Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 25 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 46 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 46 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 13 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   524   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   524   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   524   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   524   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   524   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   524   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   524   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   524   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   524   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   524   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   524   NtClose  (12, ... ) == 0x0
 00014   524   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   524   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   524   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   524   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   524   NtClose  (16, ... ) == 0x0
 00021   524   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   524   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   524   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   524   NtClose  (16, ... ) == 0x0
 00026   524   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   524   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   524   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   524   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   524   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 520, 524, 1534, 0} "\20>\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ... {28, 56, reply, 0, 520, 524, 1534, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 520, 524, 1534, 0} "\20>\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ) == 0x0
 00032   524   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   524   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   524   NtClose  (16, ... ) == 0x0
 00036   524   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   524   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   524   NtClose  (28, ... ) == 0x0
 00041   524   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   524   NtClose  (28, ... ) == 0x0
 00045   524   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   524   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   524   NtClose  (28, ... ) == 0x0
 00049   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   524   NtClose  (28, ... ) == 0x0
 00052   524   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   524   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 520, 524, 1539, 0} "\10\260\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ... {28, 56, reply, 0, 520, 524, 1539, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 520, 524, 1539, 0} "\10\260\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ) == 0x0
 00056   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   524   NtClose  (28, ... ) == 0x0
 00062   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   524   NtClose  (28, ... ) == 0x0
 00065   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   524   NtClose  (28, ... ) == 0x0
 00068   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   524   NtClose  (28, ... ) == 0x0
 00071   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   524   NtClose  (28, ... ) == 0x0
 00080   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   524   NtClose  (28, ... ) == 0x0
 00083   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   524   NtClose  (28, ... ) == 0x0
 00086   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   524   NtClose  (28, ... ) == 0x0
 00095   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   524   NtClose  (28, ... ) == 0x0
 00098   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   524   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   524   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   524   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   524   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   524   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   524   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   524   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   524   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   524   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   524   NtClose  (40, ... ) == 0x0
 00115   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   524   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   524   NtClose  (40, ... ) == 0x0
 00119   524   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   524   NtClose  (36, ... ) == 0x0
 00121   524   NtClose  (28, ... ) == 0x0
 00122   524   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   524   NtClose  (32, ... ) == 0x0
 00124   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   524   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   524   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   524   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   524   NtClose  (32, ... ) == 0x0
 00132   524   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   524   NtClose  (28, ... ) == 0x0
 00134   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   524   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   524   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   524   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   524   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   524   NtClose  (28, ... ) == 0x0
 00146   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   524   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   524   NtClose  (28, ... ) == 0x0
 00149   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   524   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   524   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   524   NtClose  (28, ... ) == 0x0
 00153   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   524   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   524   NtClose  (28, ... ) == 0x0
 00156   524   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   524   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   524   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   524   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 520, 524, 1567, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ... {28, 56, reply, 0, 520, 524, 1567, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 520, 524, 1567, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ) == 0x0
 00161   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   524   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   524   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   524   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   524   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   524   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   524   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   524   NtClose  (-2147482020, ... ) == 0x0
 00169   524   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   524   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   524   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   524   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   524   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   524   NtClose  (-2147482020, ... ) == 0x0
 00175   524   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   524   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   524   NtClose  (-2147482020, ... ) == 0x0
 00178   524   NtQueryDefaultLocale  (0, -136148468, ... ) == 0x0
 00179   524   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   524   NtUserCallNoParam  (24, ... ) == 0x0
 00181   524   NtGdiCreateCompatibleDC  (0, ...
 00182   524   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   524   NtGdiCreateCompatibleDC  ... ) == 0xf010451
 00183   524   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   524   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   524   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0xb050458
 00186   524   NtGdiCreateSolidBrush  (0, 0, ...
 00187   524   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   524   NtGdiCreateSolidBrush  ... ) == 0x810045b
 00188   524   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   524   NtGdiCreateCompatibleDC  (0, ... ) == 0x601045c
 00190   524   NtGdiSelectBitmap  (100729948, 184878168, ... ) == 0x185000f
 00191   524   NtUserGetThreadDesktop  (524, 0, ... ) == 0x2c
 00192   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   524   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   524   NtClose  (52, ... ) == 0x0
 00195   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810cc017
 00197   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810cc01c
 00199   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810cc01e
 00201   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810c8002
 00203   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810cc018
 00205   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810cc01a
 00207   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810cc01d
 00209   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810cc026
 00211   524   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   524   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810cc019
 00213   524   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc020
 00214   524   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc022
 00215   524   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc023
 00216   524   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc024
 00217   524   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00218   524   NtAllocateVirtualMemory  (-1, 6074368, 0, 4096, 4096, 32, ... 6074368, 4096, ) == 0x0
 00217   524   NtUserRegisterClassExWOW  ... ) == 0x810cc025
 00219   524   NtCallbackReturn  (0, 0, 0, ...
 00220   524   NtGdiInit  (... ) == 0x1
 00221   524   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   524   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   524   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   524   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   524   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   524   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   524   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   524   NtClose  (52, ... ) == 0x0
 00230   524   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   524   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   524   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   524   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   524   NtClose  (52, ... ) == 0x0
 00236   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   524   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   524   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   524   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   524   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   524   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   524   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   524   NtClose  (52, ... ) == 0x0
 00246   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   524   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   524   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   524   NtClose  (52, ... ) == 0x0
 00250   524   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   524   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   524   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   524   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   524   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   524   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   524   NtClose  (56, ... ) == 0x0
 00258   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   524   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   524   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   524   NtClose  (56, ... ) == 0x0
 00263   524   NtQueryDefaultUILanguage  (1241756, ...
 00264   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   524   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   524   NtClose  (-2147482020, ... ) == 0x0
 00268   524   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   524   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   524   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   524   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   524   NtClose  (-2147482032, ... ) == 0x0
 00273   524   NtClose  (-2147482020, ... ) == 0x0
 00263   524   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   524   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   524   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   524   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   524   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   524   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   524   NtQueryDefaultUILanguage  (2013024600, ...
 00281   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   524   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   524   NtClose  (-2147482020, ... ) == 0x0
 00285   524   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   524   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   524   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   524   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   524   NtClose  (-2147482032, ... ) == 0x0
 00290   524   NtClose  (-2147482020, ... ) == 0x0
 00280   524   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   524   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   524   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   524   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   524   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   524   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 520, 524, 1568, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 520, 524, 1568, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 520, 524, 1568, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   524   NtClose  (56, ... ) == 0x0
 00297   524   NtClose  (60, ... ) == 0x0
 00298   524   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   524   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   524   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   524   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   524   NtClose  (56, ... ) == 0x0
 00314   524   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   524   NtClose  (64, ... ) == 0x0
 00316   524   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   524   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   524   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   524   NtClose  (64, ... ) == 0x0
 00321   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   524   NtClose  (56, ... ) == 0x0
 00323   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   524   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   524   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   524   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   524   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   524   NtQueryDefaultUILanguage  (1239368, ...
 00346   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   524   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   524   NtClose  (-2147482020, ... ) == 0x0
 00350   524   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   524   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   524   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   524   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   524   NtClose  (-2147482032, ... ) == 0x0
 00355   524   NtClose  (-2147482020, ... ) == 0x0
 00345   524   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   524   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   524   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   524   NtClose  (56, ... ) == 0x0
 00361   524   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   524   NtClose  (64, ... ) == 0x0
 00363   524   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   524   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   524   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   524   NtClose  (64, ... ) == 0x0
 00368   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   524   NtClose  (56, ... ) == 0x0
 00370   524   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   524   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   524   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   524   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   524   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   524   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   524   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 520, 524, 1569, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 520, 524, 1569, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 520, 524, 1569, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   524   NtClose  (56, ... ) == 0x0
 00378   524   NtClose  (64, ... ) == 0x0
 00379   524   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   524   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   524   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   524   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   524   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   524   NtUserGetDC  (0, ... ) == 0x1010051
 00385   524   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00386   524   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   524   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   524   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   524   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   524   NtClose  (64, ... ) == 0x0
 00391   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   524   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   524   NtClose  (64, ... ) == 0x0
 00395   524   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   524   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   524   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   524   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   524   NtClose  (56, ... ) == 0x0
 00400   524   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   524   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   524   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   524   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   524   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   524   NtClose  (68, ... ) == 0x0
 00407   524   NtClose  (56, ... ) == 0x0
 00408   524   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   524   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   524   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   524   NtClose  (56, ... ) == 0x0
 00413   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03b
 00415   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03d
 00416   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc03f
 00418   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc041
 00420   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc043
 00422   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc045
 00423   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc047
 00425   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc049
 00427   524   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04b
 00430   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04d
 00432   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04f
 00434   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc051
 00435   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc053
 00437   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc055
 00439   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc057
 00440   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc059
 00442   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05b
 00444   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05d
 00446   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05f
 00448   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc017
 00450   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc019
 00452   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc018
 00454   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01a
 00456   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   524   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc01c
 00458   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01e
 00460   524   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00461   524   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810cc01b
 00462   524   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00463   524   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810cc068
 00464   524   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00465   524   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ...
 00466   524   NtAllocateVirtualMemory  (-1, 6078464, 0, 4096, 4096, 32, ... 6078464, 4096, ) == 0x0
 00465   524   NtUserRegisterClassExWOW  ... ) == 0x810cc06a
 00467   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00468   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00469   524   NtClose  (56, ... ) == 0x0
 00470   524   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {520, 0}, ... 56, ) == 0x0
 00471   524   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00472   524   NtClose  (56, ... ) == 0x0
 00473   524   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00474   524   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00475   524   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00476   524   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00477   524   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00478   524   NtClose  (56, ... ) == 0x0
 00479   524   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00480   524   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00481   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00482   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00483   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03b
 00484   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03d
 00486   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03f
 00489   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc041
 00492   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc043
 00495   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc045
 00497   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc047
 00500   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   524   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   524   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810cc049
 00503   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04b
 00506   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04d
 00509   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04f
 00512   524   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   524   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810cc051
 00514   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc053
 00517   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc055
 00520   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc057
 00521   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc059
 00524   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05b
 00527   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05d
 00530   524   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   524   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   524   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05f
 00533   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   524   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   524   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   524   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   524   NtTestAlert  (... ) == 0x0
 00554   524   NtContinue  (1244464, 1, ...
 00555   524   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   524   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   524   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   524   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   524   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   524   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   524   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   524   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   524   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   524   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   524   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   524   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   524   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   524   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   524   NtClose  (56, ... ) == 0x0
 00572   524   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   524   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   524   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   524   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   524   NtClose  (56, ... ) == 0x0
 00580   524   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   524   NtClose  (68, ... ) == 0x0
 00582   524   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   524   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   524   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   524   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   524   NtClose  (68, ... ) == 0x0
 00587   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   524   NtReleaseMutant  (16, ...
 00589   524   NtContinue  (-136150904, 0, ...
 00588   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   524   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   524   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   524   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   524   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   524   NtUserCallNoParam  (29, ...
 00595   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   524   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   524   NtClose  (68, ... ) == 0x0
 00599   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   524   NtClose  (56, ... ) == 0x0
 00601   524   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   524   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   524   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   524   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   524   NtClose  (56, ... ) == 0x0
 00607   524   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   524   NtClose  (68, ... ) == 0x0
 00609   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00610   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00611   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   524   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   524   NtClose  (68, ... ) == 0x0
 00615   524   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   524   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   524   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   524   NtClose  (56, ... ) == 0x0
 00619   524   NtClose  (68, ... ) == 0x0
 00620   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   524   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   524   NtClose  (68, ... ) == 0x0
 00624   524   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   524   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   524   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   524   NtClose  (56, ... ) == 0x0
 00628   524   NtClose  (68, ... ) == 0x0
 00629   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   524   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   524   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   524   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   524   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   524   NtUserGetGUIThreadInfo  (524, 1244344, ... ) == 0x1
 00636   524   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   524   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1571, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 520, 524, 1571, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1571, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   524   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1572, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 520, 524, 1572, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1572, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   524   NtUserCallNoParam  (29, ...
 00640   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   524   NtUserCallNoParam  ... ) == 0x0
 00641   524   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   524   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x70a045d
 00643   524   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0x60a045e
 00644   524   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1573, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 520, 524, 1573, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 520, 524, 1573, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   524   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00647   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00648   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00649   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00650   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00651   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00652   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00653   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00654   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00655   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00656   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00657   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00658   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00659   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00660   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00661   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00662   524   NtUserGetWindowDC  (0, ... ) == 0x1010053
 00663   524   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0x1100460
 00664   524   NtUserCallOneParam  (16842835, 56, ... ) == 0x1
 00665   524   NtUserCallNoParam  (29, ...
 00666   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   524   NtUserCallNoParam  ... ) == 0x0
 00667   524   NtUserCallNoParam  (29, ...
 00668   524   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   524   NtUserCallNoParam  ... ) == 0x0
 00594   524   NtUserCallNoParam  ... ) == 0x1
 00669   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   524   NtReleaseMutant  (16, ...
 00671   524   NtContinue  (-136150904, 0, ...
 00670   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   524   NtReleaseMutant  (16, ...
 00674   524   NtContinue  (-136150904, 0, ...
 00673   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   524   NtReleaseMutant  (16, ...
 00677   524   NtContinue  (-136150904, 0, ...
 00676   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   524   NtReleaseMutant  (16, ...
 00680   524   NtContinue  (-136150904, 0, ...
 00679   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   524   NtReleaseMutant  (16, ...
 00683   524   NtContinue  (-136150904, 0, ...
 00682   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   524   NtReleaseMutant  (16, ...
 00686   524   NtContinue  (-136150904, 0, ...
 00685   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   524   NtReleaseMutant  (16, ...
 00689   524   NtContinue  (-136150904, 0, ...
 00688   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   524   NtReleaseMutant  (16, ...
 00692   524   NtContinue  (-136150904, 0, ...
 00691   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   524   NtReleaseMutant  (16, ...
 00695   524   NtContinue  (-136150904, 0, ...
 00694   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   524   NtReleaseMutant  (16, ...
 00698   524   NtContinue  (-136150904, 0, ...
 00697   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   524   NtReleaseMutant  (16, ...
 00701   524   NtContinue  (-136150904, 0, ...
 00700   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   524   NtReleaseMutant  (16, ...
 00704   524   NtContinue  (-136150904, 0, ...
 00703   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   524   NtReleaseMutant  (16, ...
 00707   524   NtContinue  (-136150904, 0, ...
 00706   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   524   NtReleaseMutant  (16, ...
 00710   524   NtContinue  (-136150904, 0, ...
 00709   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   524   NtReleaseMutant  (16, ...
 00713   524   NtContinue  (-136150904, 0, ...
 00712   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   524   NtReleaseMutant  (16, ...
 00716   524   NtContinue  (-136150904, 0, ...
 00715   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   524   NtReleaseMutant  (16, ...
 00719   524   NtContinue  (-136150904, 0, ...
 00718   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   524   NtReleaseMutant  (16, ...
 00722   524   NtContinue  (-136150904, 0, ...
 00721   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   524   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   524   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   524   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   524   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   524   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   524   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   524   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   524   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   524   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   524   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   524   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   524   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   524   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   524   NtClose  (88, ... ) == 0x0
 00741   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   524   NtClose  (88, ... ) == 0x0
 00746   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   524   NtClose  (88, ... ) == 0x0
 00751   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   524   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   524   NtClose  (88, ... ) == 0x0
 00757   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   524   NtClose  (88, ... ) == 0x0
 00762   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   524   NtClose  (88, ... ) == 0x0
 00767   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   524   NtClose  (88, ... ) == 0x0
 00772   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   524   NtClose  (88, ... ) == 0x0
 00777   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   524   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   524   NtClose  (88, ... ) == 0x0
 00783   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\10\2\0\0\14\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   524   NtClose  (88, ... ) == 0x0
 00788   524   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   524   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\10\2\0\0\14\2\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\10\2\0\0\14\2\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\10\2\0\0\14\2\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\10\2\0\0\14\2\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\10\2\0\0\14\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\10\2\0\0\14\2\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\10\2\0\0\14\2\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\10\2\0\0\14\2\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\10\2\0\0\14\2\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\10\2\0\0\14\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   524   NtClose  (88, ... ) == 0x0
 00793   524   NtClose  (84, ... ) == 0x0
 00794   524   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   524   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   524   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   524   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   524   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   524   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   524   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   524   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   524   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   524   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   524   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   524   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   524   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   524   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   524   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   524   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   524   NtClose  (96, ... ) == 0x0
 00817   524   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   524   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   524   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   524   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   524   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   524   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   524   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   524   NtClose  (96, ... ) == 0x0
 00831   524   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   524   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   524   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   524   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   524   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   524   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   524   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   524   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   524   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   524   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   524   NtClose  (96, ... ) == 0x0
 00846   524   NtClose  (92, ... ) == 0x0
 00847   524   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   524   NtClose  (72, ... ) == 0x0
 00849   524   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   524   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   524   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   524   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   524   NtClose  (72, ... ) == 0x0
 00854   524   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   524   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   524   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   524   NtAllocateVirtualMemory  (-1, 9846784, 0, 16384, 4096, 4, ... 9846784, 16384, ) == 0x0
 00858   524   NtAllocateVirtualMemory  (-1, 0, 0, 310, 4096, 64, ... 9502720, 4096, ) == 0x0
 00859   524   NtFreeVirtualMemory  (-1, (0x964000), 16384, 16384, ... (0x964000), 16384, ) == 0x0
 00860   524   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00861   524   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00862   524   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00863   524   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00864   524   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00865   524   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00866   524   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00867   524   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00868   524   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00869   524   NtClose  (92, ... ) == 0x0
 00870   524   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00871   524   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00872   524   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00873   524   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00874   524   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00875   524   NtClose  (92, ... ) == 0x0
 00876   524   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00877   524   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00878   524   NtClose  (92, ... ) == 0x0
 00879   524   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00880   524   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00881   524   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00882   524   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00883   524   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00884   524   NtClose  (92, ... ) == 0x0
 00885   524   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00886   524   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00887   524   NtClose  (92, ... ) == 0x0
 00888   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00889   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00890   524   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00891   524   NtClose  (92, ... ) == 0x0
 00892   524   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00893   524   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00894   524   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00895   524   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00896   524   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00897   524   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00898   524   NtSetInformationFile  (-2147482808, -136150452, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00899   524   NtSetInformationFile  (-2147482808, -136150084, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00900   524   NtSetInformationFile  (-2147482808, -136150076, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   524   NtCreateKey  ... 100, 1, ) == 0x0
 00901   524   NtClose  (96, ... ) == 0x0
 00902   524   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00903   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00904   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00905   524   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00906   524   NtClose  (96, ... ) == 0x0
 00907   524   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00908   524   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00909   524   NtClose  (102, ... ) == 0x0
 00910   524   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00911   524   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00912   524   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00913   524   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00914   524   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00915   524   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00916   524   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00917   524   NtClose  (96, ... ) == 0x0
 00918   524   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00919   524   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00920   524   NtClose  (102, ... ) == 0x0
 00921   524   NtContinue  (1244320, 0, ...
 00922   524   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00923   524   NtContinue  (1244304, 0, ...
 00924   524   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00925   524   NtContinue  (1244304, 0, ...
 00926   524   NtContinue  (1244312, 0, ...
 00927   524   NtContinue  (1244300, 0, ...
 00928   524   NtContinue  (1244312, 0, ...
 00929   524   NtContinue  (1244320, 0, ...
 00930   524   NtContinue  (1244312, 0, ...
 00931   524   NtContinue  (1244312, 0, ...
 00932   524   NtContinue  (1244312, 0, ...
 00933   524   NtContinue  (1244312, 0, ...
 00934   524   NtContinue  (1244312, 0, ...
 00935   524   NtContinue  (1244312, 0, ...
 00936   524   NtContinue  (1244312, 0, ...
 00937   524   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00938   524   NtContinue  (1244320, 0, ...
 00939   524   NtContinue  (1244320, 0, ...
 00940   524   NtContinue  (1244320, 0, ...
 00941   524   NtContinue  (1244320, 0, ...
 00942   524   NtContinue  (1244320, 0, ...
 00943   524   NtContinue  (1244320, 0, ...
 00944   524   NtContinue  (1244320, 0, ...
 00945   524   NtContinue  (1244320, 0, ...
 00946   524   NtContinue  (1244320, 0, ...
 00947   524   NtContinue  (1244320, 0, ...
 00948   524   NtContinue  (1244320, 0, ...
 00949   524   NtContinue  (1244320, 0, ...
 00950   524   NtContinue  (1244320, 0, ...
 00951   524   NtContinue  (1244320, 0, ...
 00952   524   NtContinue  (1244320, 0, ...
 00953   524   NtContinue  (1244320, 0, ...
 00954   524   NtContinue  (1244320, 0, ...
 00955   524   NtContinue  (1244320, 0, ...
 00956   524   NtContinue  (1244320, 0, ...
 00957   524   NtContinