NtContinue  (1244252, 0, ...
 04000   432   NtContinue  (1244252, 0, ...
 04001   432   NtContinue  (1244252, 0, ...
 04002   432   NtContinue  (1244252, 0, ...
 04003   432   NtContinue  (1244252, 0, ...
 04004   432   NtContinue  (1244252, 0, ...
 04005   432   NtContinue  (1244252, 0, ...
 04006   432   NtContinue  (1244252, 0, ...
 04007   432   NtContinue  (1244252, 0, ...
 04008   432   NtContinue  (1244252, 0, ...
 04009   432   NtContinue  (1244252, 0, ...
 04010   432   NtContinue  (1244252, 0, ...
 04011   432   NtContinue  (1244252, 0, ...
 04012   432   NtContinue  (1244252, 0, ...
 04013   432   NtContinue  (1244252, 0, ...
 04014   432   NtContinue  (1244252, 0, ...
 04015   432   NtContinue  (1244252, 0, ...
 04016   432   NtContinue  (1244252, 0, ...
 04017   432   NtContinue  (1244252, 0, ...
 04018   432   NtContinue  (1244252, 0, ...
 04019   432   NtContinue  (1244252, 0, ...
 04020   432   NtContinue  (1244252, 0, ...
 04021   432   NtContinue  (1244252, 0, ...
 04022   432   NtContinue  (1244252, 0, ...
 04023   432   NtContinue  (1244252, 0, ...
 04024   432   NtContinue  (1244252, 0, ...
 04025   432   NtContinue  (1244252, 0, ...
 04026   432   NtContinue  (1244252, 0, ...
 04027   432   NtContinue  (1244252, 0, ...
 04028   432   NtContinue  (1244252, 0, ...
 04029   432   NtContinue  (1244252, 0, ...
 04030   432   NtContinue  (1244252, 0, ...
 04031   432   NtContinue  (1244252, 0, ...
 04032   432   NtContinue  (1244252, 0, ...
 04033   432   NtContinue  (1244252, 0, ...
 04034   432   NtContinue  (1244252, 0, ...
 04035   432   NtContinue  (1244252, 0, ...
 04036   432   NtContinue  (1244252, 0, ...
 04037   432   NtContinue  (1244252, 0, ...
 04038   432   NtContinue  (1244252, 0, ...
 04039   432   NtContinue  (1244252, 0, ...
 04040   432   NtContinue  (1244252, 0, ...
 04041   432   NtContinue  (1244252, 0, ...
 04042   432   NtContinue  (1244252, 0, ...
 04043   432   NtContinue  (1244252, 0, ...
 04044   432   NtContinue  (1244252, 0, ...
 04045   432   NtContinue  (1244252, 0, ...
 04046   432   NtContinue  (1244252, 0, ...
 04047   432   NtContinue  (1244252, 0, ...
 04048   432   NtContinue  (1244252, 0, ...
 04049   432   NtContinue  (1244252, 0, ...
 04050   432   NtContinue  (1244252, 0, ...
 04051   432   NtContinue  (1244252, 0, ...
 04052   432   NtContinue  (1244252, 0, ...
 04053   432   NtContinue  (1244252, 0, ...
 04054   432   NtContinue  (1244252, 0, ...
 04055   432   NtContinue  (1244252, 0, ...
 04056   432   NtContinue  (1244252, 0, ...
 04057   432   NtContinue  (1244252, 0, ...
 04058   432   NtContinue  (1244252, 0, ...
 04059   432   NtContinue  (1244252, 0, ...
 04060   432   NtContinue  (1244252, 0, ...
 04061   432   NtContinue  (1244252, 0, ...
 04062   432   NtContinue  (1244252, 0, ...
 04063   432   NtContinue  (1244252, 0, ...
 04064   432   NtContinue  (1244252, 0, ...
 04065   432   NtContinue  (1244252, 0, ...
 04066   432   NtContinue  (1244252, 0, ...
 04067   432   NtContinue  (1244252, 0, ...
 04068   432   NtContinue  (1244252, 0, ...
 04069   432   NtContinue  (1244252, 0, ...
 04070   432   NtContinue  (1244252, 0, ...
 04071   432   NtContinue  (1244252, 0, ...
 04072   432   NtContinue  (1244252, 0, ...
 04073   432   NtContinue  (1244252, 0, ...
 04074   432   NtContinue  (1244252, 0, ...
 04075   432   NtContinue  (1244252, 0, ...
 04076   432   NtContinue  (1244252, 0, ...
 04077   432   NtContinue  (1244252, 0, ...
 04078   432   NtContinue  (1244252, 0, ...
 04079   432   NtContinue  (1244252, 0, ...
 04080   432   NtContinue  (1244252, 0, ...
 04081   432   NtContinue  (1244252, 0, ...
 04082   432   NtContinue  (1244252, 0, ...
 04083   432   NtContinue  (1244252, 0, ...
 04084   432   NtContinue  (1244252, 0, ...
 04085   432   NtContinue  (1244252, 0, ...
 04086   432   NtContinue  (1244252, 0, ...
 04087   432   NtContinue  (1244252, 0, ...
 04088   432   NtContinue  (1244252, 0, ...
 04089   432   NtContinue  (1244252, 0, ...
 04090   432   NtContinue  (1244252, 0, ...
 04091   432   NtContinue  (1244252, 0, ...
 04092   432   NtContinue  (1244252, 0, ...
 04093   432   NtContinue  (1244252, 0, ...
 04094   432   NtContinue  (1244252, 0, ...
 04095   432   NtContinue  (1244252, 0, ...
 04096   432   NtContinue  (1244252, 0, ...
 04097   432   NtContinue  (1244252, 0, ...
 04098   432   NtContinue  (1244252, 0, ...
 04099   432   NtContinue  (1244252, 0, ...
 04100   432   NtContinue  (1244252, 0, ...
 04101   432   NtContinue  (1244252, 0, ...
 04102   432   NtContinue  (1244252, 0, ...
 04103   432   NtContinue  (1244252, 0, ...
 04104   432   NtContinue  (1244252, 0, ...
 04105   432   NtContinue  (1244252, 0, ...
 04106   432   NtContinue  (1244252, 0, ...
 04107   432   NtContinue  (1244252, 0, ...
 04108   432   NtContinue  (1244252, 0, ...
 04109   432   NtContinue  (1244252, 0, ...
 04110   432   NtContinue  (1244252, 0, ...
 04111   432   NtContinue  (1244252, 0, ...
 04112   432   NtContinue  (1244252, 0, ...
 04113   432   NtContinue  (1244252, 0, ...
 04114   432   NtContinue  (1244252, 0, ...
 04115   432   NtContinue  (1244252, 0, ...
 04116   432   NtContinue  (1244252, 0, ...
 04117   432   NtContinue  (1244252, 0, ...
 04118   432   NtContinue  (1244252, 0, ...
 04119   432   NtContinue  (1244252, 0, ...
 04120   432   NtContinue  (1244252, 0, ...
 04121   432   NtContinue  (1244252, 0, ...
 04122   432   NtContinue  (1244252, 0, ...
 04123   432   NtContinue  (1244252, 0, ...
 04124   432   NtContinue  (1244252, 0, ...
 04125   432   NtContinue  (1244252, 0, ...
 04126   432   NtContinue  (1244252, 0, ...
 04127   432   NtContinue  (1244252, 0, ...
 04128   432   NtContinue  (1244252, 0, ...
 04129   432   NtContinue  (1244252, 0, ...
 04130   432   NtContinue  (1244252, 0, ...
 04131   432   NtContinue  (1244252, 0, ...
 04132   432   NtContinue  (1244252, 0, ...
 04133   432   NtContinue  (1244252, 0, ...
 04134   432   NtContinue  (1244252, 0, ...
 04135   432   NtContinue  (1244252, 0, ...
 04136   432   NtContinue  (1244252, 0, ...
 04137   432   NtContinue  (1244252, 0, ...
 04138   432   NtContinue  (1244252, 0, ...
 04139   432   NtContinue  (1244252, 0, ...
 04140   432   NtContinue  (1244252, 0, ...
 04141   432   NtContinue  (1244252, 0, ...
 04142   432   NtContinue  (1244252, 0, ...
 04143   432   NtContinue  (1244252, 0, ...
 04144   432   NtContinue  (1244252, 0, ...
 04145   432   NtContinue  (1244252, 0, ...
 04146   432   NtContinue  (1244252, 0, ...
 04147   432   NtContinue  (1244252, 0, ...
 04148   432   NtContinue  (1244252, 0, ...
 04149   432   NtContinue  (1244252, 0, ...
 04150   432   NtContinue  (1244252, 0, ...
 04151   432   NtContinue  (1244252, 0, ...
 04152   432   NtContinue  (1244252, 0, ...
 04153   432   NtContinue  (1244252, 0, ...
 04154   432   NtContinue  (1244252, 0, ...
 04155   432   NtContinue  (1244252, 0, ...
 04156   432   NtContinue  (1244252, 0, ...
 04157   432   NtContinue  (1244252, 0, ...
 04158   432   NtContinue  (1244252, 0, ...
 04159   432   NtContinue  (1244252, 0, ...
 04160   432   NtContinue  (1244252, 0, ...
 04161   432   NtContinue  (1244252, 0, ...
 04162   432   NtContinue  (1244252, 0, ...
 04163   432   NtContinue  (1244252, 0, ...
 04164   432   NtContinue  (1244252, 0, ...
 04165   432   NtContinue  (1244252, 0, ...
 04166   432   NtContinue  (1244252, 0, ...
 04167   432   NtContinue  (1244252, 0, ...
 04168   432   NtContinue  (1244252, 0, ...
 04169   432   NtContinue  (1244252, 0, ...
 04170   432   NtContinue  (1244252, 0, ...
 04171   432   NtContinue  (1244252, 0, ...
 04172   432   NtContinue  (1244252, 0, ...
 04173   432   NtContinue  (1244252, 0, ...
 04174   432   NtContinue  (1244252, 0, ...
 04175   432   NtContinue  (1244252, 0, ...
 04176   432   NtContinue  (1244252, 0, ...
 04177   432   NtContinue  (1244252, 0, ...
 04178   432   NtContinue  (1244252, 0, ...
 04179   432   NtContinue  (1244252, 0, ...
 04180   432   NtContinue  (1244252, 0, ...
 04181   432   NtContinue  (1244252, 0, ...
 04182   432   NtContinue  (1244252, 0, ...
 04183   432   NtContinue  (1244252, 0, ...
 04184   432   NtContinue  (1244252, 0, ...
 04185   432   NtContinue  (1244252, 0, ...
 04186   432   NtContinue  (1244252, 0, ...
 04187   432   NtContinue  (1244252, 0, ...
 04188   432   NtContinue  (1244252, 0, ...
 04189   432   NtContinue  (1244252, 0, ...
 04190   432   NtContinue  (1244252, 0, ...
 04191   432   NtContinue  (1244252, 0, ...
 04192   432   NtContinue  (1244252, 0, ...
 04193   432   NtContinue  (1244252, 0, ...
 04194   432   NtContinue  (1244252, 0, ...
 04195   432   NtContinue  (1244252, 0, ...
 04196   432   NtContinue  (1244252, 0, ...
 04197   432   NtContinue  (1244252, 0, ...
 04198   432   NtContinue  (1244252, 0, ...
 04199   432   NtContinue  (1244252, 0, ...
 04200   432   NtContinue  (1244252, 0, ...
 04201   432   NtContinue  (1244252, 0, ...
 04202   432   NtContinue  (1244252, 0, ...
 04203   432   NtContinue  (1244252, 0, ...
 04204   432   NtContinue  (1244252, 0, ...
 04205   432   NtContinue  (1244252, 0, ...
 04206   432   NtContinue  (1244252, 0, ...
 04207   432   NtContinue  (1244252, 0, ...
 04208   432   NtContinue  (1244252, 0, ...
 04209   432   NtContinue  (1244252, 0, ...
 04210   432   NtContinue  (1244252, 0, ...
 04211   432   NtContinue  (1244252, 0, ...
 04212   432   NtContinue  (1244252, 0, ...
 04213   432   NtContinue  (1244252, 0, ...
 04214   432   NtContinue  (1244252, 0, ...
 04215   432   NtContinue  (1244252, 0, ...
 04216   432   NtContinue  (1244252, 0, ...
 04217   432   NtContinue  (1244252, 0, ...
 04218   432   NtContinue  (1244252, 0, ...
 04219   432   NtContinue  (1244252, 0, ...
 04220   432   NtContinue  (1244252, 0, ...
 04221   432   NtContinue  (1244252, 0, ...
 04222   432   NtContinue  (1244252, 0, ...
 04223   432   NtContinue  (1244252, 0, ...
 04224   432   NtContinue  (1244252, 0, ...
 04225   432   NtContinue  (1244252, 0, ...
 04226   432   NtContinue  (1244252, 0, ...
 04227   432   NtContinue  (1244252, 0, ...
 04228   432   NtContinue  (1244252, 0, ...
 04229   432   NtContinue  (1244252, 0, ...
 04230   432   NtContinue  (1244252, 0, ...
 04231   432   NtContinue  (1244252, 0, ...
 04232   432   NtContinue  (1244252, 0, ...
 04233   432   NtContinue  (1244252, 0, ...
 04234   432   NtContinue  (1244252, 0, ...
 04235   432   NtContinue  (1244252, 0, ...
 04236   432   NtContinue  (1244252, 0, ...
 04237   432   NtContinue  (1244252, 0, ...
 04238   432   NtContinue  (1244252, 0, ...
