Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 26 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 45 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 47 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 12 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   472   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   472   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   472   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   472   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   472   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   472   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   472   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   472   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   472   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   472   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   472   NtClose  (12, ... ) == 0x0
 00014   472   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   472   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   472   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   472   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   472   NtClose  (16, ... ) == 0x0
 00021   472   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   472   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   472   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   472   NtClose  (16, ... ) == 0x0
 00026   472   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   472   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   472   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   472   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   472   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 468, 472, 1529, 0} "8@\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ... {28, 56, reply, 0, 468, 472, 1529, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 468, 472, 1529, 0} "8@\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ) == 0x0
 00032   472   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   472   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   472   NtClose  (16, ... ) == 0x0
 00036   472   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   472   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   472   NtClose  (28, ... ) == 0x0
 00041   472   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   472   NtClose  (28, ... ) == 0x0
 00045   472   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   472   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   472   NtClose  (28, ... ) == 0x0
 00049   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   472   NtClose  (28, ... ) == 0x0
 00052   472   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   472   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 468, 472, 1531, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ... {28, 56, reply, 0, 468, 472, 1531, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 468, 472, 1531, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ) == 0x0
 00056   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   472   NtClose  (28, ... ) == 0x0
 00062   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   472   NtClose  (28, ... ) == 0x0
 00065   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   472   NtClose  (28, ... ) == 0x0
 00068   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   472   NtClose  (28, ... ) == 0x0
 00071   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   472   NtClose  (28, ... ) == 0x0
 00080   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   472   NtClose  (28, ... ) == 0x0
 00083   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   472   NtClose  (28, ... ) == 0x0
 00086   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   472   NtClose  (28, ... ) == 0x0
 00095   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   472   NtClose  (28, ... ) == 0x0
 00098   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   472   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   472   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   472   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   472   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   472   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   472   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   472   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   472   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   472   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   472   NtClose  (40, ... ) == 0x0
 00115   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   472   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   472   NtClose  (40, ... ) == 0x0
 00119   472   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   472   NtClose  (36, ... ) == 0x0
 00121   472   NtClose  (28, ... ) == 0x0
 00122   472   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   472   NtClose  (32, ... ) == 0x0
 00124   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   472   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   472   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   472   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   472   NtClose  (32, ... ) == 0x0
 00132   472   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   472   NtClose  (28, ... ) == 0x0
 00134   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   472   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   472   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   472   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   472   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   472   NtClose  (28, ... ) == 0x0
 00146   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   472   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   472   NtClose  (28, ... ) == 0x0
 00149   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   472   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   472   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   472   NtClose  (28, ... ) == 0x0
 00153   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   472   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   472   NtClose  (28, ... ) == 0x0
 00156   472   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   472   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   472   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   472   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 468, 472, 1546, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ... {28, 56, reply, 0, 468, 472, 1546, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 468, 472, 1546, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ) == 0x0
 00161   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   472   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   472   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   472   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   472   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   472   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   472   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   472   NtClose  (-2147482020, ... ) == 0x0
 00169   472   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   472   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   472   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   472   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   472   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   472   NtClose  (-2147482020, ... ) == 0x0
 00175   472   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   472   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   472   NtClose  (-2147482020, ... ) == 0x0
 00178   472   NtQueryDefaultLocale  (0, -130971124, ... ) == 0x0
 00179   472   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   472   NtUserCallNoParam  (24, ... ) == 0x0
 00181   472   NtGdiCreateCompatibleDC  (0, ...
 00182   472   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   472   NtGdiCreateCompatibleDC  ... ) == 0x8010427
 00183   472   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   472   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   472   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0x9050429
 00186   472   NtGdiCreateSolidBrush  (0, 0, ...
 00187   472   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   472   NtGdiCreateSolidBrush  ... ) == 0xb100440
 00188   472   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   472   NtGdiCreateCompatibleDC  (0, ... ) == 0x801042d
 00190   472   NtGdiSelectBitmap  (134284333, 151323689, ... ) == 0x185000f
 00191   472   NtUserGetThreadDesktop  (472, 0, ... ) == 0x2c
 00192   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   472   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   472   NtClose  (52, ... ) == 0x0
 00195   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810dc017
 00197   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810dc01c
 00199   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810dc01e
 00201   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810d8002
 00203   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810dc018
 00205   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810dc01a
 00207   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810dc01d
 00209   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810dc026
 00211   472   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   472   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810dc019
 00213   472   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810dc020
 00214   472   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810dc022
 00215   472   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810dc023
 00216   472   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810dc024
 00217   472   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00218   472   NtAllocateVirtualMemory  (-1, 6074368, 0, 4096, 4096, 32, ... 6074368, 4096, ) == 0x0
 00217   472   NtUserRegisterClassExWOW  ... ) == 0x810dc025
 00219   472   NtCallbackReturn  (0, 0, 0, ...
 00220   472   NtGdiInit  (... ) == 0x1
 00221   472   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   472   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   472   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   472   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   472   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   472   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   472   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   472   NtClose  (52, ... ) == 0x0
 00230   472   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   472   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   472   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   472   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   472   NtClose  (52, ... ) == 0x0
 00236   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   472   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   472   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   472   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   472   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   472   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   472   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   472   NtClose  (52, ... ) == 0x0
 00246   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   472   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   472   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   472   NtClose  (52, ... ) == 0x0
 00250   472   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   472   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   472   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   472   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   472   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   472   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   472   NtClose  (56, ... ) == 0x0
 00258   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   472   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   472   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   472   NtClose  (56, ... ) == 0x0
 00263   472   NtQueryDefaultUILanguage  (1241756, ...
 00264   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   472   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   472   NtClose  (-2147482020, ... ) == 0x0
 00268   472   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   472   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   472   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   472   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   472   NtClose  (-2147482032, ... ) == 0x0
 00273   472   NtClose  (-2147482020, ... ) == 0x0
 00263   472   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   472   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   472   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   472   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   472   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   472   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   472   NtQueryDefaultUILanguage  (2013024600, ...
 00281   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   472   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   472   NtClose  (-2147482020, ... ) == 0x0
 00285   472   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   472   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   472   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   472   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   472   NtClose  (-2147482032, ... ) == 0x0
 00290   472   NtClose  (-2147482020, ... ) == 0x0
 00280   472   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   472   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   472   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   472   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   472   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   472   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 468, 472, 1547, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 468, 472, 1547, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 468, 472, 1547, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   472   NtClose  (56, ... ) == 0x0
 00297   472   NtClose  (60, ... ) == 0x0
 00298   472   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   472   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   472   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   472   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   472   NtClose  (56, ... ) == 0x0
 00314   472   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   472   NtClose  (64, ... ) == 0x0
 00316   472   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   472   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   472   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   472   NtClose  (64, ... ) == 0x0
 00321   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   472   NtClose  (56, ... ) == 0x0
 00323   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   472   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   472   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   472   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   472   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   472   NtQueryDefaultUILanguage  (1239368, ...
 00346   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   472   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   472   NtClose  (-2147482020, ... ) == 0x0
 00350   472   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   472   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   472   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   472   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   472   NtClose  (-2147482032, ... ) == 0x0
 00355   472   NtClose  (-2147482020, ... ) == 0x0
 00345   472   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   472   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   472   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   472   NtClose  (56, ... ) == 0x0
 00361   472   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   472   NtClose  (64, ... ) == 0x0
 00363   472   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   472   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   472   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   472   NtClose  (64, ... ) == 0x0
 00368   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   472   NtClose  (56, ... ) == 0x0
 00370   472   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   472   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   472   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   472   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   472   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   472   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   472   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 468, 472, 1548, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 468, 472, 1548, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 468, 472, 1548, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   472   NtClose  (56, ... ) == 0x0
 00378   472   NtClose  (64, ... ) == 0x0
 00379   472   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   472   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   472   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   472   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   472   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   472   NtUserGetDC  (0, ... ) == 0x1010050
 00385   472   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00386   472   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   472   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   472   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   472   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   472   NtClose  (64, ... ) == 0x0
 00391   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   472   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   472   NtClose  (64, ... ) == 0x0
 00395   472   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   472   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   472   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   472   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   472   NtClose  (56, ... ) == 0x0
 00400   472   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   472   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   472   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   472   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   472   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   472   NtClose  (68, ... ) == 0x0
 00407   472   NtClose  (56, ... ) == 0x0
 00408   472   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   472   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   472   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   472   NtClose  (56, ... ) == 0x0
 00413   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc03b
 00415   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc03d
 00416   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc03f
 00418   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc041
 00420   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc043
 00422   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc045
 00423   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc047
 00425   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc049
 00427   472   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04b
 00430   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04d
 00432   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04f
 00434   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc051
 00435   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc053
 00437   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc055
 00439   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc057
 00440   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc059
 00442   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05b
 00444   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05d
 00446   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05f
 00448   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc017
 00450   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc019
 00452   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc018
 00454   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc01a
 00456   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   472   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc01c
 00458   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc01e
 00460   472   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00461   472   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810dc01b
 00462   472   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00463   472   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810dc068
 00464   472   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00465   472   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc06a
 00466   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00467   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00468   472   NtClose  (56, ... ) == 0x0
 00469   472   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {468, 0}, ... 56, ) == 0x0
 00470   472   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00471   472   NtClose  (56, ... ) == 0x0
 00472   472   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00473   472   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00474   472   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00475   472   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00476   472   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00477   472   NtClose  (56, ... ) == 0x0
 00478   472   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00479   472   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00480   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00481   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00482   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ...
 00483   472   NtAllocateVirtualMemory  (-1, 6078464, 0, 4096, 4096, 32, ... 6078464, 4096, ) == 0x0
 00482   472   NtUserRegisterClassExWOW  ... ) == 0x810dc03b
 00484   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc03d
 00486   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc03f
 00489   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc041
 00492   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc043
 00495   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc045
 00497   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc047
 00500   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   472   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   472   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810dc049
 00503   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04b
 00506   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04d
 00509   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04f
 00512   472   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   472   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810dc051
 00514   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc053
 00517   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc055
 00520   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc057
 00521   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc059
 00524   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05b
 00527   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05d
 00530   472   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   472   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   472   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05f
 00533   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   472   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   472   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   472   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   472   NtTestAlert  (... ) == 0x0
 00554   472   NtContinue  (1244464, 1, ...
 00555   472   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   472   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   472   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   472   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   472   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   472   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   472   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   472   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   472   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   472   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   472   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   472   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   472   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   472   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   472   NtClose  (56, ... ) == 0x0
 00572   472   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   472   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   472   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   472   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   472   NtClose  (56, ... ) == 0x0
 00580   472   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   472   NtClose  (68, ... ) == 0x0
 00582   472   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   472   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   472   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   472   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   472   NtClose  (68, ... ) == 0x0
 00587   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   472   NtReleaseMutant  (16, ...
 00589   472   NtContinue  (-130973560, 0, ...
 00588   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   472   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   472   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   472   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   472   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   472   NtUserCallNoParam  (29, ...
 00595   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   472   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   472   NtClose  (68, ... ) == 0x0
 00599   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   472   NtClose  (56, ... ) == 0x0
 00601   472   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   472   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   472   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   472   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   472   NtClose  (56, ... ) == 0x0
 00607   472   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   472   NtClose  (68, ... ) == 0x0
 00609   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00610   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00611   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   472   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   472   NtClose  (68, ... ) == 0x0
 00615   472   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   472   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   472   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   472   NtClose  (56, ... ) == 0x0
 00619   472   NtClose  (68, ... ) == 0x0
 00620   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   472   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   472   NtClose  (68, ... ) == 0x0
 00624   472   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   472   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   472   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   472   NtClose  (56, ... ) == 0x0
 00628   472   NtClose  (68, ... ) == 0x0
 00629   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   472   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   472   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   472   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   472   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   472   NtUserGetGUIThreadInfo  (472, 1244344, ... ) == 0x1
 00636   472   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   472   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1579, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 468, 472, 1579, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1579, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   472   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1580, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 468, 472, 1580, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1580, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   472   NtUserCallNoParam  (29, ...
 00640   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   472   NtUserCallNoParam  ... ) == 0x0
 00641   472   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   472   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0xf0a0455
 00643   472   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0xb0a045c
 00644   472   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1581, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 468, 472, 1581, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 468, 472, 1581, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   472   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00647   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00648   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00649   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00650   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00651   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00652   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00653   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00654   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00655   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00656   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00657   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00658   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00659   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00660   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00661   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00662   472   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00663   472   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0x6100460
 00664   472   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00665   472   NtUserCallNoParam  (29, ...
 00666   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   472   NtUserCallNoParam  ... ) == 0x0
 00667   472   NtUserCallNoParam  (29, ...
 00668   472   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   472   NtUserCallNoParam  ... ) == 0x0
 00594   472   NtUserCallNoParam  ... ) == 0x1
 00669   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   472   NtReleaseMutant  (16, ...
 00671   472   NtContinue  (-130973560, 0, ...
 00670   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   472   NtReleaseMutant  (16, ...
 00674   472   NtContinue  (-130973560, 0, ...
 00673   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   472   NtReleaseMutant  (16, ...
 00677   472   NtContinue  (-130973560, 0, ...
 00676   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   472   NtReleaseMutant  (16, ...
 00680   472   NtContinue  (-130973560, 0, ...
 00679   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   472   NtReleaseMutant  (16, ...
 00683   472   NtContinue  (-130973560, 0, ...
 00682   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   472   NtReleaseMutant  (16, ...
 00686   472   NtContinue  (-130973560, 0, ...
 00685   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   472   NtReleaseMutant  (16, ...
 00689   472   NtContinue  (-130973560, 0, ...
 00688   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   472   NtReleaseMutant  (16, ...
 00692   472   NtContinue  (-130973560, 0, ...
 00691   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   472   NtReleaseMutant  (16, ...
 00695   472   NtContinue  (-130973560, 0, ...
 00694   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   472   NtReleaseMutant  (16, ...
 00698   472   NtContinue  (-130973560, 0, ...
 00697   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   472   NtReleaseMutant  (16, ...
 00701   472   NtContinue  (-130973560, 0, ...
 00700   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   472   NtReleaseMutant  (16, ...
 00704   472   NtContinue  (-130973560, 0, ...
 00703   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   472   NtReleaseMutant  (16, ...
 00707   472   NtContinue  (-130973560, 0, ...
 00706   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   472   NtReleaseMutant  (16, ...
 00710   472   NtContinue  (-130973560, 0, ...
 00709   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   472   NtReleaseMutant  (16, ...
 00713   472   NtContinue  (-130973560, 0, ...
 00712   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   472   NtReleaseMutant  (16, ...
 00716   472   NtContinue  (-130973560, 0, ...
 00715   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   472   NtReleaseMutant  (16, ...
 00719   472   NtContinue  (-130973560, 0, ...
 00718   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   472   NtReleaseMutant  (16, ...
 00722   472   NtContinue  (-130973560, 0, ...
 00721   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   472   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   472   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   472   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   472   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   472   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   472   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   472   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   472   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   472   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   472   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   472   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   472   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   472   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   472   NtClose  (88, ... ) == 0x0
 00741   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   472   NtClose  (88, ... ) == 0x0
 00746   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   472   NtClose  (88, ... ) == 0x0
 00751   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   472   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   472   NtClose  (88, ... ) == 0x0
 00757   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   472   NtClose  (88, ... ) == 0x0
 00762   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   472   NtClose  (88, ... ) == 0x0
 00767   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   472   NtClose  (88, ... ) == 0x0
 00772   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   472   NtClose  (88, ... ) == 0x0
 00777   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   472   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   472   NtClose  (88, ... ) == 0x0
 00783   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\324\1\0\0\330\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   472   NtClose  (88, ... ) == 0x0
 00788   472   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   472   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\324\1\0\0\330\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\324\1\0\0\330\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\324\1\0\0\330\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\324\1\0\0\330\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\324\1\0\0\330\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\324\1\0\0\330\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\324\1\0\0\330\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\324\1\0\0\330\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\324\1\0\0\330\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\324\1\0\0\330\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   472   NtClose  (88, ... ) == 0x0
 00793   472   NtClose  (84, ... ) == 0x0
 00794   472   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   472   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   472   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   472   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   472   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   472   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   472   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   472   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   472   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   472   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   472   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   472   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   472   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   472   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   472   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   472   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   472   NtClose  (96, ... ) == 0x0
 00817   472   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   472   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   472   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   472   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   472   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   472   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   472   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   472   NtClose  (96, ... ) == 0x0
 00831   472   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   472   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   472   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   472   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   472   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   472   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   472   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   472   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   472   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   472   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   472   NtClose  (96, ... ) == 0x0
 00846   472   NtClose  (92, ... ) == 0x0
 00847   472   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   472   NtClose  (72, ... ) == 0x0
 00849   472   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   472   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   472   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   472   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   472   NtClose  (72, ... ) == 0x0
 00854   472   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   472   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   472   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   472   NtAllocateVirtualMemory  (-1, 0, 0, 326, 4096, 64, ... 9502720, 4096, ) == 0x0
 00858   472   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00859   472   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00860   472   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00861   472   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00862   472   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00863   472   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00864   472   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00865   472   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00866   472   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00867   472   NtClose  (92, ... ) == 0x0
 00868   472   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00869   472   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00870   472   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00871   472   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00872   472   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00873   472   NtClose  (92, ... ) == 0x0
 00874   472   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00875   472   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00876   472   NtClose  (92, ... ) == 0x0
 00877   472   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00878   472   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00879   472   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00880   472   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00881   472   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00882   472   NtClose  (92, ... ) == 0x0
 00883   472   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00884   472   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00885   472   NtClose  (92, ... ) == 0x0
 00886   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00887   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00888   472   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00889   472   NtClose  (92, ... ) == 0x0
 00890   472   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00891   472   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00892   472   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00893   472   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00894   472   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00895   472   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00896   472   NtSetInformationFile  (-2147482808, -130973108, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   472   NtSetInformationFile  (-2147482808, -130972740, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00898   472   NtSetInformationFile  (-2147482808, -130972732, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00895   472   NtCreateKey  ... 100, 1, ) == 0x0
 00899   472   NtClose  (96, ... ) == 0x0
 00900   472   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00901   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00902   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00903   472   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00904   472   NtClose  (96, ... ) == 0x0
 00905   472   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00906   472   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00907   472   NtClose  (102, ... ) == 0x0
 00908   472   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00909   472   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00910   472   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00911   472   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00912   472   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00913   472   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00914   472   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00915   472   NtClose  (96, ... ) == 0x0
 00916   472   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00917   472   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00918   472   NtClose  (102, ... ) == 0x0
 00919   472   NtContinue  (1244308, 0, ...
 00920   472   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00921   472   NtContinue  (1244292, 0, ...
 00922   472   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00923   472   NtContinue  (1244292, 0, ...
 00924   472   NtContinue  (1244300, 0, ...
 00925   472   NtContinue  (1244288, 0, ...
 00926   472   NtContinue  (1244300, 0, ...
 00927   472   NtContinue  (1244308, 0, ...
 00928   472   NtContinue  (1244300, 0, ...
 00929   472   NtContinue  (1244300, 0, ...
 00930   472   NtContinue  (1244300, 0, ...
 00931   472   NtContinue  (1244300, 0, ...
 00932   472   NtContinue  (1244300, 0, ...
 00933   472   NtContinue  (1244300, 0, ...
 00934   472   NtContinue  (1244300, 0, ...
 00935   472   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00936   472   NtContinue  (1244308, 0, ...
 00937   472   NtContinue  (1244308, 0, ...
 00938   472   NtContinue  (1244308, 0, ...
 00939   472   NtContinue  (1244308, 0, ...
 00940   472   NtContinue  (1244308, 0, ...
 00941   472   NtContinue  (1244308, 0, ...
 00942   472   NtContinue  (1244308, 0, ...
 00943   472   NtContinue  (1244308, 0, ...
 00944   472   NtContinue  (1244308, 0, ...
 00945   472   NtContinue  (1244308, 0, ...
 00946   472   NtContinue  (1244308, 0, ...
 00947   472   NtContinue  (1244308, 0, ...
 00948   472   NtContinue  (1244308, 0, ...
 00949   472   NtContinue  (1244308, 0, ...
 00950   472   NtContinue  (1244308, 0, ...
 00951   472   NtContinue  (1244308, 0, ...
 00952   472   NtContinue  (1244308, 0, ...
 00953   472   NtContinue  (1244308, 0, ...
 00954   472   NtContinue  (1244308, 0, ...
 00955   472   NtContinue  (1244308, 0, ...
 00956   472   NtContinue  (1244308, 0, ...
 00957   472   NtContinue  (1244308, 0, ...
 00958   472   NtContinue  (1244308, 0, ...
 00959   472   NtContinue  (1244308, 0, ...
 00960   472   NtContinue  (1244308, 0, ...
 00961   472   NtContinue  (1244308, 0, ...
 00962   472   NtContinue  (1244308, 0, ...
 00963   472   NtContinue  (1244308, 0, ...
 00964   472   NtContinue  (1244308, 0, ...
 00965   472   NtContinue  (1244308, 0, ...
 00966   472   NtContinue  (1244308, 0, ...
 00967   472   NtContinue  (1244308, 0, ...
 00968   472   NtContinue  (1244308, 0, ...
 00969   472   NtContinue  (1244308, 0, ...
 00970   472   NtContinue  (1244308, 0, ...
 00971   472   NtContinue  (1244308, 0, ...
 00972   472   NtContinue  (1244308, 0, ...
 00973   472   NtContinue  (1244308, 0, ...
 00974   472   NtContinue  (1244308, 0, ...
 00975   472   NtContinue  (1244308, 0, ...
 00976   472   NtContinue  (1244308, 0, ...
 00977   472   NtContinue  (1244308, 0, ...
 00978   472   NtContinue  (1244308, 0, ...
 00979   472   NtContinue  (1244308, 0, ...
 00980   472   NtContinue  (1244308, 0, ...
 00981   472   NtContinue  (1244308, 0, ...
 00982   472   NtContinue  (1244308, 0, ...
 00983   472   NtContinue  (1244308, 0, ...
 00984   472   NtContinue  (1244308, 0, ...
 00985   472   NtContinue  (1244308, 0, ...
 00986   472   NtContinue  (1244308, 0, ...
 00987   472   NtContinue  (1244308, 0, ...
 00988   472   NtContinue  (1244308, 0, ...
 00989   472   NtContinue  (1244308, 0, ...
 00990   472   NtContinue  (1244308, 0, ...
 00991   472   NtContinue  (1244308, 0, ...
 00992   472   NtContinue  (1244308, 0, ...
 00993   472   NtContinue  (1244308, 0, ...
 00994   472   NtContinue  (1244308, 0, ...
 00995   472   NtContinue  (1244308, 0, ...
 00996   472   NtContinue  (1244308, 0, ...
 00997   472   NtContinue  (1244308, 0, ...
 00998   472   NtContinue  (1244308, 0, ...
 00999   472   NtContinue  (1244308, 0, ...
 01000   472   NtContinue  (1244308, 0, ...
 01001   472   NtContinue  (1244308, 0, ...
 01002   472   NtContinue  (1244308, 0, ...
 01003   472   NtContinue  (1244308, 0, ...
 01004   472   NtContinue  (1244308, 0, ...
 01005   472   NtContinue  (1244308, 0, ...
 01006   472   NtContinue  (1244308, 0, ...
 01007   472   NtContinue  (1244308, 0, ...
 01008   472   NtContinue  (1244308, 0, ...
 01009   472   NtContinue  (1244308, 0, ...
 01010   472   NtContinue  (1244308, 0, ...
 01011   472   NtContinue  (1244308, 0, ...
 01012   472   NtContinue  (1244308, 0, ...
 01013   472   NtContinue  (1244308, 0, ...
 01014   472   NtContinue  (1244308, 0, ...
 01015   472   NtContinue  (1244308, 0, ...
 01016   472   NtContinue  (1244308, 0, ...
 01017   472   NtContinue  (1244308, 0, ...
 01018   472   NtContinue  (1244308, 0, ...
 01019   472   NtContinue  (1244308, 0, ...
 01020   472   NtContinue  (1244308, 0, ...
 01021   472   NtContinue  (1244308, 0, ...
 01022   472   NtContinue  (1244308, 0, ...
 01023   472   NtContinue  (1244308, 0, ...
 01024   472   NtContinue  (1244308, 0, ...
 01025   472   NtContinue  (1244308, 0, ...
 01026   472   NtContinue  (1244308, 0, ...
 01027   472   NtContinue  (1244308, 0, ...
 01028   472   NtContinue  (1244308, 0, ...
 01029   472   NtContinue  (1244308, 0, ...
 01030   472   NtContinue  (1244308, 0, ...
 01031   472   NtContinue  (1244308, 0, ...
 01032   472   NtContinue  (1244308, 0, ...
 01033   472   NtContinue  (1244308, 0, ...
 01034   472   NtContinue  (1244308, 0, ...
 01035   472   NtContinue  (1244308, 0, ...
 01036   472   NtContinue  (1244308, 0, ...
 01037   472   NtContinue  (1244308, 0, ...
 01038   472   NtContinue  (1244308, 0, ...
 01039   472   NtContinue  (1244308, 0, ...
 01040   472   NtContinue  (1244308, 0, ...
 01041   472   NtContinue  (1244308, 0, ...
 01042   472   NtContinue  (1244308, 0, ...
 01043   472   NtContinue  (1244308, 0, ...
 01044   472   NtContinue  (1244308, 0, ...
 01045   472   NtContinue  (1244308, 0, ...
 01046   472   NtContinue  (1244308, 0, ...
 01047   472   NtContinue  (1244308, 0, ...
 01048   472   NtContinue  (1244308, 0, ...
 01049   472   NtContinue  (1244308, 0, ...
 01050   472   NtContinue  (1244308, 0, ...
 01051   472   NtContinue  (1244308, 0, ...
 01052   472   NtContinue  (1244308, 0, ...
 01053   472   NtContinue  (1244308, 0, ...
 01054   472   NtContinue  (1244308, 0, ...
 01055   472   NtContinue  (1244308, 0, ...
 01056   472   NtContinue  (1244308, 0, ...
 01057   472   NtContinue  (1244308, 0, ...
 01058   472   NtContinue  (1244308, 0, ...
 01059   472   NtContinue  (1244308, 0, ...
 01060   472   NtContinue  (1244308, 0, ...
 01061   472   NtContinue  (1244308, 0, ...
 01062   472   NtContinue  (1244308, 0, ...
 01063   472   NtContinue  (1244308, 0, ...
 01064   472   NtContinue  (1244308, 0, ...
 01065   472   NtContinue  (1244308, 0, ...
 01066   472   NtContinue  (1244308, 0, ...
 01067   472   NtContinue  (1244308, 0, ...
 01068   472   NtContinue  (1244308, 0, ...
 01069   472   NtContinue  (1244308, 0, ...
 01070   472   NtContinue  (1244308, 0, ...
 01071   472   NtContinue  (1244308, 0, ...
 01072   472   NtContinue  (1244308, 0, ...
 01073   472   NtContinue  (1244308, 0, ...
 01074   472   NtContinue  (1244308, 0, ...
 01075   472   NtContinue  (1244308, 0, ...
 01076   472   NtContinue  (1244308, 0, ...
 01077   472   NtContinue  (1244308, 0, ...
 01078   472   NtContinue  (1244308, 0, ...
 01079   472   NtContinue  (1244308, 0, ...
 01080   472   NtContinue  (1244308, 0, ...
 01081   472   NtContinue  (1244308, 0, ...
 01082   472   NtContinue  (1244308, 0, ...
 01083   472   NtContinue  (1244308, 0, ...
 01084   472   NtContinue  (1244308, 0, ...
 01085   472   NtContinue  (1244308, 0, ...
 01086   472   NtContinue  (1244308, 0, ...
 01087   472   NtContinue  (1244308, 0, ...
 01088   472   NtContinue  (1244308, 0, ...
 01089   472   NtContinue  (1244308, 0, ...
 01090   472   NtContinue  (1244308, 0, ...
 01091   472   NtContinue  (1244308, 0, ...
 01092   472   NtContinue  (1244308, 0, ...
 01093   472   NtContinue  (1244308, 0, ...
 01094   472   NtContinue  (1244308, 0, ...
 01095   472   NtContinue  (1244308, 0, ...
 01096   472   NtContinue  (1244308, 0, ...
 01097   472   NtContinue  (1244308, 0, ...
 01098   472   NtContinue  (1244308, 0, ...
 01099   472   NtContinue  (1244308, 0, ...
 01100   472   NtContinue  (1244308, 0, ...
 01101   472   NtContinue  (1244308, 0, ...
 01102   472   NtContinue  (1244308, 0, ...
 01103   472   NtContinue  (1244308, 0, ...
 01104   472   NtContinue  (1244308, 0, ...
 01105   472   NtContinue  (1244308, 0, ...
 01106   472   NtContinue  (1244308, 0, ...
 01107   472   NtContinue  (1244308, 0, ...
 01108   472   NtContinue  (1244308, 0, ...
 01109   472   NtContinue  (1244308, 0, ...
 01110   472   NtContinue  (1244308, 0, ...
 01111   472   NtContinue  (1244308, 0, ...
 01112   472   NtContinue  (1244308, 0, ...
 01113   472   NtContinue  (1244308, 0, ...
 01114   472   NtContinue  (1244308, 0, ...
 01115   472   NtContinue  (1244308, 0, ...
 01116   472   NtContinue  (1244308, 0, ...
 01117   472   NtContinue  (1244308, 0, ...
 01118   472   NtContinue  (1244308, 0, ...
 01119   472   NtContinue  (1244308, 0, ...
 01120   472   NtContinue  (1244308, 0, ...
 01121   472   NtContinue  (1244308, 0, ...
 01122   472   NtContinue  (1244308, 0, ...
 01123   472   NtContinue  (1244308, 0, ...
 01124   472   NtContinue  (1244308, 0, ...
 01125   472   NtContinue  (1244308, 0, ...
 01126   472   NtContinue  (1244308, 0, ...
 01127   472   NtContinue  (1244308, 0, ...
 01128   472   NtContinue  (1244308, 0, ...
 01129   472   NtContinue  (1244308, 0, ...
 01130   472   NtContinue  (1244308, 0, ...
 01131   472   NtContinue  (1244308, 0, ...
 01132   472   NtContinue  (1244308, 0, ...
 01133   472   NtContinue  (1244308, 0, ...
 01134   472   NtContinue  (1244308, 0, ...
 01135   472   NtContinue  (1244308, 0, ...
 01136   472   NtContinue  (1244308, 0, ...
 01137   472   NtContinue  (1244308, 0, ...
 01138   472   NtContinue  (1244308, 0, ...
 01139   472   NtContinue  (1244308, 0, ...
 01140   472   NtContinue  (1244308, 0, ...
 01141   472   NtContinue  (1244308, 0, ...
 01142   472   NtContinue  (1244308, 0, ...
 01143   472   NtContinue  (1244308, 0, ...
 01144   472   NtContinue  (1244308, 0, ...
 01145   472   NtContinue  (1244308, 0, ...
 01146   472   NtContinue  (1244308, 0, ...
 01147   472   NtContinue  (1244308, 0, ...
 01148   472   NtContinue  (1244308, 0, ...
 01149   472   NtContinue  (1244308, 0, ...
 01150   472   NtContinue  (1244308, 0, ...
 01151   472   NtContinue  (1244308, 0, ...
 01152   472   NtContinue  (1244308, 0, ...
 01153   472   NtContinue  (1244308, 0, ...
 01154   472   NtContinue  (1244308, 0, ...
 01155   472   NtContinue  (1244308, 0, ...
 01156   472   NtContinue  (1244308, 0, ...
 01157   472   NtContinue  (1244308, 0, ...
 01158   472   NtContinue  (1244308, 0, ...
 01159   472   NtContinue  (1244308, 0, ...
 01160   472   NtContinue  (1244308, 0, ...
 01161   472   NtContinue  (1244308, 0, ...
 01162   472   NtContinue  (1244308, 0, ...
 01163   472   NtContinue  (1244308, 0, ...
 01164   472   NtContinue  (1244308, 0, ...
 01165   472   NtContinue  (1244308, 0, ...
 01166   472   NtContinue  (1244308, 0, ...
 01167   472   NtContinue  (1244308, 0, ...
 01168   472   NtContinue  (1244308, 0, ...
 01169   472   NtContinue  (1244308, 0, ...
 01170   472   NtContinue  (1244308, 0, ...
 01171   472   NtContinue  (1244308, 0, ...
 01172   472   NtContinue  (1244308, 0, ...
 01173   472   NtContinue  (1244308, 0, ...
 01174   472   NtContinue  (1244308, 0, ...
 01175   472   NtContinue  (1244308, 0, ...
 01176   472   NtContinue  (1244308, 0, ...
 01177   472   NtContinue  (1244308, 0, ...
 01178   472   NtContinue  (1244308, 0, ...
 01179   472   NtContinue  (1244308, 0, ...
 01180   472   NtContinue  (1244308, 0, ...
 01181   472   NtContinue  (1244308, 0, ...
 01182   472   NtContinue  (1244308, 0, ...
 01183   472   NtContinue  (1244308, 0, ...
 01184   472   NtContinue  (1244308, 0, ...
 01185   472   NtContinue  (1244308, 0, ...
 01186   472   NtContinue  (1244308, 0, ...
 01187   472   NtContinue  (1244308, 0, ...
 01188   472   NtContinue  (1244308, 0, ...
 01189   472   NtContinue  (1244308, 0, ...
 01190   472   NtContinue  (1244308, 0, ...
 01191   472   NtContinue  (1244308, 0, ...
 01192   472   NtContinue  (1244308, 0, ...
 01193   472   NtContinue  (1244308, 0, ...
 01194   472   NtContinue  (1244308, 0, ...
 01195   472   NtContinue  (1244308, 0, ...
 01196   472   NtContinue  (1244308, 0, ...
 01197   472   NtContinue  (1244308, 0, ...
 01198   472   NtContinue  (1244308, 0, ...
 01199   472   NtContinue  (1244308, 0, ...
 01200   472   NtContinue  (1244308, 0, ...
 01201   472   NtContinue  (1244308, 0, ...
 01202   472   NtContinue  (1244308, 0, ...
 01203   472   NtContinue  (1244308, 0, ...
 01204   472   NtContinue  (1244308, 0, ...
 01205   472   NtContinue  (1244308, 0, ...
 01206   472   NtContinue  (1244308, 0, ...
 01207   472   NtContinue  (1244308, 0, ...
 01208   472   NtContinue  (1244308, 0, ...
 01209   472   NtContinue  (1244308, 0, ...
 01210   472   NtContinue  (1244308, 0, ...
 01211   472   NtContinue  (1244308, 0, ...
 01212   472   NtContinue  (1244308, 0, ...
 01213   472   NtContinue  (1244308, 0, ...
 01214   472   NtContinue  (1244308, 0, ...
 01215   472   NtContinue  (1244308, 0, ...
 01216   472   NtContinue  (1244308, 0, ...
 01217   472   NtContinue  (1244308, 0, ...
 01218   472   NtContinue  (1244308, 0, ...
 01219   472   NtContinue  (1244308, 0, ...
 01220   472   NtContinue  (1244308, 0, ...
 01221   472   NtContinue  (1244308, 0, ...
 01222   472   NtContinue  (1244308, 0, ...
 01223   472   NtContinue  (1244308, 0, ...
 01224   472   NtContinue  (1244308, 0, ...
 01225   472   NtContinue  (1244308, 0, ...
 01226   472   NtContinue  (1244308, 0, ...
 01227   472   NtContinue  (1244308, 0, ...
 01228   472   NtContinue  (1244308, 0, ...
 01229   472   NtContinue  (1244308, 0, ...
 01230   472   NtContinue  (1244308, 0, ...
 01231   472   NtContinue  (1244308, 0, ...
 01232   472   NtContinue  (1244308, 0, ...
 01233   472   NtContinue  (1244308, 0, ...
 01234   472   NtContinue  (1244308, 0, ...
 01235   472   NtContinue  (1244308, 0, ...
 01236   472   NtContinue  (1244308, 0, ...
 01237   472   NtContinue  (1244308, 0, ...
 01238   472   NtContinue  (1244308, 0, ...
 01239   472   NtContinue  (1244308, 0, ...
 01240   472   NtContinue  (1244308, 0, ...
 01241   472   NtContinue  (1244308, 0, ...
 01242   472   NtContinue  (1244308, 0, ...
 01243   472   NtContinue  (1244308, 0, ...
 01244   472   NtContinue  (1244308, 0, ...
 01245   472   NtContinue  (1244308, 0, ...
 01246   472   NtContinue  (1244308, 0, ...
 01247   472   NtContinue  (1244308, 0, ...
 01248   472   NtContinue  (1244308, 0, ...
 01249   472   NtContinue  (1244308, 0, ...
 01250   472   NtContinue  (1244308, 0, ...
 01251   472   NtContinue  (1244308, 0, ...
 01252   472   NtContinue  (1244308, 0, ...
 01253   472   NtContinue  (1244308, 0, ...
 01254   472   NtContinue  (1244308, 0, ...
 01255   472   NtContinue  (1244308, 0, ...
 01256   472   NtContinue  (1244308, 0, ...
 01257   472   NtContinue  (1244308, 0, ...
 01258   472   NtContinue  (1244308, 0, ...
 01259   472   NtContinue  (1244308, 0, ...
 01260   472   NtContinue  (1244308, 0, ...
 01261   472   NtContinue  (1244308, 0, ...
 01262   472   NtContinue  (1244308, 0, ...
 01263   472   NtContinue  (1244308, 0, ...
 01264   472   NtContinue  (1244308, 0, ...
 01265   472   NtContinue  (1244308, 0, ...
 01266   472   NtContinue  (1244308, 0, ...
 01267   472   NtContinue  (1244308, 0, ...
 01268   472   NtContinue  (1244308, 0, ...
 01269   472   NtContinue  (1244308, 0, ...
 01270   472   NtContinue  (1244308, 0, ...
 01271   472   NtContinue  (1244308, 0, ...
 01272   472   NtContinue  (1244308, 0, ...
 01273   472   NtContinue  (1244308, 0, ...
 01274   472   NtContinue  (1244308, 0, ...
 01275   472   NtContinue  (1244308, 0, ...
 01276   472   NtContinue  (1244308, 0, ...
 01277   472   NtContinue  (1244308, 0, ...
 01278   472   NtContinue  (1244308, 0, ...
 01279   472   NtContinue  (1244308, 0, ...
 01280   472   NtContinue  (1244308, 0, ...
 01281   472   NtContinue  (1244308, 0, ...
 01282   472   NtContinue  (1244308, 0, ...
 01283   472   NtContinue  (1244308, 0, ...
 01284   472   NtContinue  (1244308, 0, ...
 01285   472   NtContinue  (1244308, 0, ...
 01286   472   NtContinue  (1244308, 0, ...
 01287   472   NtContinue  (1244308, 0, ...
 01288   472   NtContinue  (1244308, 0, ...
 01289   472   NtContinue  (1244308, 0, ...
 01290   472   NtContinue  (1244308, 0, ...
 01291   472   NtContinue  (1244308, 0, ...
 01292   472   NtContinue  (1244308, 0, ...
 01293   472   NtContinue  (1244308, 0, ...
 01294   472   NtContinue  (1244308, 0, ...
 01295   472   NtContinue  (1244308, 0, ...
 01296   472   NtContinue  (1244308, 0, ...
 01297   472   NtContinue  (1244308, 0, ...
 01298   472   NtContinue  (1244308, 0, ...
 01299   472   NtContinue  (1244308, 0, ...
 01300   472   NtContinue  (1244308, 0, ...
 01301   472   NtContinue  (1244308, 0, ...
 01302   472   NtContinue  (1244308, 0, ...
 01303   472   NtContinue  (1244308, 0, ...
 01304   472   NtContinue  (1244308, 0, ...
 01305   472   NtContinue  (1244308, 0, ...
 01306   472   NtContinue  (1244308, 0, ...
 01307   472   NtContinue  (1244308, 0, ...
 01308   472   NtContinue  (1244308, 0, ...
 01309   472   NtContinue  (1244308, 0, ...
 01310   472   NtContinue  (1244308, 0, ...
 01311   472   NtContinue  (1244308, 0, ...
 01312   472   NtContinue  (1244308, 0, ...
 01313   472   NtContinue  (1244308, 0, ...
 01314   472   NtContinue  (1244308, 0, ...
 01315   472   NtContinue  (1244308, 0, ...
 01316   472   NtContinue  (1244308, 0, ...
 01317   472   NtContinue  (1244308, 0, ...
 01318   472   NtContinue  (1244308, 0, ...
 01319   472   NtContinue  (1244308, 0, ...
 01320   472   NtContinue  (1244308, 0, ...
 01321   472   NtContinue  (1244308, 0, ...
 01322   472   NtContinue  (1244308, 0, ...
 01323   472   NtContinue  (1244308, 0, ...
 01324   472   NtContinue  (1244308, 0, ...
 01325   472   NtContinue  (1244308, 0, ...
 01326   472   NtContinue  (1244308, 0, ...
 01327   472   NtContinue  (1244308, 0, ...
 01328   472   NtContinue  (1244308, 0, ...
 01329   472   NtContinue  (1244308, 0, ...
 01330   472   NtContinue  (1244308, 0, ...
 01331   472   NtContinue  (1244308, 0, ...
 01332   472   NtContinue  (1244308, 0, ...
 01333   472   NtContinue  (1244308, 0, ...
 01334   472   NtContinue  (1244308, 0, ...
 01335   472   NtContinue  (1244308, 0, ...
 01336   472   NtContinue  (1244308, 0, ...
 01337   472   NtContinue  (1244308, 0, ...
 01338   472   NtContinue  (1244308, 0, ...
 01339   472   NtContinue  (1244308, 0, ...
 01340   472   NtContinue  (1244308, 0, ...
 01341   472   NtContinue  (1244308, 0, ...
 01342   472   NtContinue  (1244308, 0, ...
 01343   472   NtContinue  (1244308, 0, ...
 01344   472   NtContinue  (1244308, 0, ...
 01345   472   NtContinue  (1244308, 0, ...
 01346   472   NtContinue  (1244308, 0, ...
 01347   472   NtContinue  (1244308, 0, ...
 01348   472   NtContinue  (1244308, 0, ...
 01349   472   NtContinue  (1244308, 0, ...
 01350   472   NtContinue  (1244308, 0, ...
 01351   472   NtContinue  (1244308, 0, ...
 01352   472   NtContinue  (1244308, 0, ...
 01353   472   NtContinue  (1244308, 0, ...
 01354   472   NtContinue  (1244308, 0, ...
 01355   472   NtContinue  (1244308, 0, ...
 01356   472   NtContinue  (1244308, 0, ...
 01357   472   NtContinue  (1244308, 0, ...
 01358   472   NtContinue  (1244308, 0, ...
 01359   472   NtContinue  (1244308, 0, ...
 01360   472   NtContinue  (1244308, 0, ...
 01361   472   NtContinue  (1244308, 0, ...
 01362   472   NtContinue  (1244308, 0, ...
 01363   472   NtContinue  (1244308, 0, ...
 01364   472   NtContinue  (1244308, 0, ...
 01365   472   NtContinue  (1244308, 0, ...
 01366   472   NtContinue  (1244308, 0, ...
 01367   472   NtContinue  (1244308, 0, ...
 01368   472   NtContinue  (1244308, 0, ...
 01369   472   NtContinue  (1244308, 0, ...
 01370   472   NtContinue  (1244308, 0, ...
 01371   472   NtContinue  (1244308, 0, ...
 01372   472   NtContinue  (1244308, 0, ...
 01373   472   NtContinue  (1244308, 0, ...
 01374   472   NtContinue  (1244308, 0, ...
 01375   472   NtContinue  (1244308, 0, ...
 01376   472   NtContinue  (1244308, 0, ...
 01377   472   NtContinue  (1244308, 0, ...
 01378   472   NtContinue  (1244308, 0, ...
 01379   472   NtContinue  (1244308, 0, ...
 01380   472   NtContinue  (1244308, 0, ...
 01381   472   NtContinue  (1244308, 0, ...
 01382   472   NtContinue  (1244308, 0, ...
 01383   472   NtContinue  (1244308, 0, ...
 01384   472   NtContinue  (1244308, 0, ...
 01385   472   NtContinue  (1244308, 0, ...
 01386   472   NtContinue  (1244308, 0, ...
 01387   472   NtContinue  (1244308, 0, ...
 01388   472   NtContinue  (1244308, 0, ...
 01389   472   NtContinue  (1244308, 0, ...
 01390   472   NtContinue  (1244308, 0, ...
 01391   472   NtContinue  (1244308, 0, ...
 01392   472   NtContinue  (1244308, 0, ...
 01393   472   NtContinue  (1244308, 0, ...
 01394   472   NtContinue  (1244308, 0, ...
 01395   472   NtContinue  (1244308, 0, ...
 01396   472   NtContinue  (1244308, 0, ...
 01397   472   NtContinue  (1244308, 0, ...
 01398   472   NtContinue  (1244308, 0, ...
 01399   472   NtContinue  (1244308, 0, ...
 01400   472   NtContinue  (1244308, 0, ...
 01401   472   NtContinue  (1244308, 0, ...
 01402   472   NtContinue  (1244308, 0, ...
 01403   472   NtContinue  (1244308, 0, ...
 01404   472   NtContinue  (1244308, 0, ...
 01405   472   NtContinue  (1244308, 0, ...
 01406   472   NtContinue  (1244308, 0, ...
 01407   472   NtContinue  (1244308, 0, ...
 01408   472   NtContinue  (1244308, 0, ...
 01409   472   NtContinue  (1244308, 0, ...
 01410   472   NtContinue  (1244308, 0, ...
 01411   472   NtContinue  (1244308, 0, ...
 01412   472   NtContinue  (1244308, 0, ...
 01413   472   NtContinue  (1244308, 0, ...
 01414   472   NtContinue  (1244308, 0, ...
 01415   472   NtContinue  (1244308, 0, ...
 01416   472   NtContinue  (1244308, 0, ...
 01417   472   NtContinue  (1244308, 0, ...
 01418   472   NtContinue  (1244308, 0, ...
 01419   472   NtContinue  (1244308, 0, ...
 01420   472   NtContinue  (1244308, 0, ...
 01421   472   NtContinue  (1244308, 0, ...
 01422   472   NtContinue  (1244308, 0, ...
 01423   472   NtContinue  (1244308, 0, ...
 01424   472   NtContinue  (1244308, 0, ...
 01425   472   NtContinue  (1244308, 0, ...
 01426   472   NtContinue  (1244308, 0, ...
 01427   472   NtContinue  (1244308, 0, ...
 01428   472   NtContinue  (1244308, 0, ...
 01429   472   NtContinue  (1244308, 0, ...
 01430   472   NtContinue  (1244308, 0, ...
 01431   472   NtContinue  (1244308, 0, ...
 01432   472   NtContinue  (1244308, 0, ...
 01433   472   NtContinue  (1244308, 0, ...
 01434   472   NtContinue  (1244308, 0, ...
 01435   472   NtContinue  (1244308, 0, ...
 01436   472   NtContinue  (1244308, 0, ...
 01437   472   NtContinue  (1244308, 0, ...
 01438   472   NtContinue  (1244308, 0, ...
 01439   472   NtContinue  (1244308, 0, ...
 01440   472   NtContinue  (1244308, 0, ...
 01441   472   NtContinue  (1244308, 0, ...
 01442   472   NtContinue  (1244308, 0, ...
 01443   472   NtContinue  (1244308, 0, ...
 01444   472   NtContinue  (1244308, 0, ...
 01445   472   NtContinue  (1244308, 0, ...
 01446   472   NtContinue  (1244308, 0, ...
 01447   472   NtContinue  (1244308, 0, ...
 01448   472   NtContinue  (1244308, 0, ...
 01449   472   NtContinue  (1244308, 0, ...
 01450   472   NtContinue  (1244308, 0, ...
 01451   472   NtContinue  (1244308, 0, ...
 01452   472   NtContinue  (1244308, 0, ...
 01453   472   NtContinue  (1244308, 0, ...
 01454   472   NtContinue  (1244308, 0, ...
 01455   472   NtContinue  (1244308, 0, ...
 01456   472   NtContinue  (1244308, 0, ...
 01457   472   NtContinue  (1244308, 0, ...
 01458   472   NtContinue  (1244308, 0, ...
 01459   472   NtContinue  (1244308, 0, ...
 01460   472   NtContinue  (1244308, 0, ...
 01461   472   NtContinue  (1244308, 0, ...
 01462   472   NtContinue  (1244308, 0, ...
 01463   472   NtContinue  (1244308, 0, ...
 01464   472   NtContinue  (1244308, 0, ...
 01465   472   NtContinue  (1244308, 0, ...
 01466   472   NtContinue  (1244308, 0, ...
 01467   472   NtContinue  (1244308, 0, ...
 01468   472   NtContinue  (1244308, 0, ...
 01469   472   NtContinue  (1244308, 0, ...
 01470   472   NtContinue  (1244308, 0, ...
 01471   472   NtContinue  (1244308, 0, ...
 01472   472   NtContinue  (1244308, 0, ...
 01473   472   NtContinue  (1244308, 0, ...
 01474   472   NtContinue  (1244308, 0, ...
 01475   472   NtContinue  (1244308, 0, ...
 01476   472   NtContinue  (1244308, 0, ...
 01477   472   NtContinue  (1244308, 0, ...
 01478   472   NtContinue  (1244308, 0, ...
 01479   472   NtContinue  (1244308, 0, ...
 01480   472   NtContinue  (1244308, 0, ...
 01481   472   NtContinue  (1244308, 0, ...
 01482   472   NtContinue  (1244308, 0, ...
 01483   472   NtContinue  (1244308, 0, ...
 01484   472   NtContinue  (1244308, 0, ...
 01485   472   NtContinue  (1244308, 0, ...
 01486   472   NtContinue  (1244308, 0, ...
 01487   472   NtContinue  (1244308, 0, ...
 01488   472   NtContinue  (1244308, 0, ...
 01489   472   NtContinue  (1244308, 0, ...
 01490   472   NtContinue  (1244308, 0, ...
 01491   472   NtContinue  (1244308, 0, ...
 01492   472   NtContinue  (1244308, 0, ...
 01493   472   NtContinue  (1244308, 0, ...
 01494   472   NtContinue  (1244308, 0, ...
 01495   472   NtContinue  (1244308, 0, ...
 01496   472   NtContinue  (1244308, 0, ...
 01497   472   NtContinue  (1244308, 0, ...
 01498   472   NtContinue  (1244308, 0, ...
 01499   472   NtContinue  (1244308, 0, ...
 01500   472   NtContinue  (1244308, 0, ...
 01501   472   NtContinue  (1244308, 0, ...
 01502   472   NtContinue  (1244308, 0, ...
 01503   472   NtContinue  (1244308, 0, ...
 01504   472   NtContinue  (1244308, 0, ...
 01505   472   NtContinue  (1244308, 0, ...
 01506   472   NtContinue  (1244308, 0, ...
 01507   472   NtContinue  (1244308, 0, ...
 01508   472   NtContinue  (1244308, 0, ...
 01509   472   NtContinue  (1244308, 0, ...
 01510   472   NtContinue  (1244308, 0, ...
 01511   472   NtContinue  (1244308, 0, ...
 01512   472   NtContinue  (1244308, 0, ...
 01513   472   NtContinue  (1244308, 0, ...
 01514   472   NtContinue  (1244308, 0, ...
 01515   472   NtContinue  (1244308, 0, ...
 01516   472   NtContinue  (1244308, 0, ...
 01517   472   NtContinue  (1244308, 0, ...
 01518   472   NtContinue  (1244308, 0, ...
 01519   472   NtContinue  (1244308, 0, ...
 01520   472   NtContinue  (1244308, 0, ...
 01521   472   NtContinue  (1244308, 0, ...
 01522   472   NtContinue  (1244308, 0, ...
 01523   472   NtContinue  (1244308, 0, ...
 01524   472   NtContinue  (1244308, 0, ...
 01525   472   NtContinue  (1244308, 0, ...
 01526   472   NtContinue  (1244308, 0, ...
 01527   472   NtContinue  (1244308, 0, ...
 01528   472   NtContinue  (1244308, 0, ...
 01529   472   NtContinue  (1244308, 0, ...
 01530   472   NtContinue  (1244308, 0, ...
 01531   472   NtContinue  (1244308, 0, ...
 01532   472   NtContinue  (1244308, 0, ...
 01533   472   NtContinue  (1244308, 0, ...
 01534   472   NtContinue  (1244308, 0, ...
 01535   472   NtContinue  (1244308, 0, ...
 01536   472   NtContinue  (1244308, 0, ...
 01537   472   NtContinue  (1244308, 0, ...
 01538   472   NtContinue  (1244308, 0, ...
 01539   472   NtContinue  (1244308, 0, ...
 01540   472   NtContinue  (1244308, 0, ...
 01541   472   NtContinue  (1244308, 0, ...
 01542   472   NtContinue  (1244308, 0, ...
 01543   472   NtContinue  (1244308, 0, ...
 01544   472   NtContinue  (1244308, 0, ...
 01545   472   NtContinue  (1244308, 0, ...
 01546   472   NtContinue  (1244308, 0, ...
 01547   472   NtContinue  (1244308, 0, ...
 01548   472   NtContinue  (1244308, 0, ...
 01549   472   NtContinue  (1244308, 0, ...
 01550   472   NtContinue  (1244308, 0, ...
 01551   472   NtContinue  (1244308, 0, ...
 01552   472   NtContinue  (1244308, 0, ...
 01553   472   NtContinue  (1244308, 0, ...
 01554   472   NtContinue  (1244308, 0, ...
 01555   472   NtContinue  (1244308, 0, ...
 01556   472   NtContinue  (1244308, 0, ...
 01557   472   NtContinue  (1244308, 0, ...
 01558   472   NtContinue  (1244308, 0, ...
 01559   472   NtContinue  (1244308, 0, ...
 01560   472   NtContinue  (1244308, 0, ...
 01561   472   NtContinue  (1244308, 0, ...
 01562   472   NtContinue  (1244308, 0, ...
 01563   472   NtContinue  (1244308, 0, ...
 01564   472   NtContinue  (1244308, 0, ...
 01565   472   NtContinue  (1244308, 0, ...
 01566   472   NtContinue  (1244308, 0, ...
 01567   472   NtContinue  (1244308, 0, ...
 01568   472   NtContinue  (1244308, 0, ...
 01569   472   NtContinue  (1244308, 0, ...
 01570   472   NtContinue  (1244308, 0, ...
 01571   472   NtContinue  (1244308, 0, ...
 01572   472   NtContinue  (1244308, 0, ...
 01573   472   NtContinue  (1244308, 0, ...
 01574   472   NtContinue  (1244308, 0, ...
 01575   472   NtContinue  (1244308, 0, ...
 01576   472   NtContinue  (1244308, 0, ...
 01577   472   NtContinue  (1244308, 0, ...
 01578   472   NtContinue  (1244308, 0, ...
 01579   472   NtContinue  (1244308, 0, ...
 01580   472   NtContinue  (1244308, 0, ...
 01581   472   NtContinue  (1244308, 0, ...
 01582   472   NtContinue  (1244308, 0, ...
 01583   472   NtContinue  (1244308, 0, ...
 01584   472   NtContinue  (1244308, 0, ...
 01585   472   NtContinue  (1244308, 0, ...
 01586   472   NtContinue  (1244308, 0, ...
 01587   472   NtContinue  (1244308, 0, ...
 01588   472   NtContinue  (1244308, 0, ...
 01589   472   NtContinue  (1244308, 0, ...
 01590   472   NtContinue  (1244308, 0, ...
 01591   472   NtContinue  (1244308, 0, ...
 01592   472   NtContinue  (1244308, 0, ...
 01593   472   NtContinue  (1244308, 0, ...
 01594   472   NtContinue  (1244308, 0, ...
 01595   472   NtContinue  (1244308, 0, ...
 01596   472   NtContinue  (1244308, 0, ...
 01597   472   NtContinue  (1244308, 0, ...
 01598   472   NtContinue  (1244308, 0, ...
 01599   472   NtContinue  (1244308, 0, ...
 01600   472   NtContinue  (1244308, 0, ...
 01601   472   NtContinue  (1244308, 0, ...
 01602   472   NtContinue  (1244308, 0, ...
 01603   472   NtContinue  (1244308, 0, ...
 01604   472   NtContinue  (1244308, 0, ...
 01605   472   NtContinue  (1244308, 0, ...
 01606   472   NtContinue  (1244308, 0, ...
 01607   472   NtContinue  (1244308, 0, ...
 01608   472   NtContinue  (1244308, 0, ...
 01609   472   NtContinue  (1244308, 0, ...
 01610   472   NtContinue  (1244308, 0, ...
 01611   472   NtContinue  (1244308, 0, ...
 01612   472   NtContinue  (1244308, 0, ...
 01613   472   NtContinue  (1244308, 0, ...
 01614   472   NtContinue  (1244308, 0, ...
 01615   472   NtContinue  (1244308, 0, ...
 01616   472   NtContinue  (1244308, 0, ...
 01617   472   NtContinue  (1244308, 0, ...
 01618   472   NtContinue  (1244308, 0, ...
 01619   472   NtContinue  (1244308, 0, ...
 01620   472   NtContinue  (1244308, 0, ...
 01621   472   NtContinue  (1244308, 0, ...
 01622   472   NtContinue  (1244308, 0, ...
 01623   472   NtContinue  (1244308, 0, ...
 01624   472   NtContinue  (1244308, 0, ...
 01625   472   NtContinue  (1244308, 0, ...
 01626   472   NtContinue  (1244308, 0, ...
 01627   472   NtContinue  (1244308, 0, ...
 01628   472   NtContinue  (1244308, 0, ...
 01629   472   NtContinue  (1244308, 0, ...
 01630   472   NtContinue  (1244308, 0, ...
 01631   472   NtContinue  (1244308, 0, ...
 01632   472   NtContinue  (1244308, 0, ...
 01633   472   NtContinue  (1244308, 0, ...
 01634   472   NtContinue  (1244308, 0, ...
 01635   472   NtContinue  (1244308, 0, ...
 01636   472   NtContinue  (1244308, 0, ...
 01637   472   NtContinue  (1244308, 0, ...
 01638   472   NtContinue  (1244308, 0, ...
 01639   472   NtContinue  (1244308, 0, ...
 01640   472   NtContinue  (1244308, 0, ...
 01641   472   NtContinue  (1244308, 0, ...
 01642   472   NtContinue  (1244308, 0, ...
 01643   472   NtContinue  (1244308, 0, ...
 01644   472   NtContinue  (1244308, 0, ...
 01645   472   NtContinue  (1244308, 0, ...
 01646   472   NtContinue  (1244308, 0, ...
 01647   472   NtContinue  (1244308, 0, ...
 01648   472   NtContinue  (1244308, 0, ...
 01649   472   NtContinue  (1244308, 0, ...
 01650   472   NtContinue  (1244308, 0, ...
 01651   472   NtContinue  (1244308, 0, ...
 01652   472   NtContinue  (1244308, 0, ...
 01653   472   NtContinue  (1244308, 0, ...
 01654   472   NtContinue  (1244308, 0, ...
 01655   472   NtContinue  (1244308, 0, ...
 01656   472   NtContinue  (1244308, 0, ...
 01657   472   NtContinue  (1244308, 0, ...
 01658   472   NtContinue  (1244308, 0, ...
 01659   472   NtContinue  (1244308, 0, ...
 01660   472   NtContinue  (1244308, 0, ...
 01661   472   NtContinue  (1244308, 0, ...
 01662   472   NtContinue  (1244308, 0, ...
 01663   472   NtContinue  (1244308, 0, ...
 01664   472   NtContinue  (1244308, 0, ...
 01665   472   NtContinue  (1244308, 0, ...
 01666   472   NtContinue  (1244308, 0, ...
 01667   472   NtContinue  (1244308, 0, ...
 01668   472   NtContinue  (1244308, 0, ...
 01669   472   NtContinue  (1244308, 0, ...
 01670   472   NtContinue  (1244308, 0, ...
 01671   472   NtContinue  (1244308, 0, ...
 01672   472   NtContinue  (1244308, 0, ...
 01673   472   NtContinue  (1244308, 0, ...
 01674   472   NtContinue  (1244308, 0, ...
 01675   472   NtContinue  (1244308, 0, ...
 01676   472   NtContinue  (1244308, 0, ...
 01677   472   NtContinue  (1244308, 0, ...
 01678   472   NtContinue  (1244308, 0, ...
 01679   472   NtContinue  (1244308, 0, ...
 01680   472   NtContinue  (1244308, 0, ...
 01681   472   NtContinue  (1244308, 0, ...
 01682   472   NtContinue  (1244308, 0, ...
 01683   472   NtContinue  (1244308, 0, ...
 01684   472   NtContinue  (1244308, 0, ...
 01685   472   NtContinue  (1244308, 0, ...
 01686   472   NtContinue  (1244308, 0, ...
 01687   472   NtContinue  (1244308, 0, ...
 01688   472   NtContinue  (1244308, 0, ...
 01689   472   NtContinue  (1244308, 0, ...
 01690   472   NtContinue  (1244308, 0, ...
 01691   472   NtContinue  (1244308, 0, ...
 01692   472   NtContinue  (1244308, 0, ...
 01693   472   NtContinue  (1244308, 0, ...
 01694   472   NtContinue  (1244308, 0, ...
 01695   472   NtContinue  (1244308, 0, ...
 01696   472   NtContinue  (1244308, 0, ...
 01697   472   NtContinue  (1244308, 0, ...
 01698   472   NtContinue  (1244308, 0, ...
 01699   472   NtContinue  (1244308, 0, ...
 01700   472   NtContinue  (1244308, 0, ...
 01701   472   NtContinue  (1244308, 0, ...
 01702   472   NtContinue  (1244308, 0, ...
 01703   472   NtContinue  (1244308, 0, ...
 01704   472   NtContinue  (1244308, 0, ...
 01705   472   NtContinue  (1244308, 0, ...
 01706   472   NtContinue  (1244308, 0, ...
 01707   472   NtContinue  (1244308, 0, ...
 01708   472   NtContinue  (1244308, 0, ...
 01709   472   NtContinue  (1244308, 0, ...
 01710   472   NtContinue  (1244308, 0, ...
 01711   472   NtContinue  (1244308, 0, ...
 01712   472   NtContinue  (1244308, 0, ...
 01713   472   NtContinue  (1244308, 0, ...
 01714   472   NtContinue  (1244308, 0, ...
 01715   472   NtContinue  (1244308, 0, ...
 01716   472   NtContinue  (1244308, 0, ...
 01717   472   NtContinue  (1244308, 0, ...
 01718   472   NtContinue  (1244308, 0, ...
 01719   472   NtContinue  (1244308, 0, ...
 01720   472   NtContinue  (1244308, 0, ...
 01721   472   NtContinue  (1244308, 0, ...
 01722   472   NtContinue  (1244308, 0, ...
 01723   472   NtContinue  (1244308, 0, ...
 01724   472   NtContinue  (1244308, 0, ...
 01725   472   NtContinue  (1244308, 0, ...
 01726   472   NtContinue  (1244308, 0, ...
 01727   472   NtContinue  (1244308, 0, ...
 01728   472   NtContinue  (1244308, 0, ...
 01729   472   NtContinue  (1244308, 0, ...
 01730   472   NtContinue  (1244308, 0, ...
 01731   472   NtContinue  (1244308, 0, ...
 01732   472   NtContinue  (1244308, 0, ...
 01733   472   NtContinue  (1244308, 0, ...
 01734   472   NtContinue  (1244308, 0, ...
 01735   472   NtContinue  (1244308, 0, ...
 01736   472   NtContinue  (1244308, 0, ...
 01737   472   NtContinue  (1244308, 0, ...
 01738   472   NtContinue  (1244308, 0, ...
 01739   472   NtContinue  (1244308, 0, ...
 01740   472   NtContinue  (1244308, 0, ...
 01741   472   NtContinue  (1244308, 0, ...
 01742   472   NtContinue  (1244308, 0, ...
 01743   472   NtContinue  (1244308, 0, ...
 01744   472   NtContinue  (1244308, 0, ...
 01745   472   NtContinue  (1244308, 0, ...
 01746   472   NtContinue  (1244308, 0, ...
 01747   472   NtContinue  (1244308, 0, ...
 01748   472   NtContinue  (1244308, 0, ...
 01749   472   NtContinue  (1244308, 0, ...
 01750   472   NtContinue  (1244308, 0, ...
 01751   472   NtContinue  (1244308, 0, ...
 01752   472   NtContinue  (1244308, 0, ...
 01753   472   NtContinue  (1244308, 0, ...
 01754   472   NtContinue  (1244308, 0, ...
 01755   472   NtContinue  (1244308, 0, ...
 01756   472   NtContinue  (1244308, 0, ...
 01757   472   NtContinue  (1244308, 0, ...
 01758   472   NtContinue  (1244308, 0, ...
 01759   472   NtContinue  (1244308, 0, ...
 01760   472   NtContinue  (1244308, 0, ...
 01761   472   NtContinue  (1244308, 0, ...
 01762   472   NtContinue  (1244308, 0, ...
 01763   472   NtContinue  (1244308, 0, ...
 01764   472   NtContinue  (1244308, 0, ...
 01765   472   NtContinue  (1244308, 0, ...
 01766   472   NtContinue  (1244308, 0, ...
 01767   472   NtContinue  (1244308, 0, ...
 01768   472   NtContinue  (1244308, 0, ...
 01769   472   NtContinue  (1244308, 0, ...
 01770   472   NtContinue  (1244308, 0, ...
 01771   472   NtContinue  (1244308, 0, ...
 01772   472   NtContinue  (1244308, 0, ...
 01773   472   NtContinue  (1244308, 0, ...
 01774   472   NtContinue  (1244308, 0, ...
 01775   472   NtContinue  (1244308, 0, ...
 01776   472   NtContinue  (1244308, 0, ...
 01777   472   NtContinue  (1244308, 0, ...
 01778   472   NtContinue  (1244308, 0, ...
 01779   472   NtContinue  (1244308, 0, ...
 01780   472   NtContinue  (1244308, 0, ...
 01781   472   NtContinue  (1244308, 0, ...
 01782   472   NtContinue  (1244308, 0, ...
 01783   472   NtContinue  (1244308, 0, ...
 01784   472   NtContinue  (1244308, 0, ...
 01785   472   NtContinue  (1244308, 0, ...
 01786   472   NtContinue  (1244308, 0, ...
 01787   472   NtContinue  (1244308, 0, ...
 01788   472   NtContinue  (1244308, 0, ...
 01789   472   NtContinue  (1244308, 0, ...
 01790   472   NtContinue  (1244308, 0, ...
 01791   472   NtContinue  (1244308, 0, ...
 01792   472   NtContinue  (1244308, 0, ...
 01793   472   NtContinue  (1244308, 0, ...
 01794   472   NtContinue  (1244308, 0, ...
 01795   472   NtContinue  (1244308, 0, ...
 01796   472   NtContinue  (1244308, 0, ...
 01797   472   NtContinue  (1244308, 0, ...
 01798   472   NtContinue  (1244308, 0, ...
 01799   472   NtContinue  (1244308, 0, ...
 01800   472   NtContinue  (1244308, 0, ...
 01801   472   NtContinue  (1244308, 0, ...
 01802   472   NtContinue  (1244308, 0, ...
 01803   472   NtContinue  (1244308, 0, ...
 01804   472   NtContinue  (1244308, 0, ...
 01805   472   NtContinue  (1244308, 0, ...
 01806   472   NtContinue  (1244308, 0, ...
 01807   472   NtContinue  (1244308, 0, ...
 01808   472   NtContinue  (1244308, 0, ...
 01809   472   NtContinue  (1244308, 0, ...
 01810   472   NtContinue  (1244308, 0, ...
 01811   472   NtContinue  (1244308, 0, ...
 01812   472   NtContinue  (1244308, 0, ...
 01813   472   NtContinue  (1244308, 0, ...
 01814   472   NtContinue  (1244308, 0, ...
 01815   472   NtContinue  (1244308, 0, ...
 01816   472   NtContinue  (1244308, 0, ...
 01817   472   NtContinue  (1244308, 0, ...
 01818   472   NtContinue  (1244308, 0, ...
 01819   472   NtContinue  (1244308, 0, ...
 01820   472   NtContinue  (1244308, 0, ...
 01821   472   NtContinue  (1244308, 0, ...
 01822   472   NtContinue  (1244308, 0, ...
 01823   472   NtContinue  (1244308, 0, ...
 01824   472   NtContinue  (1244308, 0, ...
 01825   472   NtContinue  (1244308, 0, ...
 01826   472   NtContinue  (1244308, 0, ...
 01827   472   NtContinue  (1244308, 0, ...
 01828   472   NtContinue  (1244308, 0, ...
 01829   472   NtContinue  (1244308, 0, ...
 01830   472   NtContinue  (1244308, 0, ...
 01831   472   NtContinue  (1244308, 0, ...
 01832   472   NtContinue  (1244308, 0, ...
 01833   472   NtContinue  (1244308, 0, ...
 01834   472   NtContinue  (1244308, 0, ...
 01835   472   NtContinue  (1244308, 0, ...
 01836   472   NtContinue  (1244308, 0, ...
 01837   472   NtContinue  (1244308, 0, ...
 01838   472   NtContinue  (1244308, 0, ...
 01839   472   NtContinue  (1244308, 0, ...
 01840   472   NtContinue  (1244308, 0, ...
 01841   472   NtContinue  (1244308, 0, ...
 01842   472   NtContinue  (1244308, 0, ...
 01843   472   NtContinue  (1244308, 0, ...
 01844   472   NtContinue  (1244308, 0, ...
 01845   472   NtContinue  (1244308, 0, ...
 01846   472   NtContinue  (1244308, 0, ...
 01847   472   NtContinue  (1244308, 0, ...
 01848   472   NtContinue  (1244308, 0, ...
 01849   472   NtContinue  (1244308, 0, ...
 01850   472   NtContinue  (1244308, 0, ...
 01851   472   NtContinue  (1244308, 0, ...
 01852   472   NtContinue  (1244308, 0, ...
 01853   472   NtContinue  (1244308, 0, ...
 01854   472   NtContinue  (1244308, 0, ...
 01855   472   NtContinue  (1244308, 0, ...
 01856   472   NtContinue  (1244308, 0, ...
 01857   472   NtContinue  (1244308, 0, ...
 01858   472   NtContinue  (1244308, 0, ...
 01859   472   NtContinue  (1244308, 0, ...
 01860   472   NtContinue  (1244308, 0, ...
 01861   472   NtContinue  (1244308, 0, ...
 01862   472   NtContinue  (1244308, 0, ...
 01863   472   NtContinue  (1244308, 0, ...
 01864   472   NtContinue  (1244308, 0, ...
 01865   472   NtContinue  (1244308, 0, ...
 01866   472   NtContinue  (1244308, 0, ...
 01867   472   NtContinue  (1244308, 0, ...
 01868   472   NtContinue  (1244308, 0, ...
 01869   472   NtContinue  (1244308, 0, ...
 01870   472   NtContinue  (1244308, 0, ...
 01871   472   NtContinue  (1244308, 0, ...
 01872   472   NtContinue  (1244308, 0, ...
 01873   472   NtContinue  (1244308, 0, ...
 01874   472   NtContinue  (1244308, 0, ...
 01875   472   NtContinue  (1244308, 0, ...
 01876   472   NtContinue  (1244308, 0, ...
 01877   472   NtContinue  (1244308, 0, ...
 01878   472   NtContinue  (1244308, 0, ...
 01879   472   NtContinue  (1244308, 0, ...
 01880   472   NtContinue  (1244308, 0, ...
 01881   472   NtContinue  (1244308, 0, ...
 01882   472   NtContinue  (1244308, 0, ...
 01883   472   NtContinue  (1244308, 0, ...
 01884   472   NtContinue  (1244308, 0, ...
 01885   472   NtContinue  (1244308, 0, ...
 01886   472   NtContinue  (1244308, 0, ...
 01887   472   NtContinue  (1244308, 0, ...
 01888   472   NtContinue  (1244308, 0, ...
 01889   472   NtContinue  (1244308, 0, ...
 01890   472   NtContinue  (1244308, 0, ...
 01891   472   NtContinue  (1244308, 0, ...
 01892   472   NtContinue  (1244308, 0, ...
 01893   472   NtContinue  (1244308, 0, ...
 01894   472   NtContinue  (1244308, 0, ...
 01895   472   NtContinue  (1244308, 0, ...
 01896   472   NtContinue  (1244308, 0, ...
 01897   472   NtContinue  (1244308, 0, ...
 01898   472   NtContinue  (1244308, 0, ...
 01899   472   NtContinue  (1244308, 0, ...
 01900   472   NtContinue  (1244308, 0, ...
 01901   472   NtContinue  (1244308, 0, ...
 01902   472   NtContinue  (1244308, 0, ...
 01903   472   NtContinue  (1244308, 0, ...
 01904   472   NtContinue  (1244308, 0, ...
 01905   472   NtContinue  (1244308, 0, ...
 01906   472   NtContinue  (1244308, 0, ...
 01907   472   NtContinue  (1244308, 0, ...
 01908   472   NtContinue  (1244308, 0, ...
 01909   472   NtContinue  (1244308, 0, ...
 01910   472   NtContinue  (1244308, 0, ...
 01911   472   NtContinue  (1244308, 0, ...
 01912   472   NtContinue  (1244308, 0, ...
 01913   472   NtContinue  (1244308, 0, ...
 01914   472   NtContinue  (1244308, 0, ...
 01915   472   NtContinue  (1244308, 0, ...
 01916   472   NtContinue  (1244308, 0, ...
 01917   472   NtContinue  (1244308, 0, ...
 01918   472   NtContinue  (1244308, 0, ...
 01919   472   NtContinue  (1244308, 0, ...
 01920   472   NtContinue  (1244308, 0, ...
 01921   472   NtContinue  (1244308, 0, ...
 01922   472   NtContinue  (1244308, 0, ...
 01923   472   NtContinue  (1244308, 0, ...
 01924   472   NtContinue  (1244308, 0, ...
 01925   472   NtContinue  (1244308, 0, ...
 01926   472   NtContinue  (1244308, 0, ...
 01927   472   NtContinue  (1244308, 0, ...
 01928   472   NtContinue  (1244308, 0, ...
 01929   472   NtContinue  (1244308, 0, ...
 01930   472   NtContinue  (1244308, 0, ...
 01931   472   NtContinue  (1244308, 0, ...
 01932   472   NtContinue  (1244308, 0, ...
 01933   472   NtContinue  (1244308, 0, ...
 01934   472   NtContinue  (1244308, 0, ...
 01935   472   NtContinue  (1244308, 0, ...
 01936   472   NtContinue  (1244308, 0, ...
 01937   472   NtContinue  (1244308, 0, ...
 01938   472   NtContinue  (1244308, 0, ...
 01939   472   NtContinue  (1244308, 0, ...
 01940   472   NtContinue  (1244308, 0, ...
 01941   472   NtContinue  (1244308, 0, ...
 01942   472   NtContinue  (1244308, 0, ...
 01943   472   NtContinue  (1244308, 0, ...
 01944   472   NtContinue  (1244308, 0, ...
 01945   472   NtContinue  (1244308, 0, ...
 01946   472   NtContinue  (1244308, 0, ...
 01947   472   NtContinue  (1244308, 0, ...
 01948   472   NtContinue  (1244308, 0, ...
 01949   472   NtContinue  (1244308, 0, ...
 01950   472   NtContinue  (1244308, 0, ...
 01951   472   NtContinue  (1244308, 0, ...
 01952   472   NtContinue  (1244308, 0, ...
 01953   472   NtContinue  (1244308, 0, ...
 01954   472   NtContinue  (1244308, 0, ...
 01955   472   NtContinue  (1244308, 0, ...
 01956   472   NtContinue  (1244308, 0, ...
 01957   472   NtContinue  (1244308, 0, ...
 01958   472   NtContinue  (1244308, 0, ...
 01959   472   NtContinue  (1244308, 0, ...
 01960   472   NtContinue  (1244308, 0, ...
 01961   472   NtContinue  (1244308, 0, ...
 01962   472   NtContinue  (1244308, 0, ...
 01963   472   NtContinue  (1244308, 0, ...
 01964   472   NtContinue  (1244308, 0, ...
 01965   472   NtContinue  (1244308, 0, ...
 01966   472   NtContinue  (1244308, 0, ...
 01967   472   NtContinue  (1244308, 0, ...
 01968   472   NtContinue  (1244308, 0, ...
 01969   472   NtContinue  (1244308, 0, ...
 01970   472   NtContinue  (1244308, 0, ...
 01971   472   NtContinue  (1244308, 0, ...
 01972   472   NtContinue  (1244308, 0, ...
 01973   472   NtContinue  (1244308, 0, ...
 01974   472   NtContinue  (1244308, 0, ...
 01975   472   NtContinue  (1244308, 0, ...
 01976   472   NtContinue  (1244308, 0, ...
 01977   472   NtContinue  (1244308, 0, ...
 01978   472   NtContinue  (1244308, 0, ...
 01979   472   NtContinue  (1244308, 0, ...
 01980   472   NtContinue  (1244308, 0, ...
 01981   472   NtContinue  (1244308, 0, ...
 01982   472   NtContinue  (1244308, 0, ...
 01983   472   NtContinue  (1244308, 0, ...
 01984   472   NtContinue  (1244308, 0, ...
 01985   472   NtContinue  (1244308, 0, ...
 01986   472   NtContinue  (1244308, 0, ...
 01987   472   NtContinue  (1244308, 0, ...
 01988   472   NtContinue  (1244308, 0, ...
 01989   472   NtContinue  (1244308, 0, ...
 01990   472   NtContinue  (1244308, 0, ...
 01991   472   NtContinue  (1244308, 0, ...
 01992   472   NtContinue  (1244308, 0, ...
 01993   472   NtContinue  (1244308, 0, ...
 01994   472   NtContinue  (1244308, 0, ...
 01995   472   NtContinue  (1244308, 0, ...
 01996   472   NtContinue  (1244308, 0, ...
 01997   472   NtContinue  (1244308, 0, ...
 01998   472   NtContinue  (1244308, 0, ...
 01999   472   NtContinue  (1244308, 0, ...
 02000   472   NtContinue  (1244308, 0, ...
 02001   472   NtContinue  (1244308, 0, ...
 02002   472   NtContinue  (1244308, 0, ...
 02003   472   NtContinue  (1244308, 0, ...
 02004   472   NtContinue  (1244308, 0, ...
 02005   472   NtContinue  (1244308, 0, ...
 02006   472   NtContinue  (1244308, 0, ...
 02007   472   NtContinue  (1244308, 0, ...
 02008   472   NtContinue  (1244308, 0, ...
 02009   472   NtContinue  (1244308, 0, ...
 02010   472   NtContinue  (1244308, 0, ...
 02011   472   NtContinue  (1244308, 0, ...
 02012   472   NtContinue  (1244308, 0, ...
 02013   472   NtContinue  (1244308, 0, ...
 02014   472   NtContinue  (1244308, 0, ...
 02015   472   NtContinue  (1244308, 0, ...
 02016   472   NtContinue  (1244308, 0, ...
 02017   472   NtContinue  (1244308, 0, ...
 02018   472   NtContinue  (1244308, 0, ...
 02019   472   NtContinue  (1244308, 0, ...
 02020   472   NtContinue  (1244308, 0, ...
 02021   472   NtContinue  (1244308, 0, ...
 02022   472   NtContinue  (1244308, 0, ...
 02023   472   NtContinue  (1244308, 0, ...
 02024   472   NtContinue  (1244308, 0, ...
 02025   472   NtContinue  (1244308, 0, ...
 02026   472   NtContinue  (1244308, 0, ...
 02027   472   NtContinue  (1244308, 0, ...
 02028   472   NtContinue  (1244308, 0, ...
 02029   472   NtContinue  (1244308, 0, ...
 02030   472   NtContinue  (1244308, 0, ...
 02031   472   NtContinue  (1244308, 0, ...
 02032   472   NtContinue  (1244308, 0, ...
 02033   472   NtContinue  (1244308, 0, ...
 02034   472   NtContinue  (1244308, 0, ...
 02035   472   NtContinue  (1244308, 0, ...
 02036   472   NtContinue  (1244308, 0, ...
 02037   472   NtContinue  (1244308, 0, ...
 02038   472   NtContinue  (1244308, 0, ...
 02039   472   NtContinue  (1244308, 0, ...
 02040   472   NtContinue  (1244308, 0, ...
 02041   472   NtContinue  (1244308, 0, ...
 02042   472   NtContinue  (1244308, 0, ...
 02043   472   NtContinue  (1244308, 0, ...
 02044   472   NtContinue  (1244308, 0, ...
 02045   472   NtContinue  (1244308, 0, ...
 02046   472   NtContinue  (1244308, 0, ...
 02047   472   NtContinue  (1244308, 0, ...
 02048   472   NtContinue  (1244308, 0, ...
 02049   472   NtContinue  (1244308, 0, ...
 02050   472   NtContinue  (1244308, 0, ...
 02051   472   NtContinue  (1244308, 0, ...
 02052   472   NtContinue  (1244308, 0, ...
 02053   472   NtContinue  (1244308, 0, ...
 02054   472   NtContinue  (1244308, 0, ...
 02055   472   NtContinue  (1244308, 0, ...
 02056   472   NtContinue  (1244308, 0, ...
 02057   472   NtContinue  (1244308, 0, ...
 02058   472   NtContinue  (1244308, 0, ...
 02059   472   NtContinue  (1244308, 0, ...
 02060   472   NtContinue  (1244308, 0, ...
 02061   472   NtContinue  (1244308, 0, ...
 02062   472   NtContinue  (1244308, 0, ...
 02063   472   NtContinue  (1244308, 0, ...
 02064   472   NtContinue  (1244308, 0, ...
 02065   472   NtContinue  (1244308, 0, ...
 02066   472   NtContinue  (1244308, 0, ...
 02067   472   NtContinue  (1244308, 0, ...
 02068   472   NtContinue  (1244308, 0, ...
 02069   472   NtContinue  (1244308, 0, ...
 02070   472   NtContinue  (1244308, 0, ...
 02071   472   NtContinue  (1244308, 0, ...
 02072   472   NtContinue  (1244308, 0, ...
 02073   472   NtContinue  (1244308, 0, ...
 02074   472   NtContinue  (1244308, 0, ...
 02075   472   NtContinue  (1244308, 0, ...
 02076   472   NtContinue  (1244308, 0, ...
 02077   472   NtContinue  (1244308, 0, ...
 02078   472   NtContinue  (1244308, 0, ...
 02079   472   NtContinue  (1244308, 0, ...
 02080   472   NtContinue  (1244308, 0, ...
 02081   472   NtContinue  (1244308, 0, ...
 02082   472   NtContinue  (1244308, 0, ...
 02083   472   NtContinue  (1244308, 0, ...
 02084   472   NtContinue  (1244308, 0, ...
 02085   472   NtContinue  (1244308, 0, ...
 02086   472   NtContinue  (1244308, 0, ...
 02087   472   NtContinue  (1244308, 0, ...
 02088   472   NtContinue  (1244308, 0, ...
 02089   472   NtContinue  (1244308, 0, ...
 02090   472   NtContinue  (1244308, 0, ...
 02091   472   NtContinue  (1244308, 0, ...
 02092   472   NtContinue  (1244308, 0, ...
 02093   472   NtContinue  (1244308, 0, ...
 02094   472   NtContinue  (1244308, 0, ...
 02095   472   NtContinue  (1244308, 0, ...
 02096   472   NtContinue  (1244308, 0, ...
 02097   472   NtContinue  (1244308, 0, ...
 02098   472   NtContinue  (1244308, 0, ...
 02099   472   NtContinue  (1244308, 0, ...
 02100   472   NtContinue  (1244308, 0, ...
 02101   472   NtContinue  (1244308, 0, ...
 02102   472   NtContinue  (1244308, 0, ...
 02103   472   NtContinue  (1244308, 0, ...
 02104   472   NtContinue  (1244308, 0, ...
 02105   472   NtContinue  (1244308, 0, ...
 02106   472   NtContinue  (1244308, 0, ...
 02107   472   NtContinue  (1244308, 0, ...
 02108   472   NtContinue  (1244308, 0, ...
 02109   472   NtContinue  (1244308, 0, ...
 02110   472   NtContinue  (1244308, 0, ...
 02111   472   NtContinue  (1244308, 0, ...
 02112   472   NtContinue  (1244308, 0, ...
 02113   472   NtContinue  (1244308, 0, ...
 02114   472   NtContinue  (1244308, 0, ...
 02115   472   NtContinue  (1244308, 0, ...
 02116   472   NtContinue  (1244308, 0, ...
 02117   472   NtContinue  (1244308, 0, ...
 02118   472   NtContinue  (1244308, 0, ...
 02119   472   NtContinue  (1244308, 0, ...
 02120   472   NtContinue  (1244308, 0, ...
 02121   472   NtContinue  (1244308, 0, ...
 02122   472   NtContinue  (1244308, 0, ...
 02123   472   NtContinue  (1244308, 0, ...
 02124   472   NtContinue  (1244308, 0, ...
 02125   472   NtContinue  (1244308, 0, ...
 02126   472   NtContinue  (1244308, 0, ...
 02127   472   NtContinue  (1244308, 0, ...
 02128   472   NtContinue  (1244308, 0, ...
 02129   472   NtContinue  (1244308, 0, ...
 02130   472   NtContinue  (1244308, 0, ...
 02131   472   NtContinue  (1244308, 0, ...
 02132   472   NtContinue  (1244308, 0, ...
 02133   472   NtContinue  (1244308, 0, ...
 02134   472   NtContinue  (1244308, 0, ...
 02135   472   NtContinue  (1244308, 0, ...
 02136   472   NtContinue  (1244308, 0, ...
 02137   472   NtContinue  (1244308, 0, ...
 02138   472   NtContinue  (1244308, 0, ...
 02139   472   NtContinue  (1244308, 0, ...
 02140   472   NtContinue  (1244308, 0, ...
 02141   472   NtContinue  (1244308, 0, ...
 02142   472   NtContinue  (1244308, 0, ...
 02143   472   NtContinue  (1244308, 0, ...
 02144   472   NtContinue  (1244308, 0, ...
 02145   472   NtContinue  (1244308, 0, ...
 02146   472   NtContinue  (1244308, 0, ...
 02147   472   NtContinue  (1244308, 0, ...
 02148   472   NtContinue  (1244308, 0, ...
 02149   472   NtContinue  (1244308, 0, ...
 02150   472   NtContinue  (1244308, 0, ...
 02151   472   NtContinue  (1244308, 0, ...
 02152   472   NtContinue  (1244308, 0, ...
 02153   472   NtContinue  (1244308, 0, ...
 02154   472   NtContinue  (1244308, 0, ...
 02155   472   NtContinue  (1244308, 0, ...
 02156   472   NtContinue  (1244308, 0, ...
 02157   472   NtContinue  (1244308, 0, ...
 02158   472   NtContinue  (1244308, 0, ...
 02159   472   NtContinue  (1244308, 0, ...
 02160   472   NtContinue  (1244308, 0, ...
 02161   472   NtContinue  (1244308, 0, ...
 02162   472   NtContinue  (1244308, 0, ...
 02163   472   NtContinue  (1244308, 0, ...
 02164   472   NtContinue  (1244308, 0, ...
 02165   472   NtContinue  (1244308, 0, ...
 02166   472   NtContinue  (1244308, 0, ...
 02167   472   NtContinue  (1244308, 0, ...
 02168   472   NtContinue  (1244308, 0, ...
 02169   472   NtContinue  (1244308, 0, ...
 02170   472   NtContinue  (1244308, 0, ...
 02171   472   NtContinue  (1244308, 0, ...
 02172   472   NtContinue  (1244308, 0, ...
 02173   472   NtContinue  (1244308, 0, ...
 02174   472   NtContinue  (1244308, 0, ...
 02175   472   NtContinue  (1244308, 0, ...
 02176   472   NtContinue  (1244308, 0, ...
 02177   472   NtContinue  (1244308, 0, ...
 02178   472   NtContinue  (1244308, 0, ...
 02179   472   NtContinue  (1244308, 0, ...
 02180   472   NtContinue  (1244308, 0, ...
 02181   472   NtContinue  (1244308, 0, ...
 02182   472   NtContinue  (1244308, 0, ...
 02183   472   NtContinue  (1244308, 0, ...
 02184   472   NtContinue  (1244308, 0, ...
 02185   472   NtContinue  (1244308, 0, ...
 02186   472   NtContinue  (1244308, 0, ...
 02187   472   NtContinue  (1244308, 0, ...
 02188   472   NtContinue  (1244308, 0, ...
 02189   472   NtContinue  (1244308, 0, ...
 02190   472   NtContinue  (1244308, 0, ...
 02191   472   NtContinue  (1244308, 0, ...
 02192   472   NtContinue  (1244308, 0, ...
 02193   472   NtContinue  (1244308, 0, ...
 02194   472   NtContinue  (1244308, 0, ...
 02195   472   NtContinue  (1244308, 0, ...
 02196   472   NtContinue  (1244308, 0, ...
 02197   472   NtContinue  (1244308, 0, ...
 02198   472   NtContinue  (1244308, 0, ...
 02199   472   NtContinue  (1244308, 0, ...
 02200   472   NtContinue  (1244308, 0, ...
 02201   472   NtContinue  (1244308, 0, ...
 02202   472   NtContinue  (1244308, 0, ...
 02203   472   NtContinue  (1244308, 0, ...
 02204   472   NtContinue  (1244308, 0, ...
 02205   472   NtContinue  (1244308, 0, ...
 02206   472   NtContinue  (1244308, 0, ...
 02207   472   NtContinue  (1244308, 0, ...
 02208   472   NtContinue  (1244308, 0, ...
 02209   472   NtContinue  (1244308, 0, ...
 02210   472   NtContinue  (1244308, 0, ...
 02211   472   NtContinue  (1244308, 0, ...
 02212   472   NtContinue  (1244308, 0, ...
 02213   472   NtContinue  (1244308, 0, ...
 02214   472   NtContinue  (1244308, 0, ...
 02215   472   NtContinue  (1244308, 0, ...
 02216   472   NtContinue  (1244308, 0, ...
 02217   472   NtContinue  (1244308, 0, ...
 02218   472   NtContinue  (1244308, 0, ...
 02219   472   NtContinue  (1244308, 0, ...
 02220   472   NtContinue  (1244308, 0, ...
 02221   472   NtContinue  (1244308, 0, ...
 02222   472   NtContinue  (1244308, 0, ...
 02223   472   NtContinue  (1244308, 0, ...
 02224   472   NtContinue  (1244308, 0, ...
 02225   472   NtContinue  (1244308, 0, ...
 02226   472   NtContinue  (1244308, 0, ...
 02227   472   NtContinue  (1244308, 0, ...
 02228   472   NtContinue  (1244308, 0, ...
 02229   472   NtContinue  (1244308, 0, ...
 02230   472   NtContinue  (1244308, 0, ...
 02231   472   NtContinue  (1244308, 0, ...
 02232   472   NtContinue  (1244308, 0, ...
 02233   472   NtContinue  (1244308, 0, ...
 02234   472   NtContinue  (1244308, 0, ...
 02235   472   NtContinue  (1244308, 0, ...
 02236   472   NtContinue  (1244308, 0, ...
 02237   472   NtContinue  (1244308, 0, ...
 02238   472   NtContinue  (1244308, 0, ...
 02239   472   NtContinue  (1244308, 0, ...
 02240   472   NtContinue  (1244308, 0, ...
 02241   472   NtContinue  (1244308, 0, ...
 02242   472   NtContinue  (1244308, 0, ...
 02243   472   NtContinue  (1244308, 0, ...
 02244   472   NtContinue  (1244308, 0, ...
 02245   472   NtContinue  (1244308, 0, ...
 02246   472   NtContinue  (1244308, 0, ...
 02247   472   NtContinue  (1244308, 0, ...
 02248   472   NtContinue  (1244308, 0, ...
 02249   472   NtContinue  (1244308, 0, ...
 02250   472   NtContinue  (1244308, 0, ...
 02251   472   NtContinue  (1244308, 0, ...
 02252   472   NtContinue  (1244308, 0, ...
 02253   472   NtContinue  (1244308, 0, ...
 02254   472   NtContinue  (1244308, 0, ...
 02255   472   NtContinue  (1244308, 0, ...
 02256   472   NtContinue  (1244308, 0, ...
 02257   472   NtContinue  (1244308, 0, ...
 02258   472   NtContinue  (1244308, 0, ...
 02259   472   NtContinue  (1244308, 0, ...
 02260   472   NtContinue  (1244308, 0, ...
 02261   472   NtContinue  (1244308, 0, ...
 02262   472   NtContinue  (1244308, 0, ...
 02263   472   NtContinue  (1244308, 0, ...
 02264   472   NtContinue  (1244308, 0, ...
 02265   472   NtContinue  (1244308, 0, ...
 02266   472   NtContinue  (1244308, 0, ...
 02267   472   NtContinue  (1244308, 0, ...
 02268   472   NtContinue  (1244308, 0, ...
 02269   472   NtContinue  (1244308, 0, ...
 02270   472   NtContinue  (1244308, 0, ...
 02271   472   NtContinue  (1244308, 0, ...
 02272   472   NtContinue  (1244308, 0, ...
 02273   472   NtContinue  (1244308, 0, ...
 02274   472   NtContinue  (1244308, 0, ...
 02275   472   NtContinue  (1244308, 0, ...
 02276   472   NtContinue  (1244308, 0, ...
 02277   472   NtContinue  (1244308, 0, ...
 02278   472   NtContinue  (1244308, 0, ...
 02279   472   NtContinue  (1244308, 0, ...
 02280   472   NtContinue  (1244308, 0, ...
 02281   472   NtContinue  (1244308, 0, ...
 02282   472   NtContinue  (1244308, 0, ...
 02283   472   NtContinue  (1244308, 0, ...
 02284   472   NtContinue  (1244308, 0, ...
 02285   472   NtContinue  (1244308, 0, ...
 02286   472   NtContinue  (1244308, 0, ...
 02287   472   NtContinue  (1244308, 0, ...
 02288   472   NtContinue  (1244308, 0, ...
 02289   472   NtContinue  (1244308, 0, ...
 02290   472   NtContinue  (1244308, 0, ...
 02291   472   NtContinue  (1244308, 0, ...
 02292   472   NtContinue  (1244308, 0, ...
 02293   472   NtContinue  (1244308, 0, ...
 02294   472   NtContinue  (1244308, 0, ...
 02295   472   NtContinue  (1244308, 0, ...
 02296   472   NtContinue  (1244308, 0, ...
 02297   472   NtContinue  (1244308, 0, ...
 02298   472   NtContinue  (1244308, 0, ...
 02299   472   NtContinue  (1244308, 0, ...
 02300   472   NtContinue  (1244308, 0, ...
 02301   472   NtContinue  (1244308, 0, ...
 02302   472   NtContinue  (1244308, 0, ...
 02303   472   NtContinue  (1244308, 0, ...
 02304   472   NtContinue  (1244308, 0, ...
 02305   472   NtContinue  (1244308, 0, ...
 02306   472   NtContinue  (1244308, 0, ...
 02307   472   NtContinue  (1244308, 0, ...
 02308   472   NtContinue  (1244308, 0, ...
 02309   472   NtContinue  (1244308, 0, ...
 02310   472   NtContinue  (1244308, 0, ...
 02311   472   NtContinue  (1244308, 0, ...
 02312   472   NtContinue  (1244308, 0, ...
 02313   472   NtContinue  (1244308, 0, ...
 02314   472   NtContinue  (1244308, 0, ...
 02315   472   NtContinue  (1244308, 0, ...
 02316   472   NtContinue  (1244308, 0, ...
 02317   472   NtContinue  (1244308, 0, ...
 02318   472   NtContinue  (1244308, 0, ...
 02319   472   NtContinue  (1244308, 0, ...
 02320   472   NtContinue  (1244308, 0, ...
 02321   472   NtContinue  (1244308, 0, ...
 02322   472   NtContinue  (1244308, 0, ...
 02323   472   NtContinue  (1244308, 0, ...
 02324   472   NtContinue  (1244308, 0, ...
 02325   472   NtContinue  (1244308, 0, ...
 02326   472   NtContinue  (1244308, 0, ...
 02327   472   NtContinue  (1244308, 0, ...
 02328   472   NtContinue  (1244308, 0, ...
 02329   472   NtContinue  (1244308, 0, ...
 02330   472   NtContinue  (1244308, 0, ...
 02331   472   NtContinue  (1244308, 0, ...
 02332   472   NtContinue  (1244308, 0, ...
 02333   472   NtContinue  (1244308, 0, ...
 02334   472   NtContinue  (1244308, 0, ...
 02335   472   NtContinue  (1244308, 0, ...
 02336   472   NtContinue  (1244308, 0, ...
 02337   472   NtContinue  (1244308, 0, ...
 02338   472   NtContinue  (1244308, 0, ...
 02339   472   NtContinue  (1244308, 0, ...
 02340   472   NtContinue  (1244308, 0, ...
 02341   472   NtContinue  (1244308, 0, ...
 02342   472   NtContinue  (1244308, 0, ...
 02343   472   NtContinue  (1244308, 0, ...
 02344   472   NtContinue  (1244308, 0, ...
 02345   472   NtContinue  (1244308, 0, ...
 02346   472   NtContinue  (1244308, 0, ...
 02347   472   NtContinue  (1244308, 0, ...
 02348   472   NtContinue  (1244308, 0, ...
 02349   472   NtContinue  (1244308, 0, ...
 02350   472   NtContinue  (1244308, 0, ...
 02351   472   NtContinue  (1244308, 0, ...
 02352   472   NtContinue  (1244308, 0, ...
 02353   472   NtContinue  (1244308, 0, ...
 02354   472   NtContinue  (1244308, 0, ...
 02355   472   NtContinue  (1244308, 0, ...
 02356   472   NtContinue  (1244308, 0, ...
 02357   472   NtContinue  (1244308, 0, ...
 02358   472   NtContinue  (1244308, 0, ...
 02359   472   NtContinue  (1244308, 0, ...
 02360   472   NtContinue  (1244308, 0, ...
 02361   472   NtContinue  (1244308, 0, ...
 02362   472   NtContinue  (1244308, 0, ...
 02363   472   NtContinue  (1244308, 0, ...
 02364   472   NtContinue  (1244308, 0, ...
 02365   472   NtContinue  (1244308, 0, ...
 02366   472   NtContinue  (1244308, 0, ...
 02367   472   NtContinue  (1244308, 0, ...
 02368   472   NtContinue  (1244308, 0, ...
 02369   472   NtContinue  (1244308, 0, ...
 02370   472   NtContinue  (1244308, 0, ...
 02371   472   NtContinue  (1244308, 0, ...
 02372   472   NtContinue  (1244308, 0, ...
 02373   472   NtContinue  (1244308, 0, ...
 02374   472   NtContinue  (1244308, 0, ...
 02375   472   NtContinue  (1244308, 0, ...
 02376   472   NtContinue  (1244308, 0, ...
 02377   472   NtContinue  (1244308, 0, ...
 02378   472   NtContinue  (1244308, 0, ...
 02379   472   NtContinue  (1244308, 0, ...
 02380   472   NtContinue  (1244308, 0, ...
 02381   472   NtContinue  (1244308, 0, ...
 02382   472   NtContinue  (1244308, 0, ...
 02383   472   NtContinue  (1244308, 0, ...
 02384   472   NtContinue  (1244308, 0, ...
 02385   472   NtContinue  (1244308, 0, ...
 02386   472   NtContinue  (1244308, 0, ...
 02387   472   NtContinue  (1244308, 0, ...
 02388   472   NtContinue  (1244308, 0, ...
 02389   472   NtContinue  (1244308, 0, ...
 02390   472   NtContinue  (1244308, 0, ...
 02391   472   NtContinue  (1244308, 0, ...
 02392   472   NtContinue  (1244308, 0, ...
 02393   472   NtContinue  (1244308, 0, ...
 02394   472   NtContinue  (1244308, 0, ...
 02395   472   NtContinue  (1244308, 0, ...
 02396   472   NtContinue  (1244308, 0, ...
 02397   472   NtContinue  (1244308, 0, ...
 02398   472   NtContinue  (1244308, 0, ...
 02399   472   NtContinue  (1244308, 0, ...
 02400   472   NtContinue  (1244308, 0, ...
 02401   472   NtContinue  (1244308, 0, ...
 02402   472   NtContinue  (1244308, 0, ...
 02403   472   NtContinue  (1244308, 0, ...
 02404   472   NtContinue  (1244308, 0, ...
 02405   472   NtContinue  (1244308, 0, ...
 02406   472   NtContinue  (1244308, 0, ...
 02407   472   NtContinue  (1244308, 0, ...
 02408   472   NtContinue  (1244308, 0, ...
 02409   472   NtContinue  (1244308, 0, ...
 02410   472   NtContinue  (1244308, 0, ...
 02411   472   NtContinue  (1244308, 0, ...
 02412   472   NtContinue  (1244308, 0, ...
 02413   472   NtContinue  (1244308, 0, ...
 02414   472   NtContinue  (1244308, 0, ...
 02415   472   NtContinue  (1244308, 0, ...
 02416   472   NtContinue  (1244308, 0, ...
 02417   472   NtContinue  (1244308, 0, ...
 02418   472   NtContinue  (1244308, 0, ...
 02419   472   NtContinue  (1244308, 0, ...
 02420   472   NtContinue  (1244308, 0, ...
 02421   472   NtContinue  (1244308, 0, ...
 02422   472   NtContinue  (1244308, 0, ...
 02423   472   NtContinue  (1244308, 0, ...
 02424   472   NtContinue  (1244308, 0, ...
 02425   472   NtContinue  (1244308, 0, ...
 02426   472   NtContinue  (1244308, 0, ...
 02427   472   NtContinue  (1244308, 0, ...
 02428   472   NtContinue  (1244308, 0, ...
 02429   472   NtContinue  (1244308, 0, ...
 02430   472   NtContinue  (1244308, 0, ...
 02431   472   NtContinue  (1244308, 0, ...
 02432   472   NtContinue  (1244308, 0, ...
 02433   472   NtContinue  (1244308, 0, ...
 02434   472   NtContinue  (1244308, 0, ...
 02435   472   NtContinue  (1244308, 0, ...
 02436   472   NtContinue  (1244308, 0, ...
 02437   472   NtContinue  (1244308, 0, ...
 02438   472   NtContinue  (1244308, 0, ...
 02439   472   NtContinue  (1244308, 0, ...
 02440   472   NtContinue  (1244308, 0, ...
 02441   472   NtContinue  (1244308, 0, ...
 02442   472   NtContinue  (1244308, 0, ...
 02443   472   NtContinue  (1244308, 0, ...
 02444   472   NtContinue  (1244308, 0, ...
 02445   472   NtContinue  (1244308, 0, ...
 02446   472   NtContinue  (1244308, 0, ...
 02447   472   NtContinue  (1244308, 0, ...
 02448   472   NtContinue  (1244308, 0, ...
 02449   472   NtContinue  (1244308, 0, ...
 02450   472   NtContinue  (1244308, 0, ...
 02451   472   NtContinue  (1244308, 0, ...
 02452   472   NtContinue  (1244308, 0, ...
 02453   472   NtContinue  (1244308, 0, ...
 02454   472   NtContinue  (1244308, 0, ...
 02455   472   NtContinue  (1244308, 0, ...
 02456   472   NtContinue  (1244308, 0, ...
 02457   472   NtContinue  (1244308, 0, ...
 02458   472   NtContinue  (1244308, 0, ...
 02459   472   NtContinue  (1244308, 0, ...
 02460   472   NtContinue  (1244308, 0, ...
 02461   472   NtContinue  (1244308, 0, ...
 02462   472   NtContinue  (1244308, 0, ...
 02463   472   NtContinue  (1244308, 0, ...
 02464   472   NtContinue  (1244308, 0, ...
 02465   472   NtContinue  (1244308, 0, ...
 02466   472   NtContinue  (1244308, 0, ...
 02467   472   NtContinue  (1244308, 0, ...
 02468   472   NtContinue  (1244308, 0, ...
 02469   472   NtContinue  (1244308, 0, ...
 02470   472   NtContinue  (1244308, 0, ...
 02471   472   NtContinue  (1244308, 0, ...
 02472   472   NtContinue  (1244308, 0, ...
 02473   472   NtContinue  (1244308, 0, ...
 02474   472   NtContinue  (1244308, 0, ...
 02475   472   NtContinue  (1244308, 0, ...
 02476   472   NtContinue  (1244308, 0, ...
 02477   472   NtContinue  (1244308, 0, ...
 02478   472   NtContinue  (1244308, 0, ...
 02479   472   NtContinue  (1244308, 0, ...
 02480   472   NtContinue  (1244308, 0, ...
 02481   472   NtContinue  (1244308, 0, ...
 02482   472   NtContinue  (1244308, 0, ...
 02483   472   NtContinue  (1244308, 0, ...
 02484   472   NtContinue  (1244308, 0, ...
 02485   472   NtContinue  (1244308, 0, ...
 02486   472   NtContinue  (1244308, 0, ...
 02487   472   NtContinue  (1244308, 0, ...
 02488   472   NtContinue  (1244308, 0, ...
 02489   472   NtContinue  (1244308, 0, ...
 02490   472   NtContinue  (1244308, 0, ...
 02491   472   NtContinue  (1244308, 0, ...
 02492   472   NtContinue  (1244308, 0, ...
 02493   472   NtContinue  (1244308, 0, ...
 02494   472   NtContinue  (1244308, 0, ...
 02495   472   NtContinue  (1244308, 0, ...
 02496   472   NtContinue  (1244308, 0, ...
 02497   472   NtContinue  (1244308, 0, ...
 02498   472   NtContinue  (1244308, 0, ...
 02499   472   NtContinue  (1244308, 0, ...
 02500   472   NtContinue  (1244308, 0, ...
 02501   472   NtContinue  (1244308, 0, ...
 02502   472   NtContinue  (1244308, 0, ...
 02503   472   NtContinue  (1244308, 0, ...
 02504   472   NtContinue  (1244308, 0, ...
 02505   472   NtContinue  (1244308, 0, ...
 02506   472   NtContinue  (1244308, 0, ...
 02507   472   NtContinue  (1244308, 0, ...
 02508   472   NtContinue  (1244308, 0, ...
 02509   472   NtContinue  (1244308, 0, ...
 02510   472   NtContinue  (1244308, 0, ...
 02511   472   NtContinue  (1244308, 0, ...
 02512   472   NtContinue  (1244308, 0, ...
 02513   472   NtContinue  (1244308, 0, ...
 02514   472   NtContinue  (1244308, 0, ...
 02515   472   NtContinue  (1244308, 0, ...
 02516   472   NtContinue  (1244308, 0, ...
 02517   472   NtContinue  (1244308, 0, ...
 02518   472   NtContinue  (1244308, 0, ...
 02519   472   NtContinue  (1244308, 0, ...
 02520   472   NtContinue  (1244308, 0, ...
 02521   472   NtContinue  (1244308, 0, ...
 02522   472   NtContinue  (1244308, 0, ...
 02523   472   NtContinue  (1244308, 0, ...
 02524   472   NtContinue  (1244308, 0, ...
 02525   472   NtContinue  (1244308, 0, ...
 02526   472   NtContinue  (1244308, 0, ...
 02527   472   NtContinue  (1244308, 0, ...
 02528   472   NtContinue  (1244308, 0, ...
 02529   472   NtContinue  (1244308, 0, ...
 02530   472   NtContinue  (1244308, 0, ...
 02531   472   NtContinue  (1244308, 0, ...
 02532   472   NtContinue  (1244308, 0, ...
 02533   472   NtContinue  (1244308, 0, ...
 02534   472   NtContinue  (1244308, 0, ...
 02535   472   NtContinue  (1244308, 0, ...
 02536   472   NtContinue  (1244308, 0, ...
 02537   472   NtContinue  (1244308, 0, ...
 02538   472   NtContinue  (1244308, 0, ...
 02539   472   NtContinue  (1244308, 0, ...
 02540   472   NtContinue  (1244308, 0, ...
 02541   472   NtContinue  (1244308, 0, ...
 02542   472   NtContinue  (1244308, 0, ...
 02543   472   NtContinue  (1244308, 0, ...
 02544   472   NtContinue  (1244308, 0, ...
 02545   472   NtContinue  (1244308, 0, ...
 02546   472   NtContinue  (1244308, 0, ...
 02547   472   NtContinue  (1244308, 0, ...
 02548   472   NtContinue  (1244308, 0, ...
 02549   472   NtContinue  (1244308, 0, ...
 02550   472   NtContinue  (1244308, 0, ...
 02551   472   NtContinue  (1244308, 0, ...
 02552   472   NtContinue  (1244308, 0, ...
 02553   472   NtContinue  (1244308, 0, ...
 02554   472   NtContinue  (1244308, 0, ...
 02555   472   NtContinue  (1244308, 0, ...
 02556   472   NtContinue  (1244308, 0, ...
 02557   472   NtContinue  (1244308, 0, ...
 02558   472   NtContinue  (1244308, 0, ...
 02559   472   NtContinue  (1244308, 0, ...
 02560   472   NtContinue  (1244308, 0, ...
 02561   472   NtContinue  (1244308, 0, ...
 02562   472   NtContinue  (1244308, 0, ...
 02563   472   NtContinue  (1244308, 0, ...
 02564   472   NtContinue  (1244308, 0, ...
 02565   472   NtContinue  (1244308, 0, ...
 02566   472   NtContinue  (1244308, 0, ...
 02567   472   NtContinue  (1244308, 0, ...
 02568   472   NtContinue  (1244308, 0, ...
 02569   472   NtContinue  (1244308, 0, ...
 02570   472   NtContinue  (1244308, 0, ...
 02571   472   NtContinue  (1244308, 0, ...
 02572   472   NtContinue  (1244308, 0, ...
 02573   472   NtContinue  (1244308, 0, ...
 02574   472   NtContinue  (1244308, 0, ...
 02575   472   NtContinue  (1244308, 0, ...
 02576   472   NtContinue  (1244308, 0, ...
 02577   472   NtContinue  (1244308, 0, ...
 02578   472   NtContinue  (1244308, 0, ...
 02579   472   NtContinue  (1244308, 0, ...
 02580   472   NtContinue  (1244308, 0, ...
 02581   472   NtContinue  (1244308, 0, ...
 02582   472   NtContinue  (1244308, 0, ...
 02583   472   NtContinue  (1244308, 0, ...
 02584   472   NtContinue  (1244308, 0, ...
 02585   472   NtContinue  (1244308, 0, ...
 02586   472   NtContinue  (1244308, 0, ...
 02587   472   NtContinue  (1244308, 0, ...
 02588   472   NtContinue  (1244308, 0, ...
 02589   472   NtContinue  (1244308, 0, ...
 02590   472   NtContinue  (1244308, 0, ...
 02591   472   NtContinue  (1244308, 0, ...
 02592   472   NtContinue  (1244308, 0, ...
 02593   472   NtContinue  (1244308, 0, ...
 02594   472   NtContinue  (1244308, 0, ...
 02595   472   NtContinue  (1244308, 0, ...
 02596   472   NtContinue  (1244308, 0, ...
 02597   472   NtContinue  (1244308, 0, ...
 02598   472   NtContinue  (1244308, 0, ...
 02599   472   NtContinue  (1244308, 0, ...
 02600   472   NtContinue  (1244308, 0, ...
 02601   472   NtContinue  (1244308, 0, ...
 02602   472   NtContinue  (1244308, 0, ...
 02603   472   NtContinue  (1244308, 0, ...
 02604   472   NtContinue  (1244308, 0, ...
 02605   472   NtContinue  (1244308, 0, ...
 02606   472   NtContinue  (1244308, 0, ...
 02607   472   NtContinue  (1244308, 0, ...
 02608   472   NtContinue  (1244308, 0, ...
 02609   472   NtContinue  (1244308, 0, ...
 02610   472   NtContinue  (1244308, 0, ...
 02611   472   NtContinue  (1244308, 0, ...
 02612   472   NtContinue  (1244308, 0, ...
 02613   472   NtContinue  (1244308, 0, ...
 02614   472   NtContinue  (1244308, 0, ...
 02615   472   NtContinue  (1244308, 0, ...
 02616   472   NtContinue  (1244308, 0, ...
 02617   472   NtContinue  (1244308, 0, ...
 02618   472   NtContinue  (1244308, 0, ...
 02619   472   NtContinue  (1244308, 0, ...
 02620   472   NtContinue  (1244308, 0, ...
 02621   472   NtContinue  (1244308, 0, ...
 02622   472   NtContinue  (1244308, 0, ...
 02623   472   NtContinue  (1244308, 0, ...
 02624   472   NtContinue  (1244308, 0, ...
 02625   472   NtContinue  (1244308, 0, ...
 02626   472   NtContinue  (1244308, 0, ...
 02627   472   NtContinue  (1244308, 0, ...
 02628   472   NtContinue  (1244308, 0, ...
 02629   472   NtContinue  (1244308, 0, ...
 02630   472   NtContinue  (1244308, 0, ...
 02631   472   NtContinue  (1244308, 0, ...
 02632   472   NtContinue  (1244308, 0, ...
 02633   472   NtContinue  (1244308, 0, ...
 02634   472   NtContinue  (1244308, 0, ...
 02635   472   NtContinue  (1244308, 0, ...
 02636   472   NtContinue  (1244308, 0, ...
 02637   472   NtContinue  (1244308, 0, ...
 02638   472   NtContinue  (1244308, 0, ...
 02639   472   NtContinue  (1244308, 0, ...
 02640   472   NtContinue  (1244308, 0, ...
 02641   472   NtContinue  (1244308, 0, ...
 02642   472   NtContinue  (1244308, 0, ...
 02643   472   NtContinue  (1244308, 0, ...
 02644   472   NtContinue  (1244308, 0, ...
 02645   472   NtContinue  (1244308, 0, ...
 02646   472   NtContinue  (1244308, 0, ...
 02647   472   NtContinue  (1244308, 0, ...
 02648   472   NtContinue  (1244308, 0, ...
 02649   472   NtContinue  (1244308, 0, ...
 02650   472   NtContinue  (1244308, 0, ...
 02651   472   NtContinue  (1244308, 0, ...
 02652   472   NtContinue  (1244308, 0, ...
 02653   472   NtContinue  (1244308, 0, ...
 02654   472   NtContinue  (1244308, 0, ...
 02655   472   NtContinue  (1244308, 0, ...
 02656   472   NtContinue  (1244308, 0, ...
 02657   472   NtContinue  (1244308, 0, ...
 02658   472   NtContinue  (1244308, 0, ...
 02659   472   NtContinue  (1244308, 0, ...
 02660   472   NtContinue  (1244308, 0, ...
 02661   472   NtContinue  (1244308, 0, ...
 02662   472   NtContinue  (1244308, 0, ...
 02663   472   NtContinue  (1244308, 0, ...
 02664   472   NtContinue  (1244308, 0, ...
 02665   472   NtContinue  (1244308, 0, ...
 02666   472   NtContinue  (1244308, 0, ...
 02667   472   NtContinue  (1244308, 0, ...
 02668   472   NtContinue  (1244308, 0, ...
 02669   472   NtContinue  (1244308, 0, ...
 02670   472   NtContinue  (1244308, 0, ...
 02671   472   NtContinue  (1244308, 0, ...
 02672   472   NtContinue  (1244308, 0, ...
 02673   472   NtContinue  (1244308, 0, ...
 02674   472   NtContinue  (1244308, 0, ...
 02675   472   NtContinue  (1244308, 0, ...
 02676   472   NtContinue  (1244308, 0, ...
 02677   472   NtContinue  (1244308, 0, ...
 02678   472   NtContinue  (1244308, 0, ...
 02679   472   NtContinue  (1244308, 0, ...
 02680   472   NtContinue  (1244308, 0, ...
 02681   472   NtContinue  (1244308, 0, ...
 02682   472   NtContinue  (1244308, 0, ...
 02683   472   NtContinue  (1244308, 0, ...
 02684   472   NtContinue  (1244308, 0, ...
 02685   472   NtContinue  (1244308, 0, ...
 02686   472   NtContinue  (1244308, 0, ...
 02687   472   NtContinue  (1244308, 0, ...
 02688   472   NtContinue  (1244308, 0, ...
 02689   472   NtContinue  (1244308, 0, ...
 02690   472   NtContinue  (1244308, 0, ...
 02691   472   NtContinue  (1244308, 0, ...
 02692   472   NtContinue  (1244308, 0, ...
 02693   472   NtContinue  (1244308, 0, ...
 02694   472   NtContinue  (1244308, 0, ...
 02695   472   NtContinue  (1244308, 0, ...
 02696   472   NtContinue  (1244308, 0, ...
 02697   472   NtContinue  (1244308, 0, ...
 02698   472   NtContinue  (1244308, 0, ...
 02699   472   NtContinue  (1244308, 0, ...
 02700   472   NtContinue  (1244308, 0, ...
 02701   472   NtContinue  (1244308, 0, ...
 02702   472   NtContinue  (1244308, 0, ...
 02703   472   NtContinue  (1244308, 0, ...
 02704   472   NtContinue  (1244308, 0, ...
 02705   472   NtContinue  (1244308, 0, ...
 02706   472   NtContinue  (1244308, 0, ...
 02707   472   NtContinue  (1244308, 0, ...
 02708   472   NtContinue  (1244308, 0, ...
 02709   472   NtContinue  (1244308, 0, ...
 02710   472   NtContinue  (1244308, 0, ...
 02711   472   NtContinue  (1244308, 0, ...
 02712   472   NtContinue  (1244308, 0, ...
 02713   472   NtContinue  (1244308, 0, ...
 02714   472   NtContinue  (1244308, 0, ...
 02715   472   NtContinue  (1244308, 0, ...
 02716   472   NtContinue  (1244308, 0, ...
 02717   472   NtContinue  (1244308, 0, ...
 02718   472   NtContinue  (1244308, 0, ...
 02719   472   NtContinue  (1244308, 0, ...
 02720   472   NtContinue  (1244308, 0, ...
 02721   472   NtContinue  (1244308, 0, ...
 02722   472   NtContinue  (1244308, 0, ...
 02723   472   NtContinue  (1244308, 0, ...
 02724   472   NtContinue  (1244308, 0, ...
 02725   472   NtContinue  (1244308, 0, ...
 02726   472   NtContinue  (1244308, 0, ...
 02727   472   NtContinue  (1244308, 0, ...
 02728   472   NtContinue  (1244308, 0, ...
 02729   472   NtContinue  (1244308, 0, ...
 02730   472   NtContinue  (1244308, 0, ...
 02731   472   NtContinue  (1244308, 0, ...
 02732   472   NtContinue  (1244308, 0, ...
 02733   472   NtContinue  (1244308, 0, ...
 02734   472   NtContinue  (1244308, 0, ...
 02735   472   NtContinue  (1244308, 0, ...
 02736   472   NtContinue  (1244308, 0, ...
 02737   472   NtContinue  (1244308, 0, ...
 02738   472   NtContinue  (1244308, 0, ...
 02739   472   NtContinue  (1244308, 0, ...
 02740   472   NtContinue  (1244308, 0, ...
 02741   472   NtContinue  (1244308, 0, ...
 02742   472   NtContinue  (1244308, 0, ...
 02743   472   NtContinue  (1244308, 0, ...
 02744   472   NtContinue  (1244308, 0, ...
 02745   472   NtContinue  (1244308, 0, ...
 02746   472   NtContinue  (1244308, 0, ...
 02747   472   NtContinue  (1244308, 0, ...
 02748   472   NtContinue  (1244308, 0, ...
 02749   472   NtContinue  (1244308, 0, ...
 02750   472   NtContinue  (1244308, 0, ...
 02751   472   NtContinue  (1244308, 0, ...
 02752   472   NtContinue  (1244308, 0, ...
 02753   472   NtContinue  (1244308, 0, ...
 02754   472   NtContinue  (1244308, 0, ...
 02755   472   NtContinue  (1244308, 0, ...
 02756   472   NtContinue  (1244308, 0, ...
 02757   472   NtContinue  (1244308, 0, ...
 02758   472   NtContinue  (1244308, 0, ...
 02759   472   NtContinue  (1244308, 0, ...
 02760   472   NtContinue  (1244308, 0, ...
 02761   472   NtContinue  (1244308, 0, ...
 02762   472   NtContinue  (1244308, 0, ...
 02763   472   NtContinue  (1244308, 0, ...
 02764   472   NtContinue  (1244308, 0, ...
 02765   472   NtContinue  (1244308, 0, ...
 02766   472   NtContinue  (1244308, 0, ...
 02767   472   NtContinue  (1244308, 0, ...
 02768   472   NtContinue  (1244308, 0, ...
 02769   472   NtContinue  (1244308, 0, ...
 02770   472   NtContinue  (1244308, 0, ...
 02771   472   NtContinue  (1244308, 0, ...
 02772   472   NtContinue  (1244308, 0, ...
 02773   472   NtContinue  (1244308, 0, ...
 02774   472   NtContinue  (1244308, 0, ...
 02775   472   NtContinue  (1244308, 0, ...
 02776   472   NtContinue  (1244308, 0, ...
 02777   472   NtContinue  (1244308, 0, ...
 02778   472   NtContinue  (1244308, 0, ...
 02779   472   NtContinue  (1244308, 0, ...
 02780   472   NtContinue  (1244308, 0, ...
 02781   472   NtContinue  (1244308, 0, ...
 02782   472   NtContinue  (1244308, 0, ...
 02783   472   NtContinue  (1244308, 0, ...
 02784   472   NtContinue  (1244308, 0, ...
 02785   472   NtContinue  (1244308, 0, ...
 02786   472   NtContinue  (1244308, 0, ...
 02787   472   NtContinue  (1244308, 0, ...
 02788   472   NtContinue  (1244308, 0, ...
 02789   472   NtContinue  (1244308, 0, ...
 02790   472   NtContinue  (1244308, 0, ...
 02791   472   NtContinue  (1244308, 0, ...
 02792   472   NtContinue  (1244308, 0, ...
 02793   472   NtContinue  (1244308, 0, ...
 02794   472   NtContinue  (1244308, 0, ...
 02795   472   NtContinue  (1244308, 0, ...
 02796   472   NtContinue  (1244308, 0, ...
 02797   472   NtContinue  (1244308, 0, ...
 02798   472   NtContinue  (1244308, 0, ...
 02799   472   NtContinue  (1244308, 0, ...
 02800   472   NtContinue  (1244308, 0, ...
 02801   472   NtContinue  (1244308, 0, ...
 02802   472   NtContinue  (1244308, 0, ...
 02803   472   NtContinue  (1244308, 0, ...
 02804   472   NtContinue  (1244308, 0, ...
 02805   472   NtContinue  (1244308, 0, ...
 02806   472   NtContinue  (1244308, 0, ...
 02807   472   NtContinue  (1244308, 0, ...
 02808   472   NtContinue  (1244308, 0, ...
 02809   472   NtContinue  (1244308, 0, ...
 02810   472   NtContinue  (1244308, 0, ...
 02811   472   NtContinue  (1244308, 0, ...
 02812   472   NtContinue  (1244308, 0, ...
 02813   472   NtContinue  (1244308, 0, ...
 02814   472   NtContinue  (1244308, 0, ...
 02815   472   NtContinue  (1244308, 0, ...
 02816   472   NtContinue  (1244308, 0, ...
 02817   472   NtContinue  (1244308, 0, ...
 02818   472   NtContinue  (1244308, 0, ...
 02819   472   NtContinue  (1244308, 0, ...
 02820   472   NtContinue  (1244308, 0, ...
 02821   472   NtContinue  (1244308, 0, ...
 02822   472   NtContinue  (1244308, 0, ...
 02823   472   NtContinue  (1244308, 0, ...
 02824   472   NtContinue  (1244308, 0, ...
 02825   472   NtContinue  (1244308, 0, ...
 02826   472   NtContinue  (1244308, 0, ...
 02827   472   NtContinue  (1244308, 0, ...
 02828   472   NtContinue  (1244308, 0, ...
 02829   472   NtContinue  (1244308, 0, ...
 02830   472   NtContinue  (1244308, 0, ...
 02831   472   NtContinue  (1244308, 0, ...
 02832   472   NtContinue  (1244308, 0, ...
 02833   472   NtContinue  (1244308, 0, ...
 02834   472   NtContinue  (1244308, 0, ...
 02835   472   NtContinue  (1244308, 0, ...
 02836   472   NtContinue  (1244308, 0, ...
 02837   472   NtContinue  (1244308, 0, ...
 02838   472   NtContinue  (1244308, 0, ...
 02839   472   NtContinue  (1244308, 0, ...
 02840   472   NtContinue  (1244308, 0, ...
 02841   472   NtContinue  (1244308, 0, ...
 02842   472   NtContinue  (1244308, 0, ...
 02843   472   NtContinue  (1244308, 0, ...
 02844   472   NtContinue  (1244308, 0, ...
 02845   472   NtContinue  (1244308, 0, ...
 02846   472   NtContinue  (1244308, 0, ...
 02847   472   NtContinue  (1244308, 0, ...
 02848   472   NtContinue  (1244308, 0, ...
 02849   472   NtContinue  (1244308, 0, ...
 02850   472   NtContinue  (1244308, 0, ...
 02851   472   NtContinue  (1244308, 0, ...
 02852   472   NtContinue  (1244308, 0, ...
 02853   472   NtContinue  (1244308, 0, ...
 02854   472   NtContinue  (1244308, 0, ...
 02855   472   NtContinue  (1244308, 0, ...
 02856   472   NtContinue  (1244308, 0, ...
 02857   472   NtContinue  (1244308, 0, ...
 02858   472   NtContinue  (1244308, 0, ...
 02859   472   NtContinue  (1244308, 0, ...
 02860   472   NtContinue  (1244308, 0, ...
 02861   472   NtContinue  (1244308, 0, ...
 02862   472   NtContinue  (1244308, 0, ...
 02863   472   NtContinue  (1244308, 0, ...
 02864   472   NtContinue  (1244308, 0, ...
 02865   472   NtContinue  (1244308, 0, ...
 02866   472   NtContinue  (1244308, 0, ...
 02867   472   NtContinue  (1244308, 0, ...
 02868   472   NtContinue  (1244308, 0, ...
 02869   472   NtContinue  (1244308, 0, ...
 02870   472   NtContinue  (1244308, 0, ...
 02871   472   NtContinue  (1244308, 0, ...
 02872   472   NtContinue  (1244308, 0, ...
 02873   472   NtContinue  (1244308, 0, ...
 02874   472   NtContinue  (1244308, 0, ...
 02875   472   NtContinue  (1244308, 0, ...
 02876   472   NtContinue  (1244308, 0, ...
 02877   472   NtContinue  (1244308, 0, ...
 02878   472   NtContinue  (1244308, 0, ...
 02879   472   NtContinue  (1244308, 0, ...
 02880   472   NtContinue  (1244308, 0, ...
 02881   472   NtContinue  (1244308, 0, ...
 02882   472   NtContinue  (1244308, 0, ...
 02883   472   NtContinue  (1244308, 0, ...
 02884   472   NtContinue  (1244308, 0, ...
 02885   472   NtContinue  (1244308, 0, ...
 02886   472   NtContinue  (1244308, 0, ...
 02887   472   NtContinue  (1244308, 0, ...
 02888   472   NtContinue  (1244308, 0, ...
 02889   472   NtContinue  (1244308, 0, ...
 02890   472   NtContinue  (1244308, 0, ...
 02891   472   NtContinue  (1244308, 0, ...
 02892   472   NtContinue  (1244308, 0, ...
 02893   472   NtContinue  (1244308, 0, ...
 02894   472   NtContinue  (1244308, 0, ...
 02895   472   NtContinue  (1244308, 0, ...
 02896   472   NtContinue  (1244308, 0, ...
 02897   472   NtContinue  (1244308, 0, ...
 02898   472   NtContinue  (1244308, 0, ...
 02899   472   NtContinue  (1244308, 0, ...
 02900   472   NtContinue  (1244308, 0, ...
 02901   472   NtContinue  (1244308, 0, ...
 02902   472   NtContinue  (1244308, 0, ...
 02903   472   NtContinue  (1244308, 0, ...
 02904   472   NtContinue  (1244308, 0, ...
 02905   472   NtContinue  (1244308, 0, ...
 02906   472   NtContinue  (1244308, 0, ...
 02907   472   NtContinue  (1244308, 0, ...
 02908   472   NtContinue  (1244308, 0, ...
 02909   472   NtContinue  (1244308, 0, ...
 02910   472   NtContinue  (1244308, 0, ...
 02911   472   NtContinue  (1244308, 0, ...
 02912   472   NtContinue  (1244308, 0, ...
 02913   472   NtContinue  (1244308, 0, ...
 02914   472   NtContinue  (1244308, 0, ...
 02915   472   NtContinue  (1244308, 0, ...
 02916   472   NtContinue  (1244308, 0, ...
 02917   472   NtContinue  (1244308, 0, ...
 02918   472   NtContinue  (1244308, 0, ...
 02919   472   NtContinue  (1244308, 0, ...
 02920   472   NtContinue  (1244308, 0, ...
 02921   472   NtContinue  (1244308, 0, ...
 02922   472   NtContinue  (1244308, 0, ...
 02923   472   NtContinue  (1244308, 0, ...
 02924   472   NtContinue  (1244308, 0, ...
 02925   472   NtContinue  (1244308, 0, ...
 02926   472   NtContinue  (1244308, 0, ...
 02927   472   NtContinue  (1244308, 0, ...
 02928   472   NtContinue  (1244308, 0, ...
 02929   472   NtContinue  (1244308, 0, ...
 02930   472   NtContinue  (1244308, 0, ...
 02931   472   NtContinue  (1244308, 0, ...
 02932   472   NtContinue  (1244308, 0, ...
 02933   472   NtContinue  (1244308, 0, ...
 02934   472   NtContinue  (1244308, 0, ...
 02935   472   NtContinue  (1244308, 0, ...
 02936   472   NtContinue  (1244308, 0, ...
 02937   472   NtContinue  (1244308, 0, ...
 02938   472   NtContinue  (1244308, 0, ...
 02939   472   NtContinue  (1244308, 0, ...
 02940   472   NtContinue  (1244308, 0, ...
 02941   472   NtContinue  (1244308, 0, ...
 02942   472   NtContinue  (1244308, 0, ...
 02943   472   NtContinue  (1244308, 0, ...
 02944   472   NtContinue  (1244308, 0, ...
 02945   472   NtContinue  (1244308, 0, ...
 02946   472   NtContinue  (1244308, 0, ...
 02947   472   NtContinue  (1244308, 0, ...
 02948   472   NtContinue  (1244308, 0, ...
 02949   472   NtContinue  (1244308, 0, ...
 02950   472   NtContinue  (1244308, 0, ...
 02951   472   NtContinue  (1244308, 0, ...
 02952   472   NtContinue  (1244308, 0, ...
 02953   472   NtContinue  (1244308, 0, ...
 02954   472   NtContinue  (1244308, 0, ...
 02955   472   NtContinue  (1244308, 0, ...
 02956   472   NtContinue  (1244308, 0, ...
 02957   472   NtContinue  (1244308, 0, ...
 02958   472   NtContinue  (1244308, 0, ...
 02959   472   NtContinue  (1244308, 0, ...
 02960   472   NtContinue  (1244308, 0, ...
 02961   472   NtContinue  (1244308, 0, ...
 02962   472   NtContinue  (1244308, 0, ...
 02963   472   NtContinue  (1244308, 0, ...
 02964   472   NtContinue  (1244308, 0, ...
 02965   472   NtContinue  (1244308, 0, ...
 02966   472   NtContinue  (1244308, 0, ...
 02967   472   NtContinue  (1244308, 0, ...
 02968   472   NtContinue  (1244308, 0, ...
 02969   472   NtContinue  (1244308, 0, ...
 02970   472   NtContinue  (1244308, 0, ...
 02971   472   NtContinue  (1244308, 0, ...
 02972   472   NtContinue  (1244308, 0, ...
 02973   472   NtContinue  (1244308, 0, ...
 02974   472   NtContinue  (1244308, 0, ...
 02975   472   NtContinue  (1244308, 0, ...
 02976   472   NtContinue  (1244308, 0, ...
 02977   472   NtContinue  (1244308, 0, ...
 02978   472   NtContinue  (1244308, 0, ...
 02979   472   NtContinue  (1244308, 0, ...
 02980   472   NtContinue  (1244308, 0, ...
 02981   472   NtContinue  (1244308, 0, ...
 02982   472   NtContinue  (1244308, 0, ...
 02983   472   NtContinue  (1244308, 0, ...
 02984   472   NtContinue  (1244308, 0, ...
 02985   472   NtContinue  (1244308, 0, ...
 02986   472   NtContinue  (1244308, 0, ...
 02987   472   NtContinue  (1244308, 0, ...
 02988   472   NtContinue  (1244308, 0, ...
 02989   472   NtContinue  (1244308, 0, ...
 02990   472   NtContinue  (1244308, 0, ...
 02991   472   NtContinue  (1244308, 0, ...
 02992   472   NtContinue  (1244308, 0, ...
 02993   472   NtContinue  (1244308, 0, ...
 02994   472   NtContinue  (1244308, 0, ...
 02995   472   NtContinue  (1244308, 0, ...
 02996   472   NtContinue  (1244308, 0, ...
 02997   472   NtContinue  (1244308, 0, ...
 02998   472   NtContinue  (1244308, 0, ...
 02999   472   NtContinue  (1244308, 0, ...
 03000   472   NtContinue  (1244308, 0, ...
 03001   472   NtContinue  (1244308, 0, ...
 03002   472   NtContinue  (1244308, 0, ...
 03003   472   NtContinue  (1244308, 0, ...
 03004   472   NtContinue  (1244308, 0, ...
 03005   472   NtContinue  (1244308, 0, ...
 03006   472   NtContinue  (1244308, 0, ...
 03007   472   NtContinue  (1244308, 0, ...
 03008   472   NtContinue  (1244308, 0, ...
 03009   472   NtContinue  (1244308, 0, ...
 03010   472   NtContinue  (1244308, 0, ...
 03011   472   NtContinue  (1244308, 0, ...
 03012   472   NtContinue  (1244308, 0, ...
 03013   472   NtContinue  (1244308, 0, ...
 03014   472   NtContinue  (1244308, 0, ...
 03015   472   NtContinue  (1244308, 0, ...
 03016   472   NtContinue  (1244308, 0, ...
 03017   472   NtContinue  (1244308, 0, ...
 03018   472   NtContinue  (1244308, 0, ...
 03019   472   NtContinue  (1244308, 0, ...
 03020   472   NtContinue  (1244308, 0, ...
 03021   472   NtContinue  (1244308, 0, ...
 03022   472   NtContinue  (1244308, 0, ...
 03023   472   NtContinue  (1244308, 0, ...
 03024   472   NtContinue  (1244308, 0, ...
 03025   472   NtContinue  (1244308, 0, ...
 03026   472   NtContinue  (1244308, 0, ...
 03027   472   NtContinue  (1244308, 0, ...
 03028   472   NtContinue  (1244308, 0, ...
 03029   472   NtContinue  (1244308, 0, ...
 03030   472   NtContinue  (1244308, 0, ...
 03031   472   NtContinue  (1244308, 0, ...
 03032   472   NtContinue  (1244308, 0, ...
 03033   472   NtContinue  (1244308, 0, ...
 03034   472   NtContinue  (1244308, 0, ...
 03035   472   NtContinue  (1244308, 0, ...
 03036   472   NtContinue  (1244308, 0, ...
 03037   472   NtContinue  (1244308, 0, ...
 03038   472   NtContinue  (1244308, 0, ...
 03039   472   NtContinue  (1244308, 0, ...
 03040   472   NtContinue  (1244308, 0, ...
 03041   472   NtContinue  (1244308, 0, ...
 03042   472   NtContinue  (1244308, 0, ...
 03043   472   NtContinue  (1244308, 0, ...
 03044   472   NtContinue  (1244308, 0, ...
 03045   472   NtContinue  (1244308, 0, ...
 03046   472   NtContinue  (1244308, 0, ...
 03047   472   NtContinue  (1244308, 0, ...
 03048   472   NtContinue  (1244308, 0, ...
 03049   472   NtContinue  (1244308, 0, ...
 03050   472   NtContinue  (1244308, 0, ...
 03051   472   NtContinue  (1244308, 0, ...
 03052   472   NtContinue  (1244308, 0, ...
 03053   472   NtContinue  (1244308, 0, ...
 03054   472   NtContinue  (1244308, 0, ...
 03055   472   NtContinue  (1244308, 0, ...
 03056   472   NtContinue  (1244308, 0, ...
 03057   472   NtContinue  (1244308, 0, ...
 03058   472   NtContinue  (1244308, 0, ...
 03059   472   NtContinue  (1244308, 0, ...
 03060   472   NtContinue  (1244308, 0, ...
 03061   472   NtContinue  (1244308, 0, ...
 03062   472   NtContinue  (1244308, 0, ...
 03063   472   NtContinue  (1244308, 0, ...
 03064   472   NtContinue  (1244308, 0, ...
 03065   472   NtContinue  (1244308, 0, ...
 03066   472   NtContinue  (1244308, 0, ...
 03067   472   NtContinue  (1244308, 0, ...
 03068   472   NtContinue  (1244308, 0, ...
 03069   472   NtContinue  (1244308, 0, ...
 03070   472   NtContinue  (1244308, 0, ...
 03071   472   NtContinue  (1244308, 0, ...
 03072   472   NtContinue  (1244308, 0, ...
 03073   472   NtContinue  (1244308, 0, ...
 03074   472   NtContinue  (1244308, 0, ...
 03075   472   NtContinue  (1244308, 0, ...
 03076   472   NtContinue  (1244308, 0, ...
 03077   472   NtContinue  (1244308, 0, ...
 03078   472   NtContinue  (1244308, 0, ...
 03079   472   NtContinue  (1244308, 0, ...
 03080   472   NtContinue  (1244308, 0, ...
 03081   472   NtContinue  (1244308, 0, ...
 03082   472   NtContinue  (1244308, 0, ...
 03083   472   NtContinue  (1244308, 0, ...
 03084   472   NtContinue  (1244308, 0, ...
 03085   472   NtContinue  (1244308, 0, ...
 03086   472   NtContinue  (1244308, 0, ...
 03087   472   NtContinue  (1244308, 0, ...
 03088   472   NtContinue  (1244308, 0, ...
 03089   472   NtContinue  (1244308, 0, ...
 03090   472   NtContinue  (1244308, 0, ...
 03091   472   NtContinue  (1244308, 0, ...
 03092   472   NtContinue  (1244308, 0, ...
 03093   472   NtContinue  (1244308, 0, ...
 03094   472   NtContinue  (1244308, 0, ...
 03095   472   NtContinue  (1244308, 0, ...
 03096   472   NtContinue  (1244308, 0, ...
 03097   472   NtContinue  (1244308, 0, ...
 03098   472   NtContinue  (1244308, 0, ...
 03099   472   NtContinue  (1244308, 0, ...
 03100   472   NtContinue  (1244308, 0, ...
 03101   472   NtContinue  (1244308, 0, ...
 03102   472   NtContinue  (1244308, 0, ...
 03103   472   NtContinue  (1244308, 0, ...
 03104   472   NtContinue  (1244308, 0, ...
 03105   472   NtContinue  (1244308, 0, ...
 03106   472   NtContinue  (1244308, 0, ...
 03107   472   NtContinue  (1244308, 0, ...
 03108   472   NtContinue  (1244308, 0, ...
 03109   472   NtContinue  (1244308, 0, ...
 03110   472   NtContinue  (1244308, 0, ...
 03111   472   NtContinue  (1244308, 0, ...
 03112   472   NtContinue  (1244308, 0, ...
 03113   472   NtContinue  (1244308, 0, ...
 03114   472   NtContinue  (1244308, 0, ...
 03115   472   NtContinue  (1244308, 0, ...
 03116   472   NtContinue  (1244308, 0, ...
 03117   472   NtContinue  (1244308, 0, ...
 03118   472   NtContinue  (1244308, 0, ...
 03119   472   NtContinue  (1244308, 0, ...
 03120   472   NtContinue  (1244308, 0, ...
 03121   472   NtContinue  (1244308, 0, ...
 03122   472   NtContinue  (1244308, 0, ...
 03123   472   NtContinue  (1244308, 0, ...
 03124   472   NtContinue  (1244308, 0, ...
 03125   472   NtContinue  (1244308, 0, ...
 03126   472   NtContinue  (1244308, 0, ...
 03127   472   NtContinue  (1244308, 0, ...
 03128   472   NtContinue  (1244308, 0, ...
 03129   472   NtContinue  (1244308, 0, ...
 03130   472   NtContinue  (1244308, 0, ...
 03131   472   NtContinue  (1244308, 0, ...
 03132   472   NtContinue  (1244308, 0, ...
 03133   472   NtContinue  (1244308, 0, ...
 03134   472   NtContinue  (1244308, 0, ...
 03135   472   NtContinue  (1244308, 0, ...
 03136   472   NtContinue  (1244308, 0, ...
 03137   472   NtContinue  (1244308, 0, ...
 03138   472   NtContinue  (1244308, 0, ...
 03139   472   NtContinue  (1244308, 0, ...
 03140   472   NtContinue  (1244308, 0, ...
 03141   472   NtContinue  (1244308, 0, ...
 03142   472   NtContinue  (1244308, 0, ...
 03143   472   NtContinue  (1244308, 0, ...
 03144   472   NtContinue  (1244308, 0, ...
 03145   472   NtContinue  (1244308, 0, ...
 03146   472   NtContinue  (1244308, 0, ...
 03147   472   NtContinue  (1244308, 0, ...
 03148   472   NtContinue  (1244308, 0, ...
 03149   472   NtContinue  (1244308, 0, ...
 03150   472   NtContinue  (1244308, 0, ...
 03151   472   NtContinue  (1244308, 0, ...
 03152   472   NtContinue  (1244308, 0, ...
 03153   472   NtContinue  (1244308, 0, ...
 03154   472   NtContinue  (1244308, 0, ...
 03155   472   NtContinue  (1244308, 0, ...
 03156   472   NtContinue  (1244308, 0, ...
 03157   472   NtContinue  (1244308, 0, ...
 03158   472   NtContinue  (1244308, 0, ...
 03159   472   NtContinue  (1244308, 0, ...
 03160   472   NtContinue  (1244308, 0, ...
 03161   472   NtContinue  (1244308, 0, ...
 03162   472   NtContinue  (1244308, 0, ...
 03163   472   NtContinue  (1244308, 0, ...
 03164   472   NtContinue  (1244308, 0, ...
 03165   472   NtContinue  (1244308, 0, ...
 03166   472   NtContinue  (1244308, 0, ...
 03167   472   NtContinue  (1244308, 0, ...
 03168   472   NtContinue  (1244308, 0, ...
 03169   472   NtContinue  (1244308, 0, ...
 03170   472   NtContinue  (1244308, 0, ...
 03171   472   NtContinue  (1244308, 0, ...
 03172   472   NtContinue  (1244308, 0, ...
 03173   472   NtContinue  (1244308, 0, ...
 03174   472   NtContinue  (1244308, 0, ...
 03175   472   NtContinue  (1244308, 0, ...
 03176   472   NtContinue  (1244308, 0, ...
 03177   472   NtContinue  (1244308, 0, ...
 03178   472   NtContinue  (1244308, 0, ...
 03179   472   NtContinue  (1244308, 0, ...
 03180   472   NtContinue  (1244308, 0, ...
 03181   472   NtContinue  (1244308, 0, ...
 03182   472   NtContinue  (1244308, 0, ...
 03183   472   NtContinue  (1244308, 0, ...
 03184   472   NtContinue  (1244308, 0, ...
 03185   472   NtContinue  (1244308, 0, ...
 03186   472   NtContinue  (1244308, 0, ...
 03187   472   NtContinue  (1244308, 0, ...
 03188   472   NtContinue  (1244308, 0, ...
 03189   472   NtContinue  (1244308, 0, ...
 03190   472   NtContinue  (1244308, 0, ...
 03191   472   NtContinue  (1244308, 0, ...
 03192   472   NtContinue  (1244308, 0, ...
 03193   472   NtContinue  (1244308, 0, ...
 03194   472   NtContinue  (1244308, 0, ...
 03195   472   NtContinue  (1244308, 0, ...
 03196   472   NtContinue  (1244308, 0, ...
 03197   472   NtContinue  (1244308, 0, ...
 03198   472   NtContinue  (1244308, 0, ...
 03199   472   NtContinue  (1244308, 0, ...
 03200   472   NtContinue  (1244308, 0, ...
 03201   472   NtContinue  (1244308, 0, ...
 03202   472   NtContinue  (1244308, 0, ...
 03203   472   NtContinue  (1244308, 0, ...
 03204   472   NtContinue  (1244308, 0, ...
 03205   472   NtContinue  (1244308, 0, ...
 03206   472   NtContinue  (1244308, 0, ...
 03207   472   NtContinue  (1244308, 0, ...
 03208   472   NtContinue  (1244308, 0, ...
 03209   472   NtContinue  (1244308, 0, ...
 03210   472   NtContinue  (1244308, 0, ...
 03211   472   NtContinue  (1244308, 0, ...
 03212   472   NtContinue  (1244308, 0, ...
 03213   472   NtContinue  (1244308, 0, ...
 03214   472   NtContinue  (1244308, 0, ...
 03215   472   NtContinue  (1244308, 0, ...
 03216   472   NtContinue  (1244308, 0, ...
 03217   472   NtContinue  (1244308, 0, ...
 03218   472   NtContinue  (1244308, 0, ...
 03219   472   NtContinue  (1244308, 0, ...
 03220   472   NtContinue  (1244308, 0, ...
 03221   472   NtContinue  (1244308, 0, ...
 03222   472   NtContinue  (1244308, 0, ...
 03223   472   NtContinue  (1244308, 0, ...
 03224   472   NtContinue  (1244308, 0, ...
 03225   472   NtContinue  (1244308, 0, ...
 03226   472   NtContinue  (1244308, 0, ...
 03227   472   NtContinue  (1244308, 0, ...
 03228   472   NtContinue  (1244308, 0, ...
 03229   472   NtContinue  (1244308, 0, ...
 03230   472   NtContinue  (1244308, 0, ...
 03231   472   NtContinue  (1244308, 0, ...
 03232   472   NtContinue  (1244308, 0, ...
 03233   472   NtContinue  (1244308, 0, ...
 03234   472   NtContinue  (1244308, 0, ...
 03235   472   NtContinue  (1244308, 0, ...
 03236   472   NtContinue  (1244308, 0, ...
 03237   472   NtContinue  (1244308, 0, ...
 03238   472   NtContinue  (1244308, 0, ...
 03239   472   NtContinue  (1244308, 0, ...
 03240   472   NtContinue  (1244308, 0, ...
 03241   472   NtContinue  (1244308, 0, ...
 03242   472   NtContinue  (1244308, 0, ...
 03243   472   NtContinue  (1244308, 0, ...
 03244   472   NtContinue  (1244308, 0, ...
 03245   472   NtContinue  (1244308, 0, ...
 03246   472   NtContinue  (1244308, 0, ...
 03247   472   NtContinue  (1244308, 0, ...
 03248   472   NtContinue  (1244308, 0, ...
 03249   472   NtContinue  (1244308, 0, ...
 03250   472   NtContinue  (1244308, 0, ...
 03251   472   NtContinue  (1244308, 0, ...
 03252   472   NtContinue  (1244308, 0, ...
 03253   472   NtContinue  (1244308, 0, ...
 03254   472   NtContinue  (1244308, 0, ...
 03255   472   NtContinue  (1244308, 0, ...
 03256   472   NtContinue  (1244308, 0, ...
 03257   472   NtContinue  (1244308, 0, ...
 03258   472   NtContinue  (1244308, 0, ...
 03259   472   NtContinue  (1244308, 0, ...
 03260   472   NtContinue  (1244308, 0, ...
 03261   472   NtContinue  (1244308, 0, ...
 03262   472   NtContinue  (1244308, 0, ...
 03263   472   NtContinue  (1244308, 0, ...
 03264   472   NtContinue  (1244308, 0, ...
 03265   472   NtContinue  (1244308, 0, ...
 03266   472   NtContinue  (1244308, 0, ...
 03267   472   NtContinue  (1244308, 0, ...
 03268   472   NtContinue  (1244308, 0, ...
 03269   472   NtContinue  (1244308, 0, ...
 03270   472   NtContinue  (1244308, 0, ...
 03271   472   NtContinue  (1244308, 0, ...
 03272   472   NtContinue  (1244308, 0, ...
 03273   472   NtContinue  (1244308, 0, ...
 03274   472   NtContinue  (1244308, 0, ...
 03275   472   NtContinue  (1244308, 0, ...
 03276   472   NtContinue  (1244308, 0, ...
 03277   472   NtContinue  (1244308, 0, ...
 03278   472   NtContinue  (1244308, 0, ...
 03279   472   NtContinue  (1244308, 0, ...
 03280   472   NtContinue  (1244308, 0, ...
 03281   472   NtContinue  (1244308, 0, ...
 03282   472   NtContinue  (1244308, 0, ...
 03283   472   NtContinue  (1244308, 0, ...
 03284   472   NtContinue  (1244308, 0, ...
 03285   472   NtContinue  (1244308, 0, ...
 03286   472   NtContinue  (1244308, 0, ...
 03287   472   NtContinue  (1244308, 0, ...
 03288   472   NtContinue  (1244308, 0, ...
 03289   472   NtContinue  (1244308, 0, ...
 03290   472   NtContinue  (1244308, 0, ...
 03291   472   NtContinue  (1244308, 0, ...
 03292   472   NtContinue  (1244308, 0, ...
 03293   472   NtContinue  (1244308, 0, ...
 03294   472   NtContinue  (1244308, 0, ...
 03295   472   NtContinue  (1244308, 0, ...
 03296   472   NtContinue  (1244308, 0, ...
 03297   472   NtContinue  (1244308, 0, ...
 03298   472   NtContinue  (1244308, 0, ...
 03299   472   NtContinue  (1244308, 0, ...
 03300   472   NtContinue  (1244308, 0, ...
 03301   472   NtContinue  (1244308, 0, ...
 03302   472   NtContinue  (1244308, 0, ...
 03303   472   NtContinue  (1244308, 0, ...
 03304   472   NtContinue  (1244308, 0, ...
 03305   472   NtContinue  (1244308, 0, ...
 03306   472   NtContinue  (1244308, 0, ...
 03307   472   NtContinue  (1244308, 0, ...
 03308   472   NtContinue  (1244308, 0, ...
 03309   472   NtContinue  (1244308, 0, ...
 03310   472   NtContinue  (1244308, 0, ...
 03311   472   NtContinue  (1244308, 0, ...
 03312   472   NtContinue  (1244308, 0, ...
 03313   472   NtContinue  (1244308, 0, ...
 03314   472   NtContinue  (1244308, 0, ...
 03315   472   NtContinue  (1244308, 0, ...
 03316   472   NtContinue  (1244308, 0, ...
 03317   472   NtContinue  (1244308, 0, ...
 03318   472   NtContinue  (1244308, 0, ...
 03319   472   NtContinue  (1244308, 0, ...
 03320   472   NtContinue  (1244308, 0, ...
 03321   472   NtContinue  (1244308, 0, ...
 03322   472   NtContinue  (1244308, 0, ...
 03323   472   NtContinue  (1244308, 0, ...
 03324   472   NtContinue  (1244308, 0, ...
 03325   472   NtContinue  (1244308, 0, ...
 03326   472   NtContinue  (1244308, 0, ...
 03327   472   NtContinue  (1244308, 0, ...
 03328   472   NtContinue  (1244308, 0, ...
 03329   472   NtContinue  (1244308, 0, ...
 03330   472   NtContinue  (1244308, 0, ...
 03331   472   NtContinue  (1244308, 0, ...
 03332   472   NtContinue  (1244308, 0, ...
 03333   472   NtContinue  (1244308, 0, ...
 03334   472   NtContinue  (1244308, 0, ...
 03335   472   NtContinue  (1244308, 0, ...
 03336   472   NtContinue  (1244308, 0, ...
 03337   472   NtContinue  (1244308, 0, ...
 03338   472   NtContinue  (1244308, 0, ...
 03339   472   NtContinue  (1244308, 0, ...
 03340   472   NtContinue  (1244308, 0, ...
 03341   472   NtContinue  (1244308, 0, ...
 03342   472   NtContinue  (1244308, 0, ...
 03343   472   NtContinue  (1244308, 0, ...
 03344   472   NtContinue  (1244308, 0, ...
 03345   472   NtContinue  (1244308, 0, ...
 03346   472   NtContinue  (1244308, 0, ...
 03347   472   NtContinue  (1244308, 0, ...
 03348   472   NtContinue  (1244308, 0, ...
 03349   472   NtContinue  (1244308, 0, ...
 03350   472   NtContinue  (1244308, 0, ...
 03351   472   NtContinue  (1244308, 0, ...
 03352   472   NtContinue  (1244308, 0, ...
 03353   472   NtContinue  (1244308, 0, ...
 03354   472   NtContinue  (1244308, 0, ...
 03355   472   NtContinue  (1244308, 0, ...
 03356   472   NtContinue  (1244308, 0, ...
 03357   472   NtContinue  (1244308, 0, ...
 03358   472   NtContinue  (1244308, 0, ...
 03359   472   NtContinue  (1244308, 0, ...
 03360   472   NtContinue  (1244308, 0, ...
 03361   472   NtContinue  (1244308, 0, ...
 03362   472   NtContinue  (1244308, 0, ...
 03363   472   NtContinue  (1244308, 0, ...
 03364   472   NtContinue  (1244308, 0, ...
 03365   472   NtContinue  (1244308, 0, ...
 03366   472   NtContinue  (1244308, 0, ...
 03367   472   NtContinue  (1244308, 0, ...
 03368   472   NtContinue  (1244308, 0, ...
 03369   472   NtContinue  (1244308, 0, ...
 03370   472   NtContinue  (1244308, 0, ...
 03371   472   NtContinue  (1244308, 0, ...
 03372   472   NtContinue  (1244308, 0, ...
 03373   472   NtContinue  (1244308, 0, ...
 03374   472   NtContinue  (1244308, 0, ...
 03375   472   NtContinue  (1244308, 0, ...
 03376   472   NtContinue  (1244308, 0, ...
 03377   472   NtContinue  (1244308, 0, ...
 03378   472   NtContinue  (1244308, 0, ...
 03379   472   NtContinue  (1244308, 0, ...
 03380   472   NtContinue  (1244308, 0, ...
 03381   472   NtContinue  (1244308, 0, ...
 03382   472   NtContinue  (1244308, 0, ...
 03383   472   NtContinue  (1244308, 0, ...
 03384   472   NtContinue  (1244308, 0, ...
 03385   472   NtContinue  (1244308, 0, ...
 03386   472   NtContinue  (1244308, 0, ...
 03387   472   NtContinue  (1244308, 0, ...
 03388   472   NtContinue  (1244308, 0, ...
 03389   472   NtContinue  (1244308, 0, ...
 03390   472   NtContinue  (1244308, 0, ...
 03391   472   NtContinue  (1244308, 0, ...
 03392   472   NtContinue  (1244308, 0, ...
 03393   472   NtContinue  (1244308, 0, ...
 03394   472   NtContinue  (1244308, 0, ...
 03395   472   NtContinue  (1244308, 0, ...
 03396   472   NtContinue  (1244308, 0, ...
 03397   472   NtContinue  (1244308, 0, ...
 03398   472   NtContinue  (1244308, 0, ...
 03399   472   NtContinue  (1244308, 0, ...
 03400   472   NtContinue  (1244308, 0, ...
 03401   472   NtContinue  (1244308, 0, ...
 03402   472   NtContinue  (1244308, 0, ...
 03403   472   NtContinue  (1244308, 0, ...
 03404   472   NtContinue  (1244308, 0, ...
 03405   472   NtContinue  (1244308, 0, ...
 03406   472   NtContinue  (1244308, 0, ...
 03407   472   NtContinue  (1244308, 0, ...
 03408   472   NtContinue  (1244308, 0, ...
 03409   472   NtContinue  (1244308, 0, ...
 03410   472   NtContinue  (1244308, 0, ...
 03411   472   NtContinue  (1244308, 0, ...
 03412   472   NtContinue  (1244308, 0, ...
 03413   472   NtContinue  (1244308, 0, ...
 03414   472   NtContinue  (1244308, 0, ...
 03415   472   NtContinue  (1244308, 0, ...
 03416   472   NtContinue  (1244308, 0, ...
 03417   472   NtContinue  (1244308, 0, ...
 03418   472   NtContinue  (1244308, 0, ...
 03419   472   NtContinue  (1244308, 0, ...
 03420   472   NtContinue  (1244308, 0, ...
 03421   472   NtContinue  (1244308, 0, ...
 03422   472   NtContinue  (1244308, 0, ...
 03423   472   NtContinue  (1244308, 0, ...
 03424   472   NtContinue  (1244308, 0, ...
 03425   472   NtContinue  (1244308, 0, ...
 03426   472   NtContinue  (1244308, 0, ...
 03427   472   NtContinue  (1244308, 0, ...
 03428   472   NtContinue  (1244308, 0, ...
 03429   472   NtContinue  (1244308, 0, ...
 03430   472   NtContinue  (1244308, 0, ...
 03431   472   NtContinue  (1244308, 0, ...
 03432   472   NtContinue  (1244308, 0, ...
 03433   472   NtContinue  (1244308, 0, ...
 03434   472   NtContinue  (1244308, 0, ...
 03435   472   NtContinue  (1244308, 0, ...
 03436   472   NtContinue  (1244308, 0, ...
 03437   472   NtContinue  (1244308, 0, ...
 03438   472   NtContinue  (1244308, 0, ...
 03439   472   NtContinue  (1244308, 0, ...
 03440   472   NtContinue  (1244308, 0, ...
 03441   472   NtContinue  (1244308, 0, ...
 03442   472   NtContinue  (1244308, 0, ...
 03443   472   NtContinue  (1244308, 0, ...
 03444   472   NtContinue  (1244308, 0, ...
 03445   472   NtContinue  (1244308, 0, ...
 03446   472   NtContinue  (1244308, 0, ...
 03447   472   NtContinue  (1244308, 0, ...
 03448   472   NtContinue  (1244308, 0, ...
 03449   472   NtContinue  (1244308, 0, ...
 03450   472   NtContinue  (1244308, 0, ...
 03451   472   NtContinue  (1244308, 0, ...
 03452   472   NtContinue  (1244308, 0, ...
 03453   472   NtContinue  (1244308, 0, ...
 03454   472   NtContinue  (1244308, 0, ...
 03455   472   NtContinue  (1244308, 0, ...
 03456   472   NtContinue  (1244308, 0, ...
 03457   472   NtContinue  (1244308, 0, ...
 03458   472   NtContinue  (1244308, 0, ...
 03459   472   NtContinue  (1244308, 0, ...
 03460   472   NtContinue  (1244308, 0, ...
 03461   472   NtContinue  (1244308, 0, ...
 03462   472   NtContinue  (1244308, 0, ...
 03463   472   NtContinue  (1244308, 0, ...
 03464   472   NtContinue  (1244308, 0, ...
 03465   472   NtContinue  (1244308, 0, ...
 03466   472   NtContinue  (1244308, 0, ...
 03467   472   NtContinue  (1244308, 0, ...
 03468   472   NtContinue  (1244308, 0, ...
 03469   472   NtContinue  (1244308, 0, ...
 03470   472   NtContinue  (1244308, 0, ...
 03471   472   NtContinue  (1244308, 0, ...
 03472   472   NtContinue  (1244308, 0, ...
 03473   472   NtContinue  (1244308, 0, ...
 03474   472   NtContinue  (1244308, 0, ...
 03475   472   NtContinue  (1244308, 0, ...
 03476   472   NtContinue  (1244308, 0, ...
 03477   472   NtContinue  (1244308, 0, ...
 03478   472   NtContinue  (1244308, 0, ...
 03479   472   NtContinue  (1244308, 0, ...
 03480   472   NtContinue  (1244308, 0, ...
 03481   472   NtContinue  (1244308, 0, ...
 03482   472   NtContinue  (1244308, 0, ...
 03483   472   NtContinue  (1244308, 0, ...
 03484   472   NtContinue  (1244308, 0, ...
 03485   472   NtContinue  (1244308, 0, ...
 03486   472   NtContinue  (1244308, 0, ...
 03487   472   NtContinue  (1244308, 0, ...
 03488   472   NtContinue  (1244308, 0, ...
 03489   472   NtContinue  (1244308, 0, ...
 03490   472   NtContinue  (1244308, 0, ...
 03491   472   NtContinue  (1244308, 0, ...
 03492   472   NtContinue  (1244308, 0, ...
 03493   472   NtContinue  (1244308, 0, ...
 03494   472   NtContinue  (1244308, 0, ...
 03495   472   NtContinue  (1244308, 0, ...
 03496   472   NtContinue  (1244308, 0, ...
 03497   472   NtContinue  (1244308, 0, ...
 03498   472   NtContinue  (1244308, 0, ...
 03499   472   NtContinue  (1244308, 0, ...
 03500   472   NtContinue  (1244308, 0, ...
 03501   472   NtContinue  (1244308, 0, ...
 03502   472   NtContinue  (1244308, 0, ...
 03503   472   NtContinue  (1244308, 0, ...
 03504   472   NtContinue  (1244308, 0, ...
 03505   472   NtContinue  (1244308, 0, ...
 03506   472   NtContinue  (1244308, 0, ...
 03507   472   NtContinue  (1244308, 0, ...
 03508   472   NtContinue  (1244308, 0, ...
 03509   472   NtContinue  (1244308, 0, ...
 03510   472   NtContinue  (1244308, 0, ...
 03511   472   NtContinue  (1244308, 0, ...
 03512   472   NtContinue  (1244308, 0, ...
 03513   472   NtContinue  (1244308, 0, ...
 03514   472   NtContinue  (1244308, 0, ...
 03515   472   NtContinue  (1244308, 0, ...
 03516   472   NtContinue  (1244308, 0, ...
 03517   472   NtContinue  (1244308, 0, ...
 03518   472   NtContinue  (1244308, 0, ...
 03519   472   NtContinue  (1244308, 0, ...
 03520   472   NtContinue  (1244308, 0, ...
 03521   472   NtContinue  (1244308, 0, ...
 03522   472   NtContinue  (1244308, 0, ...
 03523   472   NtContinue  (1244308, 0, ...
 03524   472   NtContinue  (1244308, 0, ...
 03525   472   NtContinue  (1244308, 0, ...
 03526   472   NtContinue  (1244308, 0, ...
 03527   472   NtContinue  (1244308, 0, ...
 03528   472   NtContinue  (1244308, 0, ...
 03529   472   NtContinue  (1244308, 0, ...
 03530   472   NtContinue  (1244308, 0, ...
 03531   472   NtContinue  (1244308, 0, ...
 03532   472   NtContinue  (1244308, 0, ...
 03533   472   NtContinue  (1244308, 0, ...
 03534   472   NtContinue  (1244308, 0, ...
 03535   472   NtContinue  (1244308, 0, ...
 03536   472   NtContinue  (1244308, 0, ...
 03537   472   NtContinue  (1244308, 0, ...
 03538   472   NtContinue  (1244308, 0, ...
 03539   472   NtContinue  (1244308, 0, ...
 03540   472   NtContinue  (1244308, 0, ...
 03541   472   NtContinue  (1244308, 0, ...
 03542   472   NtContinue  (1244308, 0, ...
 03543   472   NtContinue  (1244308, 0, ...
 03544   472   NtContinue  (1244308, 0, ...
 03545   472   NtContinue  (1244308, 0, ...
 03546   472   NtContinue  (1244308, 0, ...
 03547   472   NtContinue  (1244308, 0, ...
 03548   472   NtContinue  (1244308, 0, ...
 03549   472   NtContinue  (1244308, 0, ...
 03550   472   NtContinue  (1244308, 0, ...
 03551   472   NtContinue  (1244308, 0, ...
 03552   472   NtContinue  (1244308, 0, ...
 03553   472   NtContinue  (1244308, 0, ...
 03554   472   NtContinue  (1244308, 0, ...
 03555   472   NtContinue  (1244308, 0, ...
 03556   472   NtContinue  (1244308, 0, ...
 03557   472   NtContinue  (1244308, 0, ...
 03558   472   NtContinue  (1244308, 0, ...
 03559   472   NtContinue  (1244308, 0, ...
 03560   472   NtContinue  (1244308, 0, ...
 03561   472   NtContinue  (1244308, 0, ...
 03562   472   NtContinue  (1244308, 0, ...
 03563   472   NtContinue  (1244308, 0, ...
 03564   472   NtContinue  (1244308, 0, ...
 03565   472   NtContinue  (1244308, 0, ...
 03566   472   NtContinue  (1244308, 0, ...
 03567   472   NtContinue  (1244308, 0, ...
 03568   472   NtContinue  (1244308, 0, ...
 03569   472   NtContinue  (1244308, 0, ...
 03570   472   NtContinue  (1244308, 0, ...
 03571   472   NtContinue  (1244308, 0, ...
 03572   472   NtContinue  (1244308, 0, ...
 03573   472   NtContinue  (1244308, 0, ...
 03574   472   NtContinue  (1244308, 0, ...
 03575   472   NtContinue  (1244308, 0, ...
 03576   472   NtContinue  (1244308, 0, ...
 03577   472   NtContinue  (1244308, 0, ...
 03578   472   NtContinue  (1244308, 0, ...
 03579   472   NtContinue  (1244308, 0, ...
 03580   472   NtContinue  (1244308, 0, ...
 03581   472   NtContinue  (1244308, 0, ...
 03582   472   NtContinue  (1244308, 0, ...
 03583   472   NtContinue  (1244308, 0, ...
 03584   472   NtContinue  (1244308, 0, ...
 03585   472   NtContinue  (1244308, 0, ...
 03586   472   NtContinue  (1244308, 0, ...
 03587   472   NtContinue  (1244308, 0, ...
 03588   472   NtContinue  (1244308, 0, ...
 03589   472   NtContinue  (1244308, 0, ...
 03590   472   NtContinue  (1244308, 0, ...
 03591   472   NtContinue  (1244308, 0, ...
 03592   472   NtContinue  (1244308, 0, ...
 03593   472   NtContinue  (1244308, 0, ...
 03594   472   NtContinue  (1244308, 0, ...
 03595   472   NtContinue  (1244308, 0, ...
 03596   472   NtContinue  (1244308, 0, ...
 03597   472   NtContinue  (1244308, 0, ...
 03598   472   NtContinue  (1244308, 0, ...
 03599   472   NtContinue  (1244308, 0, ...
 03600   472   NtContinue  (1244308, 0, ...
 03601   472   NtContinue  (1244308, 0, ...
 03602   472   NtContinue  (1244308, 0, ...
 03603   472   NtContinue  (1244308, 0, ...
 03604   472   NtContinue  (1244308, 0, ...
 03605   472   NtContinue  (1244308, 0, ...
 03606   472   NtContinue  (1244308, 0, ...
 03607   472   NtContinue  (1244308, 0, ...
 03608   472   NtContinue  (1244308, 0, ...
 03609   472   NtContinue  (1244308, 0, ...
 03610   472   NtContinue  (1244308, 0, ...
 03611   472   NtContinue  (1244308, 0, ...
 03612   472   NtContinue  (1244308, 0, ...
 03613   472   NtContinue  (1244308, 0, ...
 03614   472   NtContinue  (1244308, 0, ...
 03615   472   NtContinue  (1244308, 0, ...
 03616   472   NtContinue  (1244308, 0, ...
 03617   472   NtContinue  (1244308, 0, ...
 03618   472   NtContinue  (1244308, 0, ...
 03619   472   NtContinue  (1244308, 0, ...
 03620   472   NtContinue  (1244308, 0, ...
 03621   472   NtContinue  (1244308, 0, ...
 03622   472   NtContinue  (1244308, 0, ...
 03623   472   NtContinue  (1244308, 0, ...
 03624   472   NtContinue  (1244308, 0, ...
 03625   472   NtContinue  (1244308, 0, ...
 03626   472   NtContinue  (1244308, 0, ...
 03627   472   NtContinue  (1244308, 0, ...
 03628   472   NtContinue  (1244308, 0, ...
 03629   472   NtContinue  (1244308, 0, ...
 03630   472   NtContinue  (1244308, 0, ...
 03631   472   NtContinue  (1244308, 0, ...
 03632   472   NtContinue  (1244308, 0, ...
 03633   472   NtContinue  (1244308, 0, ...
 03634   472   NtContinue  (1244308, 0, ...
 03635   472   NtContinue  (1244308, 0, ...
 03636   472   NtContinue  (1244308, 0, ...
 03637   472   NtContinue  (1244308, 0, ...
 03638   472   NtContinue  (1244308, 0, ...
 03639   472   NtContinue  (1244308, 0, ...
 03640   472   NtContinue  (1244308, 0, ...
 03641   472   NtContinue  (1244308, 0, ...
 03642   472   NtContinue  (1244308, 0, ...
 03643   472   NtContinue  (1244308, 0, ...
 03644   472   NtContinue  (1244308, 0, ...
 03645   472   NtContinue  (1244308, 0, ...
 03646   472   NtContinue  (1244308, 0, ...
 03647   472   NtContinue  (1244308, 0, ...
 03648   472   NtContinue  (1244308, 0, ...
 03649   472   NtContinue  (1244308, 0, ...
 03650   472   NtContinue  (1244308, 0, ...
 03651   472   NtContinue  (1244308, 0, ...
 03652   472   NtContinue  (1244308, 0, ...
 03653   472   NtContinue  (1244308, 0, ...
 03654   472   NtContinue  (1244308, 0, ...
 03655   472   NtContinue  (1244308, 0, ...
 03656   472   NtContinue  (1244308, 0, ...
 03657   472   NtContinue  (1244308, 0, ...
 03658   472   NtContinue  (1244308, 0, ...
 03659   472   NtContinue  (1244308, 0, ...
 03660   472   NtContinue  (1244308, 0, ...
 03661   472   NtContinue  (1244308, 0, ...
 03662   472   NtContinue  (1244308, 0, ...
 03663   472   NtContinue  (1244308, 0, ...
 03664   472   NtContinue  (1244308, 0, ...
 03665   472   NtContinue  (1244308, 0, ...
 03666   472   NtContinue  (1244308, 0, ...
 03667   472   NtContinue  (1244308, 0, ...
 03668   472   NtContinue  (1244308, 0, ...
 03669   472   NtContinue  (1244308, 0, ...
 03670   472   NtContinue  (1244308, 0, ...
 03671   472   NtContinue  (1244308, 0, ...
 03672   472   NtContinue  (1244308, 0, ...
 03673   472   NtContinue  (1244308, 0, ...
 03674   472   NtContinue  (1244308, 0, ...
 03675   472   NtContinue  (1244308, 0, ...
 03676   472   NtContinue  (1244308, 0, ...
 03677   472   NtContinue  (1244308, 0, ...
 03678   472   NtContinue  (1244308, 0, ...
 03679   472   NtContinue  (1244308, 0, ...
 03680   472   NtContinue  (1244308, 0, ...
 03681   472   NtContinue  (1244308, 0, ...
 03682   472   NtContinue  (1244308, 0, ...
 03683   472   NtContinue  (1244308, 0, ...
 03684   472   NtContinue  (1244308, 0, ...
 03685   472   NtContinue  (1244308, 0, ...
 03686   472   NtContinue  (1244308, 0, ...
 03687   472   NtContinue  (1244308, 0, ...
 03688   472   NtContinue  (1244308, 0, ...
 03689   472   NtContinue  (1244308, 0, ...
 03690   472   NtContinue  (1244308, 0, ...
 03691   472   NtContinue  (1244308, 0, ...
 03692   472   NtContinue  (1244308, 0, ...
 03693   472   NtContinue  (1244308, 0, ...
 03694   472   NtContinue  (1244308, 0, ...
 03695   472   NtContinue  (1244308, 0, ...
 03696   472   NtContinue  (1244308, 0, ...
 03697   472   NtContinue  (1244308, 0, ...
 03698   472   NtContinue  (1244308, 0, ...
 03699   472   NtContinue  (1244308, 0, ...
 03700   472   NtContinue  (1244308, 0, ...
 03701   472   NtContinue  (1244308, 0, ...
 03702   472   NtContinue  (1244308, 0, ...
 03703   472   NtContinue  (1244308, 0, ...
 03704   472   NtContinue  (1244308, 0, ...
 03705   472   NtContinue  (1244308, 0, ...
 03706   472   NtContinue  (1244308, 0, ...
 03707   472   NtContinue  (1244308, 0, ...
 03708   472   NtContinue  (1244308, 0, ...
 03709   472   NtContinue  (1244308, 0, ...
 03710   472   NtContinue  (1244308, 0, ...
 03711   472   NtContinue  (1244308, 0, ...
 03712   472   NtContinue  (1244308, 0, ...
 03713   472   NtContinue  (1244308, 0, ...
 03714   472   NtContinue  (1244308, 0, ...
 03715   472   NtContinue  (1244308, 0, ...
 03716   472   NtContinue  (1244308, 0, ...
 03717   472   NtContinue  (1244308, 0, ...
 03718   472   NtContinue  (1244308, 0, ...
 03719   472   NtContinue  (1244308, 0, ...
 03720   472   NtContinue  (1244308, 0, ...
 03721   472   NtContinue  (1244308, 0, ...
 03722   472   NtContinue  (1244308, 0, ...
 03723   472   NtContinue  (1244308, 0, ...
 03724   472   NtContinue  (1244308, 0, ...
 03725   472   NtContinue  (1244308, 0, ...
 03726   472   NtContinue  (1244308, 0, ...
 03727   472   NtContinue  (1244308, 0, ...
 03728   472   NtContinue  (1244308, 0, ...
 03729   472   NtContinue  (1244308, 0, ...
 03730   472   NtContinue  (1244308, 0, ...
 03731   472   NtContinue  (1244308, 0, ...
 03732   472   NtContinue  (1244308, 0, ...
 03733   472   NtContinue  (1244308, 0, ...
 03734   472   NtContinue  (1244308, 0, ...
 03735   472   NtContinue  (1244308, 0, ...
 03736   472   NtContinue  (1244308, 0, ...
 03737   472   NtContinue  (1244308, 0, ...
 03738   472   NtContinue  (1244308, 0, ...
 03739   472   NtContinue  (1244308, 0, ...
 03740   472   NtContinue  (1244308, 0, ...
 03741   472   NtContinue  (1244308, 0, ...
 03742   472   NtContinue  (1244308, 0, ...
 03743   472   NtContinue  (1244308, 0, ...
 03744   472   NtContinue  (1244308, 0, ...
 03745   472   NtContinue  (1244308, 0, ...
 03746   472   NtContinue  (1244308, 0, ...
 03747   472   NtContinue  (1244308, 0, ...
 03748   472   NtContinue  (1244308, 0, ...
 03749   472   NtContinue  (1244308, 0, ...
 03750   472   NtContinue  (1244308, 0, ...
 03751   472   NtContinue  (1244308, 0, ...
 03752   472   NtContinue  (1244308, 0, ...
 03753   472   NtContinue  (1244308, 0, ...
 03754   472   NtContinue  (1244308, 0, ...
 03755   472   NtContinue  (1244308, 0, ...
 03756   472   NtContinue  (1244308, 0, ...
 03757   472   NtContinue  (1244308, 0, ...
 03758   472   NtContinue  (1244308, 0, ...
 03759   472   NtContinue  (1244308, 0, ...
 03760   472   NtContinue  (1244308, 0, ...
 03761   472   NtContinue  (1244308, 0, ...
 03762   472   NtContinue  (1244308, 0, ...
 03763   472   NtContinue  (1244308, 0, ...
 03764   472   NtContinue  (1244308, 0, ...
 03765   472   NtContinue  (1244308, 0, ...
 03766   472   NtContinue  (1244308, 0, ...
 03767   472   NtContinue  (1244308, 0, ...
 03768   472   NtContinue  (1244308, 0, ...
 03769   472   NtContinue  (1244308, 0, ...
 03770   472   NtContinue  (1244308, 0, ...
 03771   472   NtContinue  (1244308, 0, ...
 03772   472   NtContinue  (1244308, 0, ...
 03773   472   NtContinue  (1244308, 0, ...
 03774   472   NtContinue  (1244308, 0, ...
 03775   472   NtContinue  (1244308, 0, ...
 03776   472   NtContinue  (1244308, 0, ...
 03777   472   NtContinue  (1244308, 0, ...
 03778   472   NtContinue  (1244308, 0, ...
 03779   472   NtContinue  (1244308, 0, ...
 03780   472   NtContinue  (1244308, 0, ...
 03781   472   NtContinue  (1244308, 0, ...
 03782   472   NtContinue  (1244308, 0, ...
 03783   472   NtContinue  (1244308, 0, ...
 03784   472   NtContinue  (1244308, 0, ...
 03785   472   NtContinue  (1244308, 0, ...
 03786   472   NtContinue  (1244308, 0, ...
 03787   472   NtContinue  (1244308, 0, ...
 03788   472   NtContinue  (1244308, 0, ...
 03789   472   NtContinue  (1244308, 0, ...
 03790   472   NtContinue  (1244308, 0, ...
 03791   472   NtContinue  (1244308, 0, ...
 03792   472   NtContinue  (1244308, 0, ...
 03793   472   NtContinue  (1244308, 0, ...
 03794   472   NtContinue  (1244308, 0, ...
 03795   472   NtContinue  (1244308, 0, ...
 03796   472   NtContinue  (1244308, 0, ...
 03797   472   NtContinue  (1244308, 0, ...
 03798   472   NtContinue  (1244308, 0, ...
 03799   472   NtContinue  (1244308, 0, ...
 03800   472   NtContinue  (1244308, 0, ...
 03801   472   NtContinue  (1244308, 0, ...
 03802   472   NtContinue  (1244308, 0, ...
 03803   472   NtContinue  (1244308, 0, ...
 03804   472   NtContinue  (1244308, 0, ...
 03805   472   NtContinue  (1244308, 0, ...
 03806   472   NtContinue  (1244308, 0, ...
 03807   472   NtContinue  (1244308, 0, ...
 03808   472   NtContinue  (1244308, 0, ...
 03809   472   NtContinue  (1244308, 0, ...
 03810   472   NtContinue  (1244308, 0, ...
 03811   472   NtContinue  (1244308, 0, ...
 03812   472   NtContinue  (1244308, 0, ...
 03813   472   NtContinue  (1244308, 0, ...
 03814   472   NtContinue  (1244308, 0, ...
 03815   472   NtContinue  (1244308, 0, ...
 03816   472   NtContinue  (1244308, 0, ...
 03817   472   NtContinue  (1244308, 0, ...
 03818   472   NtContinue  (1244308, 0, ...
 03819   472   NtContinue  (1244308, 0, ...
 03820   472   NtContinue  (1244308, 0, ...
 03821   472   NtContinue  (1244308, 0, ...
 03822   472   NtContinue  (1244308, 0, ...
 03823   472   NtContinue  (1244308, 0, ...
 03824   472   NtContinue  (1244308, 0, ...
 03825   472   NtContinue  (1244308, 0, ...
 03826   472   NtContinue  (1244308, 0, ...
 03827   472   NtContinue  (1244308, 0, ...
 03828   472   NtContinue  (1244308, 0, ...
 03829   472   NtContinue  (1244308, 0, ...
 03830   472   NtContinue  (1244308, 0, ...
 03831   472   NtContinue  (1244308, 0, ...
 03832   472   NtContinue  (1244308, 0, ...
 03833   472   NtContinue  (1244308, 0, ...
 03834   472   NtContinue  (1244308, 0, ...
 03835   472   NtContinue  (1244308, 0, ...
 03836   472   NtContinue  (1244308, 0, ...
 03837   472   NtContinue  (1244308, 0, ...
 03838   472   NtContinue  (1244308, 0, ...
 03839   472   NtContinue  (1244308, 0, ...
 03840   472   NtContinue  (1244308, 0, ...
 03841   472   NtContinue  (1244308, 0, ...
 03842   472   NtContinue  (1244308, 0, ...
 03843   472   NtContinue  (1244308, 0, ...
 03844   472   NtContinue  (1244308, 0, ...
 03845   472   NtContinue  (1244308, 0, ...
 03846   472   NtContinue  (1244308, 0, ...
 03847   472   NtContinue  (1244308, 0, ...
 03848   472   NtContinue  (1244308, 0, ...
 03849   472   NtContinue  (1244308, 0, ...
 03850   472   NtContinue  (1244308, 0, ...
 03851   472   NtContinue  (1244308, 0, ...
 03852   472   NtContinue  (1244308, 0, ...
 03853   472   NtContinue  (1244308, 0, ...
 03854   472   NtContinue  (1244308, 0, ...
 03855   472   NtContinue  (1244308, 0, ...
 03856   472   NtContinue  (1244308, 0, ...
 03857   472   NtContinue  (1244308, 0, ...
 03858   472   NtContinue  (1244308, 0, ...
 03859   472   NtContinue  (1244308, 0, ...
 03860   472   NtContinue  (1244308, 0, ...
 03861   472   NtContinue  (1244308, 0, ...
 03862   472   NtContinue  (1244308, 0, ...
 03863   472   NtContinue  (1244308, 0, ...
 03864   472   NtContinue  (1244308, 0, ...
 03865   472   NtContinue  (1244308, 0, ...
 03866   472   NtContinue  (1244308, 0, ...
 03867   472   NtContinue  (1244308, 0, ...
 03868   472   NtContinue  (1244308, 0, ...
 03869   472   NtContinue  (1244308, 0, ...
 03870   472   NtContinue  (1244308, 0, ...
 03871   472   NtContinue  (1244308, 0, ...
 03872   472   NtContinue  (1244308, 0, ...
 03873   472   NtContinue  (1244308, 0, ...
 03874   472   NtContinue  (1244308, 0, ...
 03875   472   NtContinue  (1244308, 0, ...
 03876   472   NtContinue  (1244308, 0, ...
 03877   472   NtContinue  (1244308, 0, ...
 03878   472   NtContinue  (1244308, 0, ...
 03879   472   NtContinue  (1244308, 0, ...
 03880   472   NtContinue  (1244308, 0, ...
 03881   472   NtContinue  (1244308, 0, ...
 03882   472   NtContinue  (1244308, 0, ...
 03883   472   NtContinue  (1244308, 0, ...
 03884   472   NtContinue  (1244308, 0, ...
 03885   472   NtContinue  (1244308, 0, ...
 03886   472   NtContinue  (1244308, 0, ...
 03887   472   NtContinue  (1244308, 0, ...
 03888   472   NtContinue  (1244308, 0, ...
 03889   472   NtContinue  (1244308, 0, ...
 03890   472   NtContinue  (1244308, 0, ...
 03891   472   NtContinue  (1244308, 0, ...
 03892   472   NtContinue  (1244308, 0, ...
 03893   472   NtContinue  (1244308, 0, ...
 03894   472   NtContinue  (1244308, 0, ...
 03895   472   NtContinue  (1244308, 0, ...
 03896   472   NtContinue  (1244308, 0, ...
 03897   472   NtContinue  (1244308, 0, ...
 03898   472   NtContinue  (1244308, 0, ...
 03899   472   NtContinue  (1244308, 0, ...
 03900   472   NtContinue  (1244308, 0, ...
 03901   472   NtContinue  (1244308, 0, ...
 03902   472   NtContinue  (1244308, 0, ...
 03903   472   NtContinue  (1244308, 0, ...
 03904   472   NtContinue  (1244308, 0, ...
 03905   472   NtContinue  (1244308, 0, ...
 03906   472   NtContinue  (1244308, 0, ...
 03907   472   NtContinue  (1244308, 0, ...
 03908   472   NtContinue  (1244308, 0, ...
 03909   472   NtContinue  (1244308, 0, ...
 03910   472   NtContinue  (1244308, 0, ...
 03911   472   NtContinue  (1244308, 0, ...
 03912   472   NtContinue  (1244308, 0, ...
 03913   472   NtContinue  (1244308, 0, ...
 03914   472   NtContinue  (1244308, 0, ...
 03915   472   NtContinue  (1244308, 0, ...
 03916   472   NtContinue  (1244308, 0, ...
 03917   472   NtContinue  (1244308, 0, ...
 03918   472   NtContinue  (1244308, 0, ...
 03919   472   NtContinue  (1244308, 0, ...
 03920   472   NtContinue  (1244308, 0, ...
 03921   472   NtContinue  (1244308, 0, ...
 03922   472   NtContinue  (1244308, 0, ...
 03923   472   NtContinue  (1244308, 0, ...
 03924   472   NtContinue  (1244308, 0, ...
 03925   472   NtContinue  (1244308, 0, ...
 03926   472   NtContinue  (1244308, 0, ...
 03927   472   NtContinue  (1244308, 0, ...
 03928   472   NtContinue  (1244308, 0, ...
 03929   472   NtContinue  (1244308, 0, ...
 03930   472   NtContinue  (1244308, 0, ...
 03931   472   NtContinue  (1244308, 0, ...
 03932   472   NtContinue  (1244308, 0, ...
 03933   472   NtContinue  (1244308, 0, ...
 03934   472   NtContinue  (1244308, 0, ...
 03935   472   NtContinue  (1244308, 0, ...
 03936   472   NtContinue  (1244308, 0, ...
 03937   472   NtContinue  (1244308, 0, ...
 03938   472   NtContinue  (1244308, 0, ...
 03939   472   NtContinue  (1244308, 0, ...
 03940   472   NtContinue  (1244308, 0, ...
 03941   472   NtContinue  (1244308, 0, ...
 03942   472   NtContinue  (1244308, 0, ...
 03943   472   NtContinue  (1244308, 0, ...
 03944   472   NtContinue  (1244308, 0, ...
 03945   472   NtContinue  (1244308, 0, ...
 03946   472   NtContinue  (1244308, 0, ...
 03947   472   NtContinue  (1244308, 0, ...
 03948   472   NtContinue  (1244308, 0, ...
 03949   472   NtContinue  (1244308, 0, ...
 03950   472   NtContinue  (1244308, 0, ...
 03951   472   NtContinue  (1244308, 0, ...
 03952   472   NtContinue  (1244308, 0, ...
 03953   472   NtContinue  (1244308, 0, ...
 03954   472   NtContinue  (1244308, 0, ...
 03955   472   NtContinue  (1244308, 0, ...
 03956   472   NtContinue  (1244308, 0, ...
 03957   472   NtContinue  (1244308, 0, ...
 03958   472   NtContinue  (1244308, 0, ...
 03959   472   NtContinue  (1244308, 0, ...
 03960   472   NtContinue  (1244308, 0, ...
 03961   472   NtContinue  (1244308, 0, ...
 03962   472   NtContinue  (1244308, 0, ...
 03963   472   NtContinue  (1244308, 0, ...
 03964   472   NtContinue  (1244308, 0, ...
 03965   472   NtContinue  (1244308, 0, ...
 03966   472   NtContinue  (1244308, 0, ...
 03967   472   NtContinue  (1244308, 0, ...
 03968   472   NtContinue  (1244308, 0, ...
 03969   472   NtContinue  (1244308, 0, ...
 03970   472   NtContinue  (1244308, 0, ...
 03971   472   NtContinue  (1244308, 0, ...
 03972   472   NtContinue  (1244308, 0, ...
 03973   472   NtContinue  (1244308, 0, ...
 03974   472   NtContinue  (1244308, 0, ...
 03975   472   NtContinue  (1244308, 0, ...
 03976   472   NtContinue  (1244308, 0, ...
 03977   472   NtContinue  (1244308, 0, ...
 03978   472   NtContinue  (1244308, 0, ...
 03979   472   NtContinue  (1244308, 0, ...
 03980   472   NtContinue  (1244308, 0, ...
 03981   472   NtContinue  (1244308, 0, ...
 03982   472   NtContinue  (1244308, 0, ...
 03983   472   NtContinue  (1244308, 0, ...
 03984   472   NtContinue  (1244308, 0, ...
 03985   472   NtContinue  (1244308, 0, ...
 03986   472   NtContinue  (1244308, 0, ...
 03987   472   NtContinue  (1244308, 0, ...
 03988   472   NtContinue  (1244308, 0, ...
 03989   472   NtContinue  (1244308, 0, ...
 03990   472   NtContinue  (1244308, 0, ...
 03991   472   NtContinue  (1244308, 0, ...
 03992   472   NtContinue  (1244308, 0, ...
 03993   472   NtContinue  (1244308, 0, ...
 03994   472   NtContinue  (1244308, 0, ...
 03995   472   NtContinue  (1244308, 0, ...
 03996   472   NtContinue  (1244308, 0, ...
 03997   472   NtContinue  (1244308, 0, ...
 03998   472   NtContinue  (1244308, 0, ...
 03999   472   NtContinue  (1244308, 0, ...
 04000   472   NtContinue  (1244308, 0, ...
 04001   472   NtContinue  (1244308, 0, ...
 04002   472   NtContinue  (1244308, 0, ...
 04003   472   NtContinue  (1244308, 0, ...
 04004   472   NtContinue  (1244308, 0, ...
 04005   472   NtContinue  (1244308, 0, ...
 04006   472   NtContinue  (1244308, 0, ...
 04007   472   NtContinue  (1244308, 0, ...
 04008   472   NtContinue  (1244308, 0, ...
 04009   472   NtContinue  (1244308, 0, ...
 04010   472   NtContinue  (1244308, 0, ...
 04011   472   NtContinue  (1244308, 0, ...
 04012   472   NtContinue  (1244308, 0, ...
 04013   472   NtContinue  (1244308, 0, ...
 04014   472   NtContinue  (1244308, 0, ...
 04015   472   NtContinue  (1244308, 0, ...
 04016   472   NtContinue  (1244308, 0, ...
 04017   472   NtContinue  (1244308, 0, ...
 04018   472   NtContinue  (1244308, 0, ...
 04019   472   NtContinue  (1244308, 0, ...
 04020   472   NtContinue  (1244308, 0, ...
 04021   472   NtContinue  (1244308, 0, ...
 04022   472   NtContinue  (1244308, 0, ...
 04023   472   NtContinue  (1244308, 0, ...
 04024   472   NtContinue  (1244308, 0, ...
 04025   472   NtContinue  (1244308, 0, ...
 04026   472   NtContinue  (1244308, 0, ...
 04027   472   NtContinue  (1244308, 0, ...
 04028   472   NtContinue  (1244308, 0, ...
 04029   472   NtContinue  (1244308, 0, ...
 04030   472   NtContinue  (1244308, 0, ...
 04031   472   NtContinue  (1244308, 0, ...
 04032   472   NtContinue  (1244308, 0, ...
 04033   472   NtContinue  (1244308, 0, ...
 04034   472   NtContinue  (1244308, 0, ...
 04035   472   NtContinue  (1244308, 0, ...
 04036   472   NtContinue  (1244308, 0, ...
 04037   472   NtContinue  (1244308, 0, ...
 04038   472   NtContinue  (1244308, 0, ...
 04039   472   NtContinue  (1244308, 0, ...
 04040   472   NtContinue  (1244308, 0, ...
 04041   472   NtContinue  (1244308, 0, ...
 04042   472   NtContinue  (1244308, 0, ...
 04043   472   NtContinue  (1244308, 0, ...
 04044   472   NtContinue  (1244308, 0, ...
 04045   472   NtContinue  (1244308, 0, ...
 04046   472   NtContinue  (1244308, 0, ...
 04047   472   NtContinue  (1244308, 0, ...
 04048   472   NtContinue  (1244308, 0, ...
 04049   472   NtContinue  (1244308, 0, ...
 04050   472   NtContinue  (1244308, 0, ...
 04051   472   NtContinue  (1244308, 0, ...
 04052   472   NtContinue  (1244308, 0, ...
 04053   472   NtContinue  (1244308, 0, ...
 04054   472   NtContinue  (1244308, 0, ...
 04055   472   NtContinue  (1244308, 0, ...
 04056   472   NtContinue  (1244308, 0, ...
 04057   472   NtContinue  (1244308, 0, ...
 04058   472   NtContinue  (1244308, 0, ...
 04059   472   NtContinue  (1244308, 0, ...
 04060   472   NtContinue  (1244308, 0, ...
 04061   472   NtContinue  (1244308, 0, ...
 04062   472   NtContinue  (1244308, 0, ...
 04063   472   NtContinue  (1244308, 0, ...
 04064   472   NtContinue  (1244308, 0, ...
 04065   472   NtContinue  (1244308, 0, ...
 04066   472   NtContinue  (1244308, 0, ...
 04067   472   NtContinue  (1244308, 0, ...
 04068   472   NtContinue  (1244308, 0, ...
 04069   472   NtContinue  (1244308, 0, ...
 04070   472   NtContinue  (1244308, 0, ...
 04071   472   NtContinue  (1244308, 0, ...
 04072   472   NtContinue  (1244308, 0, ...
 04073   472   NtContinue  (1244308, 0, ...
 04074   472   NtContinue  (1244308, 0, ...
 04075   472   NtContinue  (1244308, 0, ...
 04076   472   NtContinue  (1244308, 0, ...
 04077   472   NtContinue  (1244308, 0, ...
 04078   472   NtContinue  (1244308, 0, ...
 04079   472   NtContinue  (1244308, 0, ...
 04080   472   NtContinue  (1244308, 0, ...
 04081   472   NtContinue  (1244308, 0, ...
 04082   472   NtContinue  (1244308, 0, ...
 04083   472   NtContinue  (1244308, 0, ...
 04084   472   NtContinue  (1244308, 0, ...
 04085   472   NtContinue  (1244308, 0, ...
 04086   472   NtContinue  (1244308, 0, ...
 04087   472   NtContinue  (1244308, 0, ...
 04088   472   NtContinue  (1244308, 0, ...
 04089   472   NtContinue  (1244308, 0, ...
 04090   472   NtContinue  (1244308, 0, ...
 04091   472   NtContinue  (1244308, 0, ...
 04092   472   NtContinue  (1244308, 0, ...
 04093   472   NtContinue  (1244308, 0, ...
 04094   472   NtContinue  (1244308, 0, ...
 04095   472   NtContinue  (1244308, 0, ...
 04096   472   NtContinue  (1244308, 0, ...
 04097   472   NtContinue  (1244308, 0, ...
 04098   472   NtContinue  (1244308, 0, ...
 04099   472   NtContinue  (1244308, 0, ...
 04100   472   NtContinue  (1244308, 0, ...
 04101   472   NtContinue  (1244308, 0, ...
 04102   472   NtContinue  (1244308, 0, ...
 04103   472   NtContinue  (1244308, 0, ...
 04104   472   NtContinue  (1244308, 0, ...
 04105   472   NtContinue  (1244308, 0, ...
 04106   472   NtContinue  (1244308, 0, ...
 04107   472   NtContinue  (1244308, 0, ...
 04108   472   NtContinue  (1244308, 0, ...
 04109   472   NtContinue  (1244308, 0, ...
 04110   472   NtContinue  (1244308, 0, ...
 04111   472   NtContinue  (1244308, 0, ...
 04112   472   NtContinue  (1244308, 0, ...
 04113   472   NtContinue  (1244308, 0, ...
 04114   472   NtContinue  (1244308, 0, ...
 04115   472   NtContinue  (1244308, 0, ...
 04116   472   NtContinue  (1244308, 0, ...
 04117   472   NtContinue  (1244308, 0, ...
 04118   472   NtContinue  (1244308, 0, ...
 04119   472   NtContinue  (1244308, 0, ...
 04120   472   NtContinue  (1244308, 0, ...
 04121   472   NtContinue  (1244308, 0, ...
 04122   472   NtContinue  (1244308, 0, ...
 04123   472   NtContinue  (1244308, 0, ...
 04124   472   NtContinue  (1244308, 0, ...
 04125   472   NtContinue  (1244308, 0, ...
 04126   472   NtContinue  (1244308, 0, ...
 04127   472   NtContinue  (1244308, 0, ...
 04128   472   NtContinue  (1244308, 0, ...
 04129   472   NtContinue  (1244308, 0, ...
 04130   472   NtContinue  (1244308, 0, ...
 04131   472   NtContinue  (1244308, 0, ...
 04132   472   NtContinue  (1244308, 0, ...
 04133   472   NtContinue  (1244308, 0, ...
 04134   472   NtContinue  (1244308, 0, ...
 04135   472   NtContinue  (1244308, 0, ...
 04136   472   NtContinue  (1244308, 0, ...
 04137   472   NtContinue  (1244308, 0, ...
 04138   472   NtContinue  (1244308, 0, ...
 04139   472   NtContinue  (1244308, 0, ...
 04140   472   NtContinue  (1244308, 0, ...
 04141   472   NtContinue  (1244308, 0, ...
 04142   472   NtContinue  (1244308, 0, ...
 04143   472   NtContinue  (1244308, 0, ...
 04144   472   NtContinue  (1244308, 0, ...
 04145   472   NtContinue  (1244308, 0, ...
 04146   472   NtContinue  (1244308, 0, ...
 04147   472   NtContinue  (1244308, 0, ...
 04148   472   NtContinue  (1244308, 0, ...
 04149   472   NtContinue  (1244308, 0, ...
 04150   472   NtContinue  (1244308, 0, ...
 04151   472   NtContinue  (1244308, 0, ...
 04152   472   NtContinue  (1244308, 0, ...
 04153   472   NtContinue  (1244308, 0, ...
 04154   472   NtContinue  (1244308, 0, ...
 04155   472   NtContinue  (1244308, 0, ...
 04156   472   NtContinue  (1244308, 0, ...
 04157   472   NtContinue  (1244308, 0, ...
 04158   472   NtContinue  (1244308, 0, ...
 04159   472   NtContinue  (1244308, 0, ...
 04160   472   NtContinue  (1244308, 0, ...
 04161   472   NtContinue  (1244308, 0, ...
 04162   472   NtContinue  (1244308, 0, ...
 04163   472   NtContinue  (1244308, 0, ...
 04164   472   NtContinue  (1244308, 0, ...
 04165   472   NtContinue  (1244308, 0, ...
 04166   472   NtContinue  (1244308, 0, ...
 04167   472   NtContinue  (1244308, 0, ...
 04168   472   NtContinue  (1244308, 0, ...
 04169   472   NtContinue  (1244308, 0, ...
 04170   472   NtContinue  (1244308, 0, ...
 04171   472   NtContinue  (1244308, 0, ...
 04172   472   NtContinue  (1244308, 0, ...
 04173   472   NtContinue  (1244308, 0, ...
 04174   472   NtContinue  (1244308, 0, ...
 04175   472   NtContinue  (1244308, 0, ...
 04176   472   NtContinue  (1244308, 0, ...
 04177   472   NtContinue  (1244308, 0, ...
 04178   472   NtContinue  (1244308, 0, ...
 04179   472   NtContinue  (1244308, 0, ...
 04180   472   NtContinue  (1244308, 0, ...
 04181   472   NtContinue  (1244308, 0, ...
 04182   472   NtContinue  (1244308, 0, ...
 04183   472   NtContinue  (1244308, 0, ...
 04184   472   NtContinue  (1244308, 0, ...
 04185   472   NtContinue  (1244308, 0, ...
 04186   472   NtContinue  (1244308, 0, ...
 04187   472   NtContinue  (1244308, 0, ...
 04188   472   NtContinue  (1244308, 0, ...
 04189   472   NtContinue  (1244308, 0, ...
 04190   472   NtContinue  (1244308, 0, ...
 04191   472   NtContinue  (1244308, 0, ...
 04192   472   NtContinue  (1244308, 0, ...
 04193   472   NtContinue  (1244308, 0, ...
 04194   472   NtContinue  (1244308, 0, ...
 04195   472   NtContinue  (1244308, 0, ...
 04196   472   NtContinue  (1244308, 0, ...
 04197   472   NtContinue  (1244308, 0, ...
 04198   472   NtContinue  (1244308, 0, ...
 04199   472   NtContinue  (1244308, 0, ...
 04200   472   NtContinue  (1244308, 0, ...
 04201   472   NtContinue  (1244308, 0, ...
 04202   472   NtContinue  (1244308, 0, ...
 04203   472   NtContinue  (1244308, 0, ...
 04204   472   NtContinue  (1244308, 0, ...
 04205   472   NtContinue  (1244308, 0, ...
 04206   472   NtContinue  (1244308, 0, ...
 04207   472   NtContinue  (1244308, 0, ...
 04208   472   NtContinue  (1244308, 0, ...
 04209   472   NtContinue  (1244308, 0, ...
 04210   472   NtContinue  (1244308, 0, ...
 04211   472   NtContinue  (1244308, 0, ...
 04212   472   NtContinue  (1244308, 0, ...
 04213   472   NtContinue  (1244308, 0, ...
 04214   472   NtContinue  (1244308, 0, ...
 04215   472   NtContinue  (1244308, 0, ...
 04216   472   NtContinue  (1244308, 0, ...
 04217   472   NtContinue  (1244308, 0, ...
 04218   472   NtContinue  (1244308, 0, ...
 04219   472   NtContinue  (1244308, 0, ...
 04220   472   NtContinue  (1244308, 0, ...
 04221   472   NtContinue  (1244308, 0, ...
 04222   472   NtContinue  (1244308, 0, ...
 04223   472   NtContinue  (1244308, 0, ...
 04224   472   NtContinue  (1244308, 0, ...
 04225   472   NtContinue  (1244308, 0, ...
 04226   472   NtContinue  (1244308, 0, ...
 04227   472   NtContinue  (1244308, 0, ...
 04228   472   NtContinue  (1244308, 0, ...
 04229   472   NtContinue  (1244308, 0, ...
 04230   472   NtContinue  (1244308, 0, ...
 04231   472   NtContinue  (1244308, 0, ...
 04232   472   NtContinue  (1244308, 0, ...
 04233   472   NtContinue  (1244308, 0, ...
 04234   472   NtContinue  (1244308, 0, ...
 04235   472   NtContinue  (1244308, 0, ...
 04236   472   NtContinue  (1244308, 0, ...
 04237   472   NtContinue  (1244308, 0, ...
 04238   472   NtContinue  (1244308, 0, ...
 04239   472   NtContinue  (1244308, 0, ...
 04240   472   NtContinue  (1244308, 0, ...
 04241   472   NtContinue  (1244308, 0, ...
 04242   472   NtContinue  (1244308, 0, ...
 04243   472   NtContinue  (1244308, 0, ...
 04244   472   NtContinue  (1244308, 0, ...
 04245   472   NtContinue  (1244308, 0, ...
 04246   472   NtContinue  (1244308, 0, ...
 04247   472   NtContinue  (1244308, 0, ...
 04248   472   NtContinue  (1244308, 0, ...
 04249   472   NtContinue  (1244308, 0, ...
 04250   472   NtContinue  (1244308, 0, ...
 04251   472   NtContinue  (1244308, 0, ...
 04252   472   NtContinue  (1244308, 0, ...
 04253   472   NtContinue  (1244308, 0, ...
 04254   472   NtContinue  (1244308, 0, ...
 04255   472   NtContinue  (1244308, 0, ...
 04256   472   NtContinue  (1244308, 0, ...
 04257   472   NtContinue  (1244308, 0, ...
 04258   472   NtContinue  (1244308, 0, ...
 04259   472   NtContinue  (1244308, 0, ...
 04260   472   NtContinue  (1244308, 0, ...
 04261   472   NtContinue  (1244308, 0, ...
 04262   472   NtContinue  (1244308, 0, ...
 04263   472   NtContinue  (1244308, 0, ...
 04264   472   NtContinue  (1244308, 0, ...
 04265   472   NtContinue  (1244308, 0, ...
 04266   472   NtContinue  (1244308, 0, ...
 04267   472   NtContinue  (1244308, 0, ...
 04268   472   NtContinue  (1244308, 0, ...
 04269   472   NtContinue  (1244308, 0, ...
 04270   472   NtContinue  (1244308, 0, ...
 04271   472   NtContinue  (1244308, 0, ...
 04272   472   NtContinue  (1244308, 0, ...
 04273   472   NtContinue  (1244308, 0, ...
 04274   472   NtContinue  (1244308, 0, ...
 04275   472   NtContinue  (1244308, 0, ...
 04276   472   NtContinue  (1244308, 0, ...
 04277   472   NtContinue  (1244308, 0, ...
 04278   472   NtContinue  (1244308, 0, ...
 04279   472   NtContinue  (1244308, 0, ...
 04280   472   NtContinue  (1244308, 0, ...
 04281   472   NtContinue  (1244308, 0, ...
 04282   472   NtContinue  (1244308, 0, ...
 04283   472   NtContinue  (1244308, 0, ...
 04284   472   NtContinue  (1244308, 0, ...
 04285   472   NtContinue  (1244308, 0, ...
 04286   472   NtContinue  (1244308, 0, ...
 04287   472   NtContinue  (1244308, 0, ...
 04288   472   NtContinue  (1244308, 0, ...
 04289   472   NtContinue  (1244308, 0, ...
 04290   472   NtContinue  (1244308, 0, ...
 04291   472   NtContinue  (1244308, 0, ...
 04292   472   NtContinue  (1244308, 0, ...
 04293   472   NtContinue  (1244308, 0, ...
 04294   472   NtContinue  (1244308, 0, ...
 04295   472   NtContinue  (1244308, 0, ...
 04296   472   NtContinue  (1244308, 0, ...
 04297   472   NtContinue  (1244308, 0, ...
 04298   472   NtContinue  (1244308, 0, ...
 04299   472   NtContinue  (1244308, 0, ...
 04300   472   NtContinue  (1244308, 0, ...
 04301   472   NtContinue  (1244308, 0, ...
 04302   472   NtContinue  (1244308, 0, ...
 04303   472   NtContinue  (1244308, 0, ...
 04304   472   NtContinue  (1244308, 0, ...
 04305   472   NtContinue  (1244308, 0, ...
 04306   472   NtContinue  (1244308, 0, ...
 04307   472   NtContinue  (1244308, 0, ...
 04308   472   NtContinue  (1244308, 0, ...
 04309   472   NtContinue  (1244308, 0, ...
 04310   472   NtContinue  (1244308, 0, ...
 04311   472   NtContinue  (1244308, 0, ...
 04312   472   NtContinue  (1244308, 0, ...
 04313   472   NtContinue  (1244308, 0, ...
 04314   472   NtContinue  (1244308, 0, ...
 04315   472   NtContinue  (1244308, 0, ...
 04316   472   NtContinue  (1244308, 0, ...
 04317   472   NtContinue  (1244308, 0, ...
 04318   472   NtContinue  (1244308, 0, ...
 04319   472   NtContinue  (1244308, 0, ...
 04320   472   NtContinue  (1244308, 0, ...
 04321   472   NtContinue  (1244308, 0, ...
 04322   472   NtContinue  (1244308, 0, ...
 04323   472   NtContinue  (1244308, 0, ...
 04324   472   NtContinue  (1244308, 0, ...
 04325   472   NtContinue  (1244308, 0, ...
 04326   472   NtContinue  (1244308, 0, ...
 04327   472   NtContinue  (1244308, 0, ...
 04328   472   NtContinue  (1244308, 0, ...
 04329   472   NtContinue  (1244308, 0, ...
 04330   472   NtContinue  (1244308, 0, ...
 04331   472   NtContinue  (1244308, 0, ...
 04332   472   NtContinue  (1244308, 0, ...
 04333   472   NtContinue  (1244308, 0, ...
 04334   472   NtContinue  (1244308, 0, ...
 04335   472   NtContinue  (1244308, 0, ...
 04336   472   NtContinue  (1244308, 0, ...
 04337   472   NtContinue  (1244308, 0, ...
 04338   472   NtContinue  (1244308, 0, ...
 04339   472   NtContinue  (1244308, 0, ...
 04340   472   NtContinue  (1244308, 0, ...
 04341   472   NtContinue  (1244308, 0, ...
 04342   472   NtContinue  (1244308, 0, ...
 04343   472   NtContinue  (1244308, 0, ...
 04344   472   NtContinue  (1244308, 0, ...
 04345   472   NtContinue  (1244308, 0, ...
 04346   472   NtContinue  (1244308, 0, ...
 04347   472   NtContinue  (1244308, 0, ...
 04348   472   NtContinue  (1244308, 0, ...
 04349   472   NtContinue  (1244308, 0, ...
 04350   472   NtContinue  (1244308, 0, ...
 04351   472   NtContinue  (1244308, 0, ...
 04352   472   NtContinue  (1244308, 0, ...
 04353   472   NtContinue  (1244308, 0, ...
 04354   472   NtContinue  (1244308, 0, ...
 04355   472   NtContinue  (1244308, 0, ...
 04356   472   NtContinue  (1244308, 0, ...
 04357   472   NtContinue  (1244308, 0, ...
 04358   472   NtContinue  (1244308, 0, ...
 04359   472   NtContinue  (1244308, 0, ...
 04360   472   NtContinue  (1244308, 0, ...
 04361   472   NtContinue  (1244308, 0, ...
 04362   472   NtContinue  (1244308, 0, ...
 04363   472   NtContinue  (1244308, 0, ...
 04364   472   NtContinue  (1244308, 0, ...
 04365   472   NtContinue  (1244308, 0, ...
 04366   472   NtContinue  (1244308, 0, ...
 04367   472   NtContinue  (1244308, 0, ...
 04368   472   NtContinue  (1244308, 0, ...
 04369   472   NtContinue  (1244308, 0, ...
 04370   472   NtContinue  (1244308, 0, ...
 04371   472   NtContinue  (1244308, 0, ...
 04372   472   NtContinue  (1244308, 0, ...
 04373   472   NtContinue  (1244308, 0, ...
 04374   472   NtContinue  (1244308, 0, ...
 04375   472   NtContinue  (1244308, 0, ...
 04376   472   NtContinue  (1244308, 0, ...
 04377   472   NtContinue  (1244308, 0, ...
 04378   472   NtContinue  (1244308, 0, ...
 04379   472   NtContinue  (1244308, 0, ...
 04380   472   NtContinue  (1244308, 0, ...
 04381   472   NtContinue  (1244308, 0, ...
 04382   472   NtContinue  (1244308, 0, ...
 04383   472   NtContinue  (1244308, 0, ...
 04384   472   NtContinue  (1244308, 0, ...
 04385   472   NtContinue  (1244308, 0, ...
 04386   472   NtContinue  (1244308, 0, ...
 04387   472   NtContinue  (1244308, 0, ...
 04388   472   NtContinue  (1244308, 0, ...
 04389   472   NtContinue  (1244308, 0, ...
 04390   472   NtContinue  (1244308, 0, ...
 04391   472   NtContinue  (1244308, 0, ...
 04392   472   NtContinue  (1244308, 0, ...
 04393   472   NtContinue  (1244308, 0, ...
 04394   472   NtContinue  (1244308, 0, ...
 04395   472   NtContinue  (1244308, 0, ...
 04396   472   NtContinue  (1244308, 0, ...
 04397   472   NtContinue  (1244308, 0, ...
 04398   472   NtContinue  (1244308, 0, ...
 04399   472   NtContinue  (1244308, 0, ...
 04400   472   NtContinue  (1244308, 0, ...
 04401   472   NtContinue  (1244308, 0, ...
 04402   472   NtContinue  (1244308, 0, ...
 04403   472   NtContinue  (1244308, 0, ...
 04404   472   NtContinue  (1244308, 0, ...
 04405   472   NtContinue  (1244308, 0, ...
 04406   472   NtContinue  (1244308, 0, ...
 04407   472   NtContinue  (1244308, 0, ...
 04408   472   NtContinue  (1244308, 0, ...
 04409   472   NtContinue  (1244308, 0, ...
 04410   472   NtContinue  (1244308, 0, ...
 04411   472   NtContinue  (1244308, 0, ...
 04412   472   NtContinue  (1244308, 0, ...
 04413   472   NtContinue  (1244308, 0, ...
 04414   472   NtContinue  (1244308, 0, ...
 04415   472   NtContinue  (1244308, 0, ...
 04416   472   NtContinue  (1244308, 0, ...
 04417   472   NtContinue  (1244308, 0, ...
 04418   472   NtContinue  (1244308, 0, ...
 04419   472   NtContinue  (1244308, 0, ...
 04420   472   NtContinue  (1244308, 0, ...
 04421   472   NtContinue  (1244308, 0, ...
 04422   472   NtContinue  (1244308, 0, ...
 04423   472   NtContinue  (1244308, 0, ...
 04424   472   NtContinue  (1244308, 0, ...
 04425   472   NtContinue  (1244308, 0, ...
 04426   472   NtContinue  (1244308, 0, ...
 04427   472   NtContinue  (1244308, 0, ...
 04428   472   NtContinue  (1244308, 0, ...
 04429   472   NtContinue  (1244308, 0, ...
 04430   472   NtContinue  (1244308, 0, ...
 04431   472   NtContinue  (1244308, 0, ...
 04432   472   NtContinue  (1244308, 0, ...
 04433   472   NtContinue  (1244308, 0, ...
 04434   472   NtContinue  (1244308, 0, ...
 04435   472   NtContinue  (1244308, 0, ...
 04436   472   NtContinue  (1244308, 0, ...
 04437   472   NtContinue  (1244308, 0, ...
 04438   472   NtContinue  (1244308, 0, ...
 04439   472   NtContinue  (1244308, 0, ...
 04440   472   NtContinue  (1244308, 0, ...
 04441   472   NtContinue  (1244308, 0, ...
 04442   472   NtContinue  (1244308, 0, ...
 04443   472   NtContinue  (1244308, 0, ...
 04444   472   NtContinue  (1244308, 0, ...
 04445   472   NtContinue  (1244308, 0, ...
 04446   472   NtContinue  (1244308, 0, ...
 04447   472   NtContinue  (1244308, 0, ...
 04448   472   NtContinue  (1244308, 0, ...
 04449   472   NtContinue  (1244308, 0, ...
 04450   472   NtContinue  (1244308, 0, ...
 04451   472   NtContinue  (1244308, 0, ...
 04452   472   NtContinue  (1244308, 0, ...
 04453   472   NtContinue  (1244308, 0, ...
 04454   472   NtContinue  (1244308, 0, ...
 04455   472   NtContinue  (1244308, 0, ...
 04456   472   NtContinue  (1244308, 0, ...
 04457   472   NtContinue  (1244308, 0, ...
 04458   472   NtContinue  (1244308, 0, ...
 04459   472   NtContinue  (1244308, 0, ...
 04460   472   NtContinue  (1244308, 0, ...
 04461   472   NtContinue  (1244308, 0, ...
 04462   472   NtContinue  (1244308, 0, ...
 04463   472   NtContinue  (1244308, 0, ...
 04464   472   NtContinue  (1244308, 0, ...
 04465   472   NtContinue  (1244308, 0, ...
 04466   472   NtContinue  (1244308, 0, ...
 04467   472   NtContinue  (1244308, 0, ...
 04468   472   NtContinue  (1244308, 0, ...
 04469   472   NtContinue  (1244308, 0, ...
 04470   472   NtContinue  (1244308, 0, ...
 04471   472   NtContinue  (1244308, 0, ...
 04472   472   NtContinue  (1244308, 0, ...
 04473   472   NtContinue  (1244308, 0, ...
 04474   472   NtContinue  (1244308, 0, ...
 04475   472   NtContinue  (1244308, 0, ...
 04476   472   NtContinue  (1244308, 0, ...
 04477   472   NtContinue  (1244308, 0, ...
 04478   472   NtContinue  (1244308, 0, ...
 04479   472   NtContinue  (1244308, 0, ...
 04480   472   NtContinue  (1244308, 0, ...
 04481   472   NtContinue  (1244308, 0, ...
 04482   472   NtContinue  (1244308, 0, ...
 04483   472   NtContinue  (1244308, 0, ...
 04484   472   NtContinue  (1244308, 0, ...
 04485   472   NtContinue  (1244308, 0, ...
 04486   472   NtContinue  (1244308, 0, ...
 04487   472   NtContinue  (1244308, 0, ...
 04488   472   NtContinue  (1244308, 0, ...
 04489   472   NtContinue  (1244308, 0, ...
 04490   472   NtContinue  (1244308, 0, ...
 04491   472   NtContinue  (1244308, 0, ...
 04492   472   NtContinue  (1244308, 0, ...
 04493   472   NtContinue  (1244308, 0, ...
 04494   472   NtContinue  (1244308, 0, ...
 04495   472   NtContinue  (1244308, 0, ...
 04496   472   NtContinue  (1244308, 0, ...
 04497   472   NtContinue  (1244308, 0, ...
 04498   472   NtContinue  (1244308, 0, ...
 04499   472   NtContinue  (1244308, 0, ...
 04500   472   NtContinue  (1244308, 0, ...
 04501   472   NtContinue  (1244308, 0, ...
 04502   472   NtContinue  (1244308, 0, ...
 04503   472   NtContinue  (1244308, 0, ...
 04504   472   NtContinue  (1244308, 0, ...
 04505   472   NtContinue  (1244308, 0, ...
 04506   472   NtContinue  (1244308, 0, ...
 04507   472   NtContinue  (1244308, 0, ...
 04508   472   NtContinue  (1244308, 0, ...
 04509   472   NtContinue  (1244308, 0, ...
 04510   472   NtContinue  (1244308, 0, ...
 04511   472   NtContinue  (1244308, 0, ...
 04512   472   NtContinue  (1244308, 0, ...
 04513   472   NtContinue  (1244308, 0, ...
 04514   472   NtContinue  (1244308, 0, ...
 04515   472   NtContinue  (1244308, 0, ...
 04516   472   NtContinue  (1244308, 0, ...
 04517   472   NtContinue  (1244308, 0, ...
 04518   472   NtContinue  (1244308, 0, ...
 04519   472   NtContinue  (1244308, 0, ...
 04520   472   NtContinue  (1244308, 0, ...
 04521   472   NtContinue  (1244308, 0, ...
 04522   472   NtContinue  (1244308, 0, ...
 04523   472   NtContinue  (1244308, 0, ...
 04524   472   NtContinue  (1244308, 0, ...
 04525   472   NtContinue  (1244308, 0, ...
 04526   472   NtContinue  (1244308, 0, ...
 04527   472   NtContinue  (1244308, 0, ...
 04528   472   NtContinue  (1244308, 0, ...
 04529   472   NtContinue  (1244308, 0, ...
 04530   472   NtContinue  (1244308, 0, ...
 04531   472   NtContinue  (1244308, 0, ...
 04532   472   NtContinue  (1244308, 0, ...
 04533   472   NtContinue  (1244308, 0, ...
 04534   472   NtContinue  (1244308, 0, ...
 04535   472   NtContinue  (1244308, 0, ...
 04536   472   NtContinue  (1244308, 0, ...
 04537   472   NtContinue  (1244308, 0, ...
 04538   472   NtContinue  (1244308, 0, ...
 04539   472   NtContinue  (1244308, 0, ...
 04540   472   NtContinue  (1244308, 0, ...
 04541   472   NtContinue  (1244308, 0, ...
 04542   472   NtContinue  (1244308, 0, ...
 04543   472   NtContinue  (1244308, 0, ...
 04544   472   NtContinue  (1244308, 0, ...
 04545   472   NtContinue  (1244308, 0, ...
 04546   472   NtContinue  (1244308, 0, ...
 04547   472   NtContinue  (1244308, 0, ...
 04548   472   NtContinue  (1244308, 0, ...
 04549   472   NtContinue  (1244308, 0, ...
 04550   472   NtContinue  (1244308, 0, ...
 04551   472   NtContinue  (1244308, 0, ...
 04552   472   NtContinue  (1244308, 0, ...
 04553   472   NtContinue  (1244308, 0, ...
 04554   472   NtContinue  (1244308, 0, ...
 04555   472   NtContinue  (1244308, 0, ...
 04556   472   NtContinue  (1244308, 0, ...
 04557   472   NtContinue  (1244308, 0, ...
 04558   472   NtContinue  (1244308, 0, ...
 04559   472   NtContinue  (1244308, 0, ...
 04560   472   NtContinue  (1244308, 0, ...
 04561   472   NtContinue  (1244308, 0, ...
 04562   472   NtContinue  (1244308, 0, ...
 04563   472   NtContinue  (1244308, 0, ...
 04564   472   NtContinue  (1244308, 0, ...
 04565   472   NtContinue  (1244308, 0, ...
 04566   472   NtContinue  (1244308, 0, ...
 04567   472   NtContinue  (1244308, 0, ...
 04568   472   NtContinue  (1244308, 0, ...
 04569   472   NtContinue  (1244308, 0, ...
 04570   472   NtContinue  (1244308, 0, ...
 04571   472   NtContinue  (1244308, 0, ...
 04572   472   NtContinue  (1244308, 0, ...
 04573   472   NtContinue  (1244308, 0, ...
 04574   472   NtContinue  (1244308, 0, ...
 04575   472   NtContinue  (1244308, 0, ...
 04576   472   NtContinue  (1244308, 0, ...
 04577   472   NtContinue  (1244308, 0, ...
 04578   472   NtContinue  (1244308, 0, ...
 04579   472   NtContinue  (1244308, 0, ...
 04580   472   NtContinue  (1244308, 0, ...
 04581   472   NtContinue  (1244308, 0, ...
 04582   472   NtContinue  (1244308, 0, ...
 04583   472   NtContinue  (1244308, 0, ...
 04584   472   NtContinue  (1244308, 0, ...
 04585   472   NtContinue  (1244308, 0, ...
 04586   472   NtContinue  (1244308, 0, ...
 04587   472   NtContinue  (1244308, 0, ...
 04588   472   NtContinue  (1244308, 0, ...
 04589   472   NtContinue  (1244308, 0, ...
 04590   472   NtContinue  (1244308, 0, ...
 04591   472   NtContinue  (1244308, 0, ...
 04592   472   NtContinue  (1244308, 0, ...
 04593   472   NtContinue  (1244308, 0, ...
 04594   472   NtContinue  (1244308, 0, ...
 04595   472   NtContinue  (1244308, 0, ...
 04596   472   NtContinue  (1244308, 0, ...
 04597   472   NtContinue  (1244308, 0, ...
 04598   472   NtContinue  (1244308, 0, ...
 04599   472   NtContinue  (1244308, 0, ...
 04600   472   NtContinue  (1244308, 0, ...
 04601   472   NtContinue  (1244308, 0, ...
 04602   472   NtContinue  (1244308, 0, ...
 04603   472   NtContinue  (1244308, 0, ...
 04604   472   NtContinue  (1244308, 0, ...
 04605   472   NtContinue  (1244308, 0, ...
 04606   472   NtContinue  (1244308, 0, ...
 04607   472   NtContinue  (1244308, 0, ...
 04608   472   NtContinue  (1244308, 0, ...
 04609   472   NtContinue  (1244308, 0, ...
 04610   472   NtContinue  (1244308, 0, ...
 04611   472   NtContinue  (1244308, 0, ...
 04612   472   NtContinue  (1244308, 0, ...
 04613   472   NtContinue  (1244308, 0, ...
 04614   472   NtContinue  (1244308, 0, ...
 04615   472   NtContinue  (1244308, 0, ...
 04616   472   NtContinue  (1244308, 0, ...
 04617   472   NtContinue  (1244308, 0, ...
 04618   472   NtContinue  (1244308, 0, ...
 04619   472   NtContinue  (1244308, 0, ...
 04620   472   NtContinue  (1244308, 0, ...
 04621   472   NtContinue  (1244308, 0, ...
 04622   472   NtContinue  (1244308, 0, ...
 04623   472   NtContinue  (1244308, 0, ...
 04624   472   NtContinue  (1244308, 0, ...
 04625   472   NtContinue  (1244308, 0, ...
 04626   472   NtContinue  (1244308, 0, ...
 04627   472   NtContinue  (1244308, 0, ...
 04628   472   NtContinue  (1244308, 0, ...
 04629   472   NtContinue  (1244308, 0, ...
 04630   472   NtContinue  (1244308, 0, ...
 04631   472   NtContinue  (1244308, 0, ...
 04632   472   NtContinue  (1244308, 0, ...
 04633   472   NtContinue  (1244308, 0, ...
 04634   472   NtContinue  (1244308, 0, ...
 04635   472   NtContinue  (1244308, 0, ...
 04636   472   NtContinue  (1244308, 0, ...
 04637   472   NtContinue  (1244308, 0, ...
 04638   472   NtContinue  (1244308, 0, ...
 04639   472   NtContinue  (1244308, 0, ...
 04640   472   NtContinue  (1244308, 0, ...
 04641   472   NtContinue  (1244308, 0, ...
 04642   472   NtContinue  (1244308, 0, ...
 04643   472   NtContinue  (1244308, 0, ...
 04644   472   NtContinue  (1244308, 0, ...
 04645   472   NtContinue  (1244308, 0, ...
 04646   472   NtContinue  (1244308, 0, ...
 04647   472   NtContinue  (1244308, 0, ...
 04648   472   NtContinue  (1244308, 0, ...
 04649   472   NtContinue  (1244308, 0, ...
 04650   472   NtContinue  (1244308, 0, ...
 04651   472   NtContinue  (1244308, 0, ...
 04652   472   NtContinue  (1244308, 0, ...
 04653   472   NtContinue  (1244308, 0, ...
 04654   472   NtContinue  (1244308, 0, ...
 04655   472   NtContinue  (1244308, 0, ...
 04656   472   NtContinue  (1244308, 0, ...
 04657   472   NtContinue  (1244308, 0, ...
 04658   472   NtContinue  (1244308, 0, ...
 04659   472   NtContinue  (1244308, 0, ...
 04660   472   NtContinue  (1244308, 0, ...
 04661   472   NtContinue  (1244308, 0, ...
 04662   472   NtContinue  (1244308, 0, ...
 04663   472   NtContinue  (1244308, 0, ...
 04664   472   NtContinue  (1244308, 0, ...
 04665   472   NtContinue  (1244308, 0, ...
 04666   472   NtContinue  (1244308, 0, ...
 04667   472   NtContinue  (1244308, 0, ...
 04668   472   NtContinue  (1244308, 0, ...
 04669   472   NtContinue  (1244308, 0, ...
 04670   472   NtContinue  (1244308, 0, ...
 04671   472   NtContinue  (1244308, 0, ...
 04672   472   NtContinue  (1244308, 0, ...
 04673   472   NtContinue  (1244308, 0, ...
 04674   472   NtContinue  (1244308, 0, ...
 04675   472   NtContinue  (1244308, 0, ...
 04676   472   NtContinue  (1244308, 0, ...
 04677   472   NtContinue  (1244308, 0, ...
 04678   472   NtContinue  (1244308, 0, ...
 04679   472   NtContinue  (1244308, 0, ...
 04680   472   NtContinue  (1244308, 0, ...
 04681   472   NtContinue  (1244308, 0, ...
 04682   472   NtContinue  (1244308, 0, ...
 04683   472   NtContinue  (1244308, 0, ...
 04684   472   NtContinue  (1244308, 0, ...
 04685   472   NtContinue  (1244308, 0, ...
 04686   472   NtContinue  (1244308, 0, ...
 04687   472   NtContinue  (1244308, 0, ...
 04688   472   NtContinue  (1244308, 0, ...
 04689   472   NtContinue  (1244308, 0, ...
 04690   472   NtContinue  (1244308, 0, ...
 04691   472   NtContinue  (1244308, 0, ...
 04692   472   NtContinue  (1244308, 0, ...
 04693   472   NtContinue  (1244308, 0, ...
 04694   472   NtContinue  (1244308, 0, ...
 04695   472   NtContinue  (1244308, 0, ...
 04696   472   NtContinue  (1244308, 0, ...
 04697   472   NtContinue  (1244308, 0, ...
 04698   472   NtContinue  (1244308, 0, ...
 04699   472   NtContinue  (1244308, 0, ...
 04700   472   NtContinue  (1244308, 0, ...
 04701   472   NtContinue  (1244308, 0, ...
 04702   472   NtContinue  (1244308, 0, ...
 04703   472   NtContinue  (1244308, 0, ...
 04704   472   NtContinue  (1244308, 0, ...
 04705   472   NtContinue  (1244308, 0, ...
 04706   472   NtContinue  (1244308, 0, ...
 04707   472   NtContinue  (1244308, 0, ...
 04708   472   NtContinue  (1244308, 0, ...
 04709   472   NtContinue  (1244308, 0, ...
 04710   472   NtContinue  (1244308, 0, ...
 04711   472   NtContinue  (1244308, 0, ...
 04712   472   NtContinue  (1244308, 0, ...
 04713   472   NtContinue  (1244308, 0, ...
 04714   472   NtContinue  (1244308, 0, ...
 04715   472   NtContinue  (1244308, 0, ...
 04716   472   NtContinue  (1244308, 0, ...
 04717   472   NtContinue  (1244308, 0, ...
 04718   472   NtContinue  (1244308, 0, ...
 04719   472   NtContinue  (1244308, 0, ...
 04720   472   NtContinue  (1244308, 0, ...
 04721   472   NtContinue  (1244308, 0, ...
 04722   472   NtContinue  (1244308, 0, ...
 04723   472   NtContinue  (1244308, 0, ...
 04724   472   NtContinue  (1244308, 0, ...
 04725   472   NtContinue  (1244308, 0, ...
 04726   472   NtContinue  (1244308, 0, ...
 04727   472   NtContinue  (1244304, 0, ...
 04728   472   NtContinue  (1244304, 0, ...
 04729   472   NtContinue  (1244304, 0, ...
 04730   472   NtContinue  (1244304, 0, ...
 04731   472   NtContinue  (1244304, 0, ...
 04732   472   NtContinue  (1244304, 0, ...
 04733   472   NtContinue  (1244304, 0, ...
 04734   472   NtContinue  (1244304, 0, ...
 04735   472   NtContinue  (1244304, 0, ...
 04736   472   NtContinue  (1244304, 0, ...
 04737   472   NtContinue  (1244304, 0, ...
 04738   472   NtContinue  (1244304, 0, ...
 04739   472   NtContinue  (1244304, 0, ...
 04740   472   NtContinue  (1244304, 0, ...
 04741   472   NtContinue  (1244304, 0, ...
 04742   472   NtContinue  (1244304, 0, ...
 04743   472   NtContinue  (1244304, 0, ...
 04744   472   NtContinue  (1244304, 0, ...
 04745   472   NtContinue  (1244304, 0, ...
 04746   472   NtContinue  (1244304, 0, ...
 04747   472   NtContinue  (1244304, 0, ...
 04748   472   NtContinue  (1244304, 0, ...
 04749   472   NtContinue  (1244304, 0, ...
 04750   472   NtContinue  (1244304, 0, ...
 04751   472   NtContinue  (1244304, 0, ...
 04752   472   NtContinue  (1244304, 0, ...
 04753   472   NtContinue  (1244304, 0, ...
 04754   472   NtContinue  (1244304, 0, ...
 04755   472   NtContinue  (1244304, 0, ...
 04756   472   NtContinue  (1244304, 0, ...
 04757   472   NtContinue  (1244304, 0, ...
 04758   472   NtContinue  (1244304, 0, ...
 04759   472   NtContinue  (1244308, 0, ...
 04760   472   NtContinue  (1244304, 0, ...
 04761   472   NtContinue  (1244304, 0, ...
 04762   472   NtContinue  (1244304, 0, ...
 04763   472   NtContinue  (1244304, 0, ...
 04764   472   NtContinue  (1244308, 0, ...
 04765   472   NtContinue  (1244304, 0, ...
 04766   472   NtContinue  (1244304, 0, ...
 04767   472   NtContinue  (1244304, 0, ...
 04768   472   NtContinue  (1244308, 0, ...
 04769   472   NtContinue  (1244304, 0, ...
 04770   472   NtContinue  (1244304, 0, ...
 04771   472   NtContinue  (1244308, 0, ...
 04772   472   NtContinue  (1244304, 0, ...
 04773   472   NtContinue  (1244304, 0, ...
 04774   472   NtContinue  (1244304, 0, ...
 04775   472   NtContinue  (1244304, 0, ...
 04776   472   NtContinue  (1244304, 0, ...
 04777   472   NtContinue  (1244304, 0, ...
 04778   472   NtContinue  (1244308, 0, ...
 04779   472   NtContinue  (1244304, 0, ...
 04780   472   NtContinue  (1244304, 0, ...
 04781   472   NtContinue  (1244304, 0, ...
 04782   472   NtContinue  (1244304, 0, ...
 04783   472   NtContinue  (1244304, 0, ...
 04784   472   NtContinue  (1244304, 0, ...
 04785   472   NtContinue  (1244308, 0, ...
 04786   472   NtContinue  (1244304, 0, ...
 04787   472   NtContinue  (1244304, 0, ...
 04788   472   NtContinue  (1244304, 0, ...
 04789   472   NtContinue  (1244304, 0, ...
 04790   472   NtContinue  (1244304, 0, ...
 04791   472   NtContinue  (1244304, 0, ...
 04792   472   NtContinue  (1244304, 0, ...
 04793   472   NtContinue  (1244304, 0, ...
 04794   472   NtContinue  (1244304, 0, ...
 04795   472   NtContinue  (1244304, 0, ...
 04796   472   NtContinue  (1244304, 0, ...
 04797   472   NtContinue  (1244304, 0, ...
 04798   472   NtContinue  (1244304, 0, ...
 04799   472   NtContinue  (1244304, 0, ...
 04800   472   NtContinue  (1244304, 0, ...
 04801   472   NtContinue  (1244304, 0, ...
 04802   472   NtContinue  (1244304, 0, ...
 04803   472   NtContinue  (1244304, 0, ...
 04804   472   NtContinue  (1244304, 0, ...
 04805   472   NtContinue  (1244304, 0, ...
 04806   472   NtContinue  (1244304, 0, ...
 04807   472   NtContinue  (1244304, 0, ...
 04808   472   NtContinue  (1244304, 0, ...
 04809   472   NtContinue  (1244304, 0, ...
 04810   472   NtContinue  (1244304, 0, ...
 04811   472   NtContinue  (1244304, 0, ...
 04812   472   NtContinue  (1244304, 0, ...
 04813   472   NtContinue  (1244304, 0, ...
 04814   472   NtContinue  (1244304, 0, ...
 04815   472   NtContinue  (1244304, 0, ...
 04816   472   NtContinue  (1244304, 0, ...
 04817   472   NtContinue  (1244304, 0, ...
 04818   472   NtContinue  (1244304, 0, ...
 04819   472   NtContinue  (1244304, 0, ...
 04820   472   NtContinue  (1244304, 0, ...
 04821   472   NtContinue  (1244304, 0, ...
 04822   472   NtContinue  (1244304, 0, ...
 04823   472   NtContinue  (1244304, 0, ...
 04824   472   NtContinue  (1244304, 0, ...
 04825   472   NtContinue  (1244304, 0, ...
 04826   472   NtContinue  (1244304, 0, ...
 04827   472   NtContinue  (1244304, 0, ...
 04828   472   NtContinue  (1244304, 0, ...
 04829   472   NtContinue  (1244304, 0, ...
 04830   472   NtContinue  (1244304, 0, ...
 04831   472   NtContinue  (1244304, 0, ...
 04832   472   NtContinue  (1244304, 0, ...
 04833   472   NtContinue  (1244308, 0, ...
 04834   472   NtContinue  (1244304, 0, ...
 04835   472   NtContinue  (1244308, 0, ...
 04836   472   NtContinue  (1244304, 0, ...
 04837   472   NtContinue  (1244304, 0, ...
 04838   472   NtContinue  (1244304, 0, ...
 04839   472   NtContinue  (1244304, 0, ...
 04840   472   NtContinue  (1244304, 0, ...
 04841   472   NtContinue  (1244304, 0, ...
 04842   472   NtContinue  (1244304, 0, ...
 04843   472   NtContinue  (1244304, 0, ...
 04844   472   NtContinue  (1244304, 0, ...
 04845   472   NtContinue  (1244304, 0, ...
 04846   472   NtContinue  (1244304, 0, ...
 04847   472   NtContinue  (1244304, 0, ...
 04848   472   NtContinue  (1244304, 0, ...
 04849   472   NtContinue  (1244304, 0, ...
 04850   472   NtContinue  (1244304, 0, ...
 04851   472   NtContinue  (1244304, 0, ...
 04852   472   NtContinue  (1244304, 0, ...
 04853   472   NtContinue  (1244304, 0, ...
 04854   472   NtContinue  (1244304, 0, ...
 04855   472   NtContinue  (1244304, 0, ...
 04856   472   NtContinue  (1244304, 0, ...
 04857   472   NtContinue  (1244304, 0, ...
 04858   472   NtContinue  (1244304, 0, ...
 04859   472   NtContinue  (1244308, 0, ...
 04860   472   NtContinue  (1244304, 0, ...
 04861   472   NtContinue  (1244304, 0, ...
 04862   472   NtContinue  (1244304, 0, ...
 04863   472   NtContinue  (1244304, 0, ...
 04864   472   NtContinue  (1244304, 0, ...
 04865   472   NtContinue  (1244304, 0, ...
 04866   472   NtContinue  (1244304, 0, ...
 04867   472   NtContinue  (1244304, 0, ...
 04868   472   NtContinue  (1244304, 0, ...
 04869   472   NtContinue  (1244304, 0, ...
 04870   472   NtContinue  (1244308, 0, ...
 04871   472   NtContinue  (1244304, 0, ...
 04872   472   NtContinue  (1244304, 0, ...
 04873   472   NtContinue  (1244308, 0, ...
 04874   472   NtContinue  (1244304, 0, ...
 04875   472   NtContinue  (1244304, 0, ...
 04876   472   NtContinue  (1244304, 0, ...
 04877   472   NtContinue  (1244304, 0, ...
 04878   472   NtContinue  (1244304, 0, ...
 04879   472   NtContinue  (1244304, 0, ...
 04880   472   NtContinue  (1244304, 0, ...
 04881   472   NtContinue  (1244304, 0, ...
 04882   472   NtContinue  (1244304, 0, ...
 04883   472   NtContinue  (1244304, 0, ...
 04884   472   NtContinue  (1244304, 0, ...
 04885   472   NtContinue  (1244304, 0, ...
 04886   472   NtContinue  (1244304, 0, ...
 04887   472   NtContinue  (1244304, 0, ...
 04888   472   NtContinue  (1244304, 0, ...
 04889   472   NtContinue  (1244304, 0, ...
 04890   472   NtContinue  (1244304, 0, ...
 04891   472   NtContinue  (1244304, 0, ...
 04892   472   NtContinue  (1244304, 0, ...
 04893   472   NtContinue  (1244304, 0, ...
 04894   472   NtContinue  (1244304, 0, ...
 04895   472   NtContinue  (1244304, 0, ...
 04896   472   NtContinue  (1244304, 0, ...
 04897   472   NtContinue  (1244304, 0, ...
 04898   472   NtContinue  (1244304, 0, ...
 04899   472   NtContinue  (1244304, 0, ...
 04900   472   NtContinue  (1244304, 0, ...
 04901   472   NtContinue  (1244308, 0, ...
 04902   472   NtContinue  (1244304, 0, ...
 04903   472   NtContinue  (1244304, 0, ...
 04904   472   NtContinue  (1244308, 0, ...
 04905   472   NtContinue  (1244304, 0, ...
 04906   472   NtContinue  (1244304, 0, ...
 04907   472   NtContinue  (1244304, 0, ...
 04908   472   NtContinue  (1244304, 0, ...
 04909   472   NtContinue  (1244304, 0, ...
 04910   472   NtContinue  (1244304, 0, ...
 04911   472   NtContinue  (1244304, 0, ...
 04912   472   NtContinue  (1244304, 0, ...
 04913   472   NtContinue  (1244304, 0, ...
 04914   472   NtContinue  (1244304, 0, ...
 04915   472   NtContinue  (1244304, 0, ...
 04916   472   NtContinue  (1244304, 0, ...
 04917   472   NtContinue  (1244304, 0, ...
 04918   472   NtContinue  (1244304, 0, ...
 04919   472   NtContinue  (1244304, 0, ...
 04920   472   NtContinue  (1244304, 0, ...
 04921   472   NtContinue  (1244304, 0, ...
 04922   472   NtContinue  (1244304, 0, ...
 04923   472   NtContinue  (1244304, 0, ...
 04924   472   NtContinue  (1244304, 0, ...
 04925   472   NtContinue  (1244304, 0, ...
 04926   472   NtContinue  (1244304, 0, ...
 04927   472   NtContinue  (1244304, 0, ...
 04928   472   NtContinue  (1244304, 0, ...
 04929   472   NtContinue  (1244304, 0, ...
 04930   472   NtContinue  (1244304, 0, ...
 04931   472   NtContinue  (1244304, 0, ...
 04932   472   NtContinue  (1244304, 0, ...
 04933   472   NtContinue  (1244304, 0, ...
 04934   472   NtContinue  (1244304, 0, ...
 04935   472   NtContinue  (1244304, 0, ...
 04936   472   NtContinue  (1244304, 0, ...
 04937   472   NtContinue  (1244304, 0, ...
 04938   472   NtContinue  (1244304, 0, ...
 04939   472   NtContinue  (1244304, 0, ...
 04940   472   NtContinue  (1244308, 0, ...
 04941   472   NtContinue  (1244304, 0, ...
 04942   472   NtContinue  (1244304, 0, ...
 04943   472   NtContinue  (1244292, 0, ...
 04944   472   NtContinue  (1244272, 0, ...
 04945   472   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04946   472   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04947   472   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04948   472   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04950   472   NtReleaseMutant  (16, ...
 04951   472   NtContinue  (-130973560, 0, ...
 04950   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04952   472   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04953   472   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04954   472   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04955   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04956   472   NtReleaseMutant  (16, ...
 04957   472   NtContinue  (-130973560, 0, ...
 04956   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04958   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04959   472   NtReleaseMutant  (16, ...
 04960   472   NtContinue  (-130973560, 0, ...
 04959   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04961   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04962   472   NtReleaseMutant  (16, ...
 04963   472   NtContinue  (-130973560, 0, ...
 04962   472   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04964   472   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04965   472   NtReleaseMutant  (16, ...