 04239   432   NtContinue  (1244252, 0, ...
 04240   432   NtContinue  (1244252, 0, ...
 04241   432   NtContinue  (1244252, 0, ...
 04242   432   NtContinue  (1244252, 0, ...
 04243   432   NtContinue  (1244252, 0, ...
 04244   432   NtContinue  (1244252, 0, ...
 04245   432   NtContinue  (1244252, 0, ...
 04246   432   NtContinue  (1244252, 0, ...
 04247   432   NtContinue  (1244252, 0, ...
 04248   432   NtContinue  (1244252, 0, ...
 04249   432   NtContinue  (1244252, 0, ...
 04250   432   NtContinue  (1244252, 0, ...
 04251   432   NtContinue  (1244252, 0, ...
 04252   432   NtContinue  (1244252, 0, ...
 04253   432   NtContinue  (1244252, 0, ...
 04254   432   NtContinue  (1244252, 0, ...
 04255   432   NtContinue  (1244252, 0, ...
 04256   432   NtContinue  (1244252, 0, ...
 04257   432   NtContinue  (1244252, 0, ...
 04258   432   NtContinue  (1244252, 0, ...
 04259   432   NtContinue  (1244252, 0, ...
 04260   432   NtContinue  (1244252, 0, ...
 04261   432   NtContinue  (1244252, 0, ...
 04262   432   NtContinue  (1244252, 0, ...
 04263   432   NtContinue  (1244252, 0, ...
 04264   432   NtContinue  (1244252, 0, ...
 04265   432   NtContinue  (1244252, 0, ...
 04266   432   NtContinue  (1244252, 0, ...
 04267   432   NtContinue  (1244252, 0, ...
 04268   432   NtContinue  (1244252, 0, ...
 04269   432   NtContinue  (1244252, 0, ...
 04270   432   NtContinue  (1244252, 0, ...
 04271   432   NtContinue  (1244252, 0, ...
 04272   432   NtContinue  (1244252, 0, ...
 04273   432   NtContinue  (1244252, 0, ...
 04274   432   NtContinue  (1244252, 0, ...
 04275   432   NtContinue  (1244252, 0, ...
 04276   432   NtContinue  (1244252, 0, ...
 04277   432   NtContinue  (1244252, 0, ...
 04278   432   NtContinue  (1244252, 0, ...
 04279   432   NtContinue  (1244252, 0, ...
 04280   432   NtContinue  (1244252, 0, ...
 04281   432   NtContinue  (1244252, 0, ...
 04282   432   NtContinue  (1244252, 0, ...
 04283   432   NtContinue  (1244252, 0, ...
 04284   432   NtContinue  (1244252, 0, ...
 04285   432   NtContinue  (1244252, 0, ...
 04286   432   NtContinue  (1244252, 0, ...
 04287   432   NtContinue  (1244252, 0, ...
 04288   432   NtContinue  (1244252, 0, ...
 04289   432   NtContinue  (1244252, 0, ...
 04290   432   NtContinue  (1244252, 0, ...
 04291   432   NtContinue  (1244252, 0, ...
 04292   432   NtContinue  (1244252, 0, ...
 04293   432   NtContinue  (1244252, 0, ...
 04294   432   NtContinue  (1244252, 0, ...
 04295   432   NtContinue  (1244252, 0, ...
 04296   432   NtContinue  (1244252, 0, ...
 04297   432   NtContinue  (1244252, 0, ...
 04298   432   NtContinue  (1244252, 0, ...
 04299   432   NtContinue  (1244252, 0, ...
 04300   432   NtContinue  (1244252, 0, ...
 04301   432   NtContinue  (1244252, 0, ...
 04302   432   NtContinue  (1244252, 0, ...
 04303   432   NtContinue  (1244252, 0, ...
 04304   432   NtContinue  (1244252, 0, ...
 04305   432   NtContinue  (1244252, 0, ...
 04306   432   NtContinue  (1244252, 0, ...
 04307   432   NtContinue  (1244252, 0, ...
 04308   432   NtContinue  (1244252, 0, ...
 04309   432   NtContinue  (1244252, 0, ...
 04310   432   NtContinue  (1244252, 0, ...
 04311   432   NtContinue  (1244252, 0, ...
 04312   432   NtContinue  (1244252, 0, ...
 04313   432   NtContinue  (1244252, 0, ...
 04314   432   NtContinue  (1244252, 0, ...
 04315   432   NtContinue  (1244252, 0, ...
 04316   432   NtContinue  (1244252, 0, ...
 04317   432   NtContinue  (1244252, 0, ...
 04318   432   NtContinue  (1244252, 0, ...
 04319   432   NtContinue  (1244252, 0, ...
 04320   432   NtContinue  (1244252, 0, ...
 04321   432   NtContinue  (1244252, 0, ...
 04322   432   NtContinue  (1244252, 0, ...
 04323   432   NtContinue  (1244252, 0, ...
 04324   432   NtContinue  (1244252, 0, ...
 04325   432   NtContinue  (1244252, 0, ...
 04326   432   NtContinue  (1244252, 0, ...
 04327   432   NtContinue  (1244252, 0, ...
 04328   432   NtContinue  (1244252, 0, ...
 04329   432   NtContinue  (1244252, 0, ...
 04330   432   NtContinue  (1244252, 0, ...
 04331   432   NtContinue  (1244252, 0, ...
 04332   432   NtContinue  (1244252, 0, ...
 04333   432   NtContinue  (1244252, 0, ...
 04334   432   NtContinue  (1244252, 0, ...
 04335   432   NtContinue  (1244252, 0, ...
 04336   432   NtContinue  (1244252, 0, ...
 04337   432   NtContinue  (1244252, 0, ...
 04338   432   NtContinue  (1244252, 0, ...
 04339   432   NtContinue  (1244252, 0, ...
 04340   432   NtContinue  (1244252, 0, ...
 04341   432   NtContinue  (1244252, 0, ...
 04342   432   NtContinue  (1244252, 0, ...
 04343   432   NtContinue  (1244252, 0, ...
 04344   432   NtContinue  (1244252, 0, ...
 04345   432   NtContinue  (1244252, 0, ...
 04346   432   NtContinue  (1244252, 0, ...
 04347   432   NtContinue  (1244252, 0, ...
 04348   432   NtContinue  (1244252, 0, ...
 04349   432   NtContinue  (1244252, 0, ...
 04350   432   NtContinue  (1244252, 0, ...
 04351   432   NtContinue  (1244252, 0, ...
 04352   432   NtContinue  (1244252, 0, ...
 04353   432   NtContinue  (1244252, 0, ...
 04354   432   NtContinue  (1244252, 0, ...
 04355   432   NtContinue  (1244252, 0, ...
 04356   432   NtContinue  (1244252, 0, ...
 04357   432   NtContinue  (1244252, 0, ...
 04358   432   NtContinue  (1244252, 0, ...
 04359   432   NtContinue  (1244252, 0, ...
 04360   432   NtContinue  (1244252, 0, ...
 04361   432   NtContinue  (1244252, 0, ...
 04362   432   NtContinue  (1244252, 0, ...
 04363   432   NtContinue  (1244252, 0, ...
 04364   432   NtContinue  (1244252, 0, ...
 04365   432   NtContinue  (1244252, 0, ...
 04366   432   NtContinue  (1244252, 0, ...
 04367   432   NtContinue  (1244252, 0, ...
 04368   432   NtContinue  (1244252, 0, ...
 04369   432   NtContinue  (1244252, 0, ...
 04370   432   NtContinue  (1244252, 0, ...
 04371   432   NtContinue  (1244252, 0, ...
 04372   432   NtContinue  (1244252, 0, ...
 04373   432   NtContinue  (1244252, 0, ...
 04374   432   NtContinue  (1244252, 0, ...
 04375   432   NtContinue  (1244252, 0, ...
 04376   432   NtContinue  (1244252, 0, ...
 04377   432   NtContinue  (1244252, 0, ...
 04378   432   NtContinue  (1244252, 0, ...
 04379   432   NtContinue  (1244252, 0, ...
 04380   432   NtContinue  (1244252, 0, ...
 04381   432   NtContinue  (1244252, 0, ...
 04382   432   NtContinue  (1244252, 0, ...
 04383   432   NtContinue  (1244252, 0, ...
 04384   432   NtContinue  (1244252, 0, ...
 04385   432   NtContinue  (1244252, 0, ...
 04386   432   NtContinue  (1244252, 0, ...
 04387   432   NtContinue  (1244252, 0, ...
 04388   432   NtContinue  (1244252, 0, ...
 04389   432   NtContinue  (1244252, 0, ...
 04390   432   NtContinue  (1244252, 0, ...
 04391   432   NtContinue  (1244252, 0, ...
 04392   432   NtContinue  (1244252, 0, ...
 04393   432   NtContinue  (1244252, 0, ...
 04394   432   NtContinue  (1244252, 0, ...
 04395   432   NtContinue  (1244252, 0, ...
 04396   432   NtContinue  (1244252, 0, ...
 04397   432   NtContinue  (1244252, 0, ...
 04398   432   NtContinue  (1244252, 0, ...
 04399   432   NtContinue  (1244252, 0, ...
 04400   432   NtContinue  (1244252, 0, ...
 04401   432   NtContinue  (1244252, 0, ...
 04402   432   NtContinue  (1244252, 0, ...
 04403   432   NtContinue  (1244252, 0, ...
 04404   432   NtContinue  (1244252, 0, ...
 04405   432   NtContinue  (1244252, 0, ...
 04406   432   NtContinue  (1244252, 0, ...
 04407   432   NtContinue  (1244252, 0, ...
 04408   432   NtContinue  (1244252, 0, ...
 04409   432   NtContinue  (1244252, 0, ...
 04410   432   NtContinue  (1244252, 0, ...
 04411   432   NtContinue  (1244252, 0, ...
 04412   432   NtContinue  (1244252, 0, ...
 04413   432   NtContinue  (1244252, 0, ...
 04414   432   NtContinue  (1244252, 0, ...
 04415   432   NtContinue  (1244252, 0, ...
 04416   432   NtContinue  (1244252, 0, ...
 04417   432   NtContinue  (1244252, 0, ...
 04418   432   NtContinue  (1244252, 0, ...
 04419   432   NtContinue  (1244252, 0, ...
 04420   432   NtContinue  (1244252, 0, ...
 04421   432   NtContinue  (1244252, 0, ...
 04422   432   NtContinue  (1244252, 0, ...
 04423   432   NtContinue  (1244252, 0, ...
 04424   432   NtContinue  (1244252, 0, ...
 04425   432   NtContinue  (1244252, 0, ...
 04426   432   NtContinue  (1244252, 0, ...
 04427   432   NtContinue  (1244252, 0, ...
 04428   432   NtContinue  (1244252, 0, ...
 04429   432   NtContinue  (1244252, 0, ...
 04430   432   NtContinue  (1244252, 0, ...
 04431   432   NtContinue  (1244252, 0, ...
 04432   432   NtContinue  (1244252, 0, ...
 04433   432   NtContinue  (1244252, 0, ...
 04434   432   NtContinue  (1244252, 0, ...
 04435   432   NtContinue  (1244252, 0, ...
 04436   432   NtContinue  (1244252, 0, ...
 04437   432   NtContinue  (1244252, 0, ...
 04438   432   NtContinue  (1244252, 0, ...
 04439   432   NtContinue  (1244252, 0, ...
 04440   432   NtContinue  (1244252, 0, ...
 04441   432   NtContinue  (1244252, 0, ...
 04442   432   NtContinue  (1244252, 0, ...
 04443   432   NtContinue  (1244252, 0, ...
 04444   432   NtContinue  (1244252, 0, ...
 04445   432   NtContinue  (1244252, 0, ...
 04446   432   NtContinue  (1244252, 0, ...
 04447   432   NtContinue  (1244252, 0, ...
 04448   432   NtContinue  (1244252, 0, ...
 04449   432   NtContinue  (1244252, 0, ...
 04450   432   NtContinue  (1244252, 0, ...
 04451   432   NtContinue  (1244252, 0, ...
 04452   432   NtContinue  (1244252, 0, ...
 04453   432   NtContinue  (1244252, 0, ...
 04454   432   NtContinue  (1244252, 0, ...
 04455   432   NtContinue  (1244252, 0, ...
 04456   432   NtContinue  (1244252, 0, ...
 04457   432   NtContinue  (1244252, 0, ...
 04458   432   NtContinue  (1244252, 0, ...
 04459   432   NtContinue  (1244252, 0, ...
 04460   432   NtContinue  (1244252, 0, ...
 04461   432   NtContinue  (1244252, 0, ...
 04462   432   NtContinue  (1244252, 0, ...
 04463   432   NtContinue  (1244252, 0, ...
 04464   432   NtContinue  (1244252, 0, ...
 04465   432   NtContinue  (1244252, 0, ...
 04466   432   NtContinue  (1244252, 0, ...
 04467   432   NtContinue  (1244252, 0, ...
 04468   432   NtContinue  (1244252, 0, ...
 04469   432   NtContinue  (1244252, 0, ...
 04470   432   NtContinue  (1244252, 0, ...
 04471   432   NtContinue  (1244252, 0, ...
 04472   432   NtContinue  (1244252, 0, ...
 04473   432   NtContinue  (1244252, 0, ...
 04474   432   NtContinue  (1244252, 0, ...
 04475   432   NtContinue  (1244252, 0, ...
 04476   432   NtContinue  (1244252, 0, ...
 04477   432   NtContinue  (1244252, 0, ...
 04478   432   NtContinue  (1244252, 0, ...
 04479   432   NtContinue  (1244252, 0, ...
 04480   432   NtContinue  (1244252, 0, ...
 04481   432   NtContinue  (1244252, 0, ...
 04482   432   NtContinue  (1244252, 0, ...
 04483   432   NtContinue  (1244252, 0, ...
 04484   432   NtContinue  (1244252, 0, ...
 04485   432   NtContinue  (1244252, 0, ...
 04486   432   NtContinue  (1244252, 0, ...
 04487   432   NtContinue  (1244252, 0, ...
 04488   432   NtContinue  (1244252, 0, ...
 04489   432   NtContinue  (1244252, 0, ...
 04490   432   NtContinue  (1244252, 0, ...
 04491   432   NtContinue  (1244252, 0, ...
 04492   432   NtContinue  (1244252, 0, ...
 04493   432   NtContinue  (1244252, 0, ...
 04494   432   NtContinue  (1244252, 0, ...
 04495   432   NtContinue  (1244252, 0, ...
 04496   432   NtContinue  (1244252, 0, ...
 04497   432   NtContinue  (1244252, 0, ...
 04498   432   NtContinue  (1244252, 0, ...
 04499   432   NtContinue  (1244252, 0, ...
 04500   432   NtContinue  (1244252, 0, ...
 04501   432   NtContinue  (1244252, 0, ...
 04502   432   NtContinue  (1244252, 0, ...
 04503   432   NtContinue  (1244252, 0, ...
 04504   432   NtContinue  (1244252, 0, ...
 04505   432   NtContinue  (1244252, 0, ...
 04506   432   NtContinue  (1244252, 0, ...
 04507   432   NtContinue  (1244252, 0, ...
 04508   432   NtContinue  (1244252, 0, ...
 04509   432   NtContinue  (1244252, 0, ...
 04510   432   NtContinue  (1244252, 0, ...
 04511   432   NtContinue  (1244252, 0, ...
 04512   432   NtContinue  (1244252, 0, ...
 04513   432   NtContinue  (1244252, 0, ...
 04514   432   NtContinue  (1244252, 0, ...
 04515   432   NtContinue  (1244252, 0, ...
 04516   432   NtContinue  (1244252, 0, ...
 04517   432   NtContinue  (1244252, 0, ...
 04518   432   NtContinue  (1244252, 0, ...
 04519   432   NtContinue  (1244252, 0, ...
 04520   432   NtContinue  (1244252, 0, ...
 04521   432   NtContinue  (1244252, 0, ...
 04522   432   NtContinue  (1244252, 0, ...
 04523   432   NtContinue  (1244252, 0, ...
 04524   432   NtContinue  (1244252, 0, ...
 04525   432   NtContinue  (1244252, 0, ...
 04526   432   NtContinue  (1244252, 0, ...
 04527   432   NtContinue  (1244252, 0, ...
 04528   432   NtContinue  (1244252, 0, ...
 04529   432   NtContinue  (1244252, 0, ...
 04530   432   NtContinue  (1244252, 0, ...
 04531   432   NtContinue  (1244252, 0, ...
 04532   432   NtContinue  (1244252, 0, ...
 04533   432   NtContinue  (1244252, 0, ...
 04534   432   NtContinue  (1244252, 0, ...
 04535   432   NtContinue  (1244252, 0, ...
 04536   432   NtContinue  (1244252, 0, ...
 04537   432   NtContinue  (1244252, 0, ...
 04538   432   NtContinue  (1244252, 0, ...
 04539   432   NtContinue  (1244252, 0, ...
 04540   432   NtContinue  (1244252, 0, ...
 04541   432   NtContinue  (1244252, 0, ...
 04542   432   NtContinue  (1244252, 0, ...
 04543   432   NtContinue  (1244252, 0, ...
 04544   432   NtContinue  (1244252, 0, ...
 04545   432   NtContinue  (1244252, 0, ...
 04546   432   NtContinue  (1244252, 0, ...
 04547   432   NtContinue  (1244252, 0, ...
 04548   432   NtContinue  (1244252, 0, ...
 04549   432   NtContinue  (1244252, 0, ...
 04550   432   NtContinue  (1244252, 0, ...
 04551   432   NtContinue  (1244252, 0, ...
 04552   432   NtContinue  (1244252, 0, ...
 04553   432   NtContinue  (1244252, 0, ...
 04554   432   NtContinue  (1244252, 0, ...
 04555   432   NtContinue  (1244252, 0, ...
 04556   432   NtContinue  (1244252, 0, ...
 04557   432   NtContinue  (1244252, 0, ...
 04558   432   NtContinue  (1244252, 0, ...
 04559   432   NtContinue  (1244252, 0, ...
 04560   432   NtContinue  (1244252, 0, ...
 04561   432   NtContinue  (1244252, 0, ...
 04562   432   NtContinue  (1244252, 0, ...
 04563   432   NtContinue  (1244252, 0, ...
 04564   432   NtContinue  (1244252, 0, ...
 04565   432   NtContinue  (1244252, 0, ...
 04566   432   NtContinue  (1244252, 0, ...
 04567   432   NtContinue  (1244252, 0, ...
 04568   432   NtContinue  (1244252, 0, ...
 04569   432   NtContinue  (1244252, 0, ...
 04570   432   NtContinue  (1244252, 0, ...
 04571   432   NtContinue  (1244252, 0, ...
 04572   432   NtContinue  (1244252, 0, ...
 04573   432   NtContinue  (1244252, 0, ...
 04574   432   NtContinue  (1244252, 0, ...
 04575   432   NtContinue  (1244252, 0, ...
 04576   432   NtContinue  (1244252, 0, ...
 04577   432   NtContinue  (1244252, 0, ...
 04578   432   NtContinue  (1244252, 0, ...
 04579   432   NtContinue  (1244252, 0, ...
 04580   432   NtContinue  (1244252, 0, ...
 04581   432   NtContinue  (1244252, 0, ...
 04582   432   NtContinue  (1244252, 0, ...
 04583   432   NtContinue  (1244252, 0, ...
 04584   432   NtContinue  (1244252, 0, ...
 04585   432   NtContinue  (1244252, 0, ...
 04586   432   NtContinue  (1244252, 0, ...
 04587   432   NtContinue  (1244252, 0, ...
 04588   432   NtContinue  (1244252, 0, ...
 04589   432   NtContinue  (1244252, 0, ...
 04590   432   NtContinue  (1244252, 0, ...
 04591   432   NtContinue  (1244252, 0, ...
 04592   432   NtContinue  (1244252, 0, ...
 04593   432   NtContinue  (1244252, 0, ...
 04594   432   NtContinue  (1244252, 0, ...
 04595   432   NtContinue  (1244252, 0, ...
 04596   432   NtContinue  (1244252, 0, ...
 04597   432   NtContinue  (1244252, 0, ...
 04598   432   NtContinue  (1244252, 0, ...
 04599   432   NtContinue  (1244252, 0, ...
 04600   432   NtContinue  (1244252, 0, ...
 04601   432   NtContinue  (1244252, 0, ...
 04602   432   NtContinue  (1244252, 0, ...
 04603   432   NtContinue  (1244252, 0, ...
 04604   432   NtContinue  (1244252, 0, ...
 04605   432   NtContinue  (1244252, 0, ...
 04606   432   NtContinue  (1244252, 0, ...
 04607   432   NtContinue  (1244252, 0, ...
 04608   432   NtContinue  (1244252, 0, ...
 04609   432   NtContinue  (1244252, 0, ...
 04610   432   NtContinue  (1244252, 0, ...
 04611   432   NtContinue  (1244252, 0, ...
 04612   432   NtContinue  (1244252, 0, ...
 04613   432   NtContinue  (1244252, 0, ...
 04614   432   NtContinue  (1244252, 0, ...
 04615   432   NtContinue  (1244252, 0, ...
 04616   432   NtContinue  (1244252, 0, ...
 04617   432   NtContinue  (1244252, 0, ...
 04618   432   NtContinue  (1244252, 0, ...
 04619   432   NtContinue  (1244252, 0, ...
 04620   432   NtContinue  (1244252, 0, ...
 04621   432   NtContinue  (1244252, 0, ...
 04622   432   NtContinue  (1244252, 0, ...
 04623   432   NtContinue  (1244252, 0, ...
 04624   432   NtContinue  (1244252, 0, ...
 04625   432   NtContinue  (1244252, 0, ...
 04626   432   NtContinue  (1244252, 0, ...
 04627   432   NtContinue  (1244252, 0, ...
 04628   432   NtContinue  (1244252, 0, ...
 04629   432   NtContinue  (1244252, 0, ...
 04630   432   NtContinue  (1244252, 0, ...
 04631   432   NtContinue  (1244252, 0, ...
 04632   432   NtContinue  (1244252, 0, ...
 04633   432   NtContinue  (1244252, 0, ...
 04634   432   NtContinue  (1244252, 0, ...
 04635   432   NtContinue  (1244252, 0, ...
 04636   432   NtContinue  (1244252, 0, ...
 04637   432   NtContinue  (1244252, 0, ...
 04638   432   NtContinue  (1244252, 0, ...
 04639   432   NtContinue  (1244252, 0, ...
 04640   432   NtContinue  (1244252, 0, ...
 04641   432   NtContinue  (1244252, 0, ...
 04642   432   NtContinue  (1244252, 0, ...
 04643   432   NtContinue  (1244252, 0, ...
 04644   432   NtContinue  (1244252, 0, ...
 04645   432   NtContinue  (1244252, 0, ...
 04646   432   NtContinue  (1244252, 0, ...
 04647   432   NtContinue  (1244252, 0, ...
 04648   432   NtContinue  (1244252, 0, ...
 04649   432   NtContinue  (1244252, 0, ...
 04650   432   NtContinue  (1244252, 0, ...
 04651   432   NtContinue  (1244252, 0, ...
 04652   432   NtContinue  (1244252, 0, ...
 04653   432   NtContinue  (1244252, 0, ...
 04654   432   NtContinue  (1244252, 0, ...
 04655   432   NtContinue  (1244252, 0, ...
 04656   432   NtContinue  (1244252, 0, ...
 04657   432   NtContinue  (1244252, 0, ...
 04658   432   NtContinue  (1244252, 0, ...
 04659   432   NtContinue  (1244252, 0, ...
 04660   432   NtContinue  (1244252, 0, ...
 04661   432   NtContinue  (1244252, 0, ...
 04662   432   NtContinue  (1244252, 0, ...
 04663   432   NtContinue  (1244252, 0, ...
 04664   432   NtContinue  (1244252, 0, ...
 04665   432   NtContinue  (1244252, 0, ...
 04666   432   NtContinue  (1244252, 0, ...
 04667   432   NtContinue  (1244252, 0, ...
 04668   432   NtContinue  (1244252, 0, ...
 04669   432   NtContinue  (1244252, 0, ...
 04670   432   NtContinue  (1244252, 0, ...
 04671   432   NtContinue  (1244252, 0, ...
 04672   432   NtContinue  (1244252, 0, ...
 04673   432   NtContinue  (1244252, 0, ...
 04674   432   NtContinue  (1244252, 0, ...
 04675   432   NtContinue  (1244252, 0, ...
 04676   432   NtContinue  (1244252, 0, ...
 04677   432   NtContinue  (1244252, 0, ...
 04678   432   NtContinue  (1244252, 0, ...
 04679   432   NtContinue  (1244252, 0, ...
 04680   432   NtContinue  (1244252, 0, ...
 04681   432   NtContinue  (1244252, 0, ...
 04682   432   NtContinue  (1244252, 0, ...
 04683   432   NtContinue  (1244252, 0, ...
 04684   432   NtContinue  (1244252, 0, ...
 04685   432   NtContinue  (1244252, 0, ...
 04686   432   NtContinue  (1244252, 0, ...
 04687   432   NtContinue  (1244252, 0, ...
 04688   432   NtContinue  (1244252, 0, ...
 04689   432   NtContinue  (1244252, 0, ...
 04690   432   NtContinue  (1244252, 0, ...
 04691   432   NtContinue  (1244252, 0, ...
 04692   432   NtContinue  (1244252, 0, ...
 04693   432   NtContinue  (1244252, 0, ...
 04694   432   NtContinue  (1244252, 0, ...
 04695   432   NtContinue  (1244252, 0, ...
 04696   432   NtContinue  (1244252, 0, ...
 04697   432   NtContinue  (1244252, 0, ...
 04698   432   NtContinue  (1244252, 0, ...
 04699   432   NtContinue  (1244252, 0, ...
 04700   432   NtContinue  (1244252, 0, ...
 04701   432   NtContinue  (1244252, 0, ...
 04702   432   NtContinue  (1244252, 0, ...
 04703   432   NtContinue  (1244252, 0, ...
 04704   432   NtContinue  (1244252, 0, ...
 04705   432   NtContinue  (1244252, 0, ...
 04706   432   NtContinue  (1244252, 0, ...
 04707   432   NtContinue  (1244252, 0, ...
 04708   432   NtContinue  (1244252, 0, ...
 04709   432   NtContinue  (1244252, 0, ...
 04710   432   NtContinue  (1244252, 0, ...
 04711   432   NtContinue  (1244252, 0, ...
 04712   432   NtContinue  (1244252, 0, ...
 04713   432   NtContinue  (1244252, 0, ...
 04714   432   NtContinue  (1244252, 0, ...
 04715   432   NtContinue  (1244252, 0, ...
 04716   432   NtContinue  (1244252, 0, ...
 04717   432   NtContinue  (1244252, 0, ...
 04718   432   NtContinue  (1244252, 0, ...
 04719   432   NtContinue  (1244252, 0, ...
 04720   432   NtContinue  (1244252, 0, ...
 04721   432   NtContinue  (1244252, 0, ...
 04722   432   NtContinue  (1244252, 0, ...
 04723   432   NtContinue  (1244252, 0, ...
 04724   432   NtContinue  (1244252, 0, ...
 04725   432   NtContinue  (1244252, 0, ...
 04726   432   NtContinue  (1244252, 0, ...
 04727   432   NtContinue  (1244252, 0, ...
 04728   432   NtContinue  (1244252, 0, ...
 04729   432   NtContinue  (1244248, 0, ...
 04730   432   NtContinue  (1244248, 0, ...
 04731   432   NtContinue  (1244248, 0, ...
 04732   432   NtContinue  (1244248, 0, ...
 04733   432   NtContinue  (1244248, 0, ...
 04734   432   NtContinue  (1244248, 0, ...
 04735   432   NtContinue  (1244248, 0, ...
 04736   432   NtContinue  (1244248, 0, ...
 04737   432   NtContinue  (1244248, 0, ...
 04738   432   NtContinue  (1244248, 0, ...
 04739   432   NtContinue  (1244248, 0, ...
 04740   432   NtContinue  (1244248, 0, ...
 04741   432   NtContinue  (1244248, 0, ...
 04742   432   NtContinue  (1244248, 0, ...
 04743   432   NtContinue  (1244248, 0, ...
 04744   432   NtContinue  (1244248, 0, ...
 04745   432   NtContinue  (1244248, 0, ...
 04746   432   NtContinue  (1244248, 0, ...
 04747   432   NtContinue  (1244248, 0, ...
 04748   432   NtContinue  (1244248, 0, ...
 04749   432   NtContinue  (1244248, 0, ...
 04750   432   NtContinue  (1244248, 0, ...
 04751   432   NtContinue  (1244248, 0, ...
 04752   432   NtContinue  (1244248, 0, ...
 04753   432   NtContinue  (1244248, 0, ...
 04754   432   NtContinue  (1244248, 0, ...
 04755   432   NtContinue  (1244248, 0, ...
 04756   432   NtContinue  (1244248, 0, ...
 04757   432   NtContinue  (1244248, 0, ...
 04758   432   NtContinue  (1244248, 0, ...
 04759   432   NtContinue  (1244248, 0, ...
 04760   432   NtContinue  (1244248, 0, ...
 04761   432   NtContinue  (1244252, 0, ...
 04762   432   NtContinue  (1244248, 0, ...
 04763   432   NtContinue  (1244248, 0, ...
 04764   432   NtContinue  (1244248, 0, ...
 04765   432   NtContinue  (1244248, 0, ...
 04766   432   NtContinue  (1244252, 0, ...
 04767   432   NtContinue  (1244248, 0, ...
 04768   432   NtContinue  (1244248, 0, ...
 04769   432   NtContinue  (1244248, 0, ...
 04770   432   NtContinue  (1244252, 0, ...
 04771   432   NtContinue  (1244248, 0, ...
 04772   432   NtContinue  (1244248, 0, ...
 04773   432   NtContinue  (1244252, 0, ...
 04774   432   NtContinue  (1244248, 0, ...
 04775   432   NtContinue  (1244248, 0, ...
 04776   432   NtContinue  (1244248, 0, ...
 04777   432   NtContinue  (1244248, 0, ...
 04778   432   NtContinue  (1244248, 0, ...
 04779   432   NtContinue  (1244248, 0, ...
 04780   432   NtContinue  (1244252, 0, ...
 04781   432   NtContinue  (1244248, 0, ...
 04782   432   NtContinue  (1244248, 0, ...
 04783   432   NtContinue  (1244248, 0, ...
 04784   432   NtContinue  (1244248, 0, ...
 04785   432   NtContinue  (1244248, 0, ...
 04786   432   NtContinue  (1244248, 0, ...
 04787   432   NtContinue  (1244252, 0, ...
 04788   432   NtContinue  (1244248, 0, ...
 04789   432   NtContinue  (1244248, 0, ...
 04790   432   NtContinue  (1244248, 0, ...
 04791   432   NtContinue  (1244248, 0, ...
 04792   432   NtContinue  (1244248, 0, ...
 04793   432   NtContinue  (1244248, 0, ...
 04794   432   NtContinue  (1244248, 0, ...
 04795   432   NtContinue  (1244248, 0, ...
 04796   432   NtContinue  (1244248, 0, ...
 04797   432   NtContinue  (1244248, 0, ...
 04798   432   NtContinue  (1244248, 0, ...
 04799   432   NtContinue  (1244248, 0, ...
 04800   432   NtContinue  (1244248, 0, ...
 04801   432   NtContinue  (1244248, 0, ...
 04802   432   NtContinue  (1244248, 0, ...
 04803   432   NtContinue  (1244248, 0, ...
 04804   432   NtContinue  (1244248, 0, ...
 04805   432   NtContinue  (1244248, 0, ...
 04806   432   NtContinue  (1244248, 0, ...
 04807   432   NtContinue  (1244248, 0, ...
 04808   432   NtContinue  (1244248, 0, ...
 04809   432   NtContinue  (1244248, 0, ...
 04810   432   NtContinue  (1244248, 0, ...
 04811   432   NtContinue  (1244248, 0, ...
 04812   432   NtContinue  (1244248, 0, ...
 04813   432   NtContinue  (1244248, 0, ...
 04814   432   NtContinue  (1244248, 0, ...
 04815   432   NtContinue  (1244248, 0, ...
 04816   432   NtContinue  (1244248, 0, ...
 04817   432   NtContinue  (1244248, 0, ...
 04818   432   NtContinue  (1244248, 0, ...
 04819   432   NtContinue  (1244248, 0, ...
 04820   432   NtContinue  (1244248, 0, ...
 04821   432   NtContinue  (1244248, 0, ...
 04822   432   NtContinue  (1244248, 0, ...
 04823   432   NtContinue  (1244248, 0, ...
 04824   432   NtContinue  (1244248, 0, ...
 04825   432   NtContinue  (1244248, 0, ...
 04826   432   NtContinue  (1244248, 0, ...
 04827   432   NtContinue  (1244248, 0, ...
 04828   432   NtContinue  (1244248, 0, ...
 04829   432   NtContinue  (1244248, 0, ...
 04830   432   NtContinue  (1244248, 0, ...
 04831   432   NtContinue  (1244248, 0, ...
 04832   432   NtContinue  (1244248, 0, ...
 04833   432   NtContinue  (1244248, 0, ...
 04834   432   NtContinue  (1244248, 0, ...
 04835   432   NtContinue  (1244252, 0, ...
 04836   432   NtContinue  (1244248, 0, ...
 04837   432   NtContinue  (1244252, 0, ...
 04838   432   NtContinue  (1244248, 0, ...
 04839   432   NtContinue  (1244248, 0, ...
 04840   432   NtContinue  (1244248, 0, ...
 04841   432   NtContinue  (1244248, 0, ...
 04842   432   NtContinue  (1244248, 0, ...
 04843   432   NtContinue  (1244248, 0, ...
 04844   432   NtContinue  (1244248, 0, ...
 04845   432   NtContinue  (1244248, 0, ...
 04846   432   NtContinue  (1244248, 0, ...
 04847   432   NtContinue  (1244248, 0, ...
 04848   432   NtContinue  (1244248, 0, ...
 04849   432   NtContinue  (1244248, 0, ...
 04850   432   NtContinue  (1244248, 0, ...
 04851   432   NtContinue  (1244248, 0, ...
 04852   432   NtContinue  (1244248, 0, ...
 04853   432   NtContinue  (1244248, 0, ...
 04854   432   NtContinue  (1244248, 0, ...
 04855   432   NtContinue  (1244248, 0, ...
 04856   432   NtContinue  (1244248, 0, ...
 04857   432   NtContinue  (1244248, 0, ...
 04858   432   NtContinue  (1244248, 0, ...
 04859   432   NtContinue  (1244248, 0, ...
 04860   432   NtContinue  (1244248, 0, ...
 04861   432   NtContinue  (1244252, 0, ...
 04862   432   NtContinue  (1244248, 0, ...
 04863   432   NtContinue  (1244248, 0, ...
 04864   432   NtContinue  (1244248, 0, ...
 04865   432   NtContinue  (1244248, 0, ...
 04866   432   NtContinue  (1244248, 0, ...
 04867   432   NtContinue  (1244248, 0, ...
 04868   432   NtContinue  (1244248, 0, ...
 04869   432   NtContinue  (1244248, 0, ...
 04870   432   NtContinue  (1244248, 0, ...
 04871   432   NtContinue  (1244248, 0, ...
 04872   432   NtContinue  (1244252, 0, ...
 04873   432   NtContinue  (1244248, 0, ...
 04874   432   NtContinue  (1244248, 0, ...
 04875   432   NtContinue  (1244252, 0, ...
 04876   432   NtContinue  (1244248, 0, ...
 04877   432   NtContinue  (1244248, 0, ...
 04878   432   NtContinue  (1244248, 0, ...
 04879   432   NtContinue  (1244248, 0, ...
 04880   432   NtContinue  (1244248, 0, ...
 04881   432   NtContinue  (1244248, 0, ...
 04882   432   NtContinue  (1244248, 0, ...
 04883   432   NtContinue  (1244248, 0, ...
 04884   432   NtContinue  (1244248, 0, ...
 04885   432   NtContinue  (1244248, 0, ...
 04886   432   NtContinue  (1244248, 0, ...
 04887   432   NtContinue  (1244248, 0, ...
 04888   432   NtContinue  (1244248, 0, ...
 04889   432   NtContinue  (1244248, 0, ...
 04890   432   NtContinue  (1244248, 0, ...
 04891   432   NtContinue  (1244248, 0, ...
 04892   432   NtContinue  (1244248, 0, ...
 04893   432   NtContinue  (1244248, 0, ...
 04894   432   NtContinue  (1244248, 0, ...
 04895   432   NtContinue  (1244248, 0, ...
 04896   432   NtContinue  (1244248, 0, ...
 04897   432   NtContinue  (1244248, 0, ...
 04898   432   NtContinue  (1244248, 0, ...
 04899   432   NtContinue  (1244248, 0, ...
 04900   432   NtContinue  (1244248, 0, ...
 04901   432   NtContinue  (1244248, 0, ...
 04902   432   NtContinue  (1244248, 0, ...
 04903   432   NtContinue  (1244252, 0, ...
 04904   432   NtContinue  (1244248, 0, ...
 04905   432   NtContinue  (1244248, 0, ...
 04906   432   NtContinue  (1244252, 0, ...
 04907   432   NtContinue  (1244248, 0, ...
 04908   432   NtContinue  (1244248, 0, ...
 04909   432   NtContinue  (1244248, 0, ...
 04910   432   NtContinue  (1244248, 0, ...
 04911   432   NtContinue  (1244248, 0, ...
 04912   432   NtContinue  (1244248, 0, ...
 04913   432   NtContinue  (1244248, 0, ...
 04914   432   NtContinue  (1244248, 0, ...
 04915   432   NtContinue  (1244248, 0, ...
 04916   432   NtContinue  (1244248, 0, ...
 04917   432   NtContinue  (1244248, 0, ...
 04918   432   NtContinue  (1244248, 0, ...
 04919   432   NtContinue  (1244248, 0, ...
 04920   432   NtContinue  (1244248, 0, ...
 04921   432   NtContinue  (1244248, 0, ...
 04922   432   NtContinue  (1244248, 0, ...
 04923   432   NtContinue  (1244248, 0, ...
 04924   432   NtContinue  (1244248, 0, ...
 04925   432   NtContinue  (1244248, 0, ...
 04926   432   NtContinue  (1244248, 0, ...
 04927   432   NtContinue  (1244248, 0, ...
 04928   432   NtContinue  (1244248, 0, ...
 04929   432   NtContinue  (1244248, 0, ...
 04930   432   NtContinue  (1244248, 0, ...
 04931   432   NtContinue  (1244248, 0, ...
 04932   432   NtContinue  (1244248, 0, ...
 04933   432   NtContinue  (1244248, 0, ...
 04934   432   NtContinue  (1244248, 0, ...
 04935   432   NtContinue  (1244248, 0, ...
 04936   432   NtContinue  (1244248, 0, ...
 04937   432   NtContinue  (1244248, 0, ...
 04938   432   NtContinue  (1244248, 0, ...
 04939   432   NtContinue  (1244248, 0, ...
 04940   432   NtContinue  (1244248, 0, ...
 04941   432   NtContinue  (1244248, 0, ...
 04942   432   NtContinue  (1244252, 0, ...
 04943   432   NtContinue  (1244248, 0, ...
 04944   432   NtContinue  (1244248, 0, ...
 04945   432   NtContinue  (1244236, 0, ...
 04946   432   NtContinue  (1244216, 0, ...
 04947   432   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04948   432   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   432   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04950   432   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04951   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04952   432   NtReleaseMutant  (16, ...
 04953   432   NtContinue  (-136314744, 0, ...
 04952   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04954   432   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04955   432   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04956   432   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04957   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04958   432   NtReleaseMutant  (16, ...
 04959   432   NtContinue  (-136314744, 0, ...
 04958   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04960   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04961   432   NtReleaseMutant  (16, ...
 04962   432   NtContinue  (-136314744, 0, ...
 04961   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04963   432   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04964   432   NtReleaseMutant  (16, ...
 04965   432   NtContinue  (-136314744, 0, ...
 04964   432   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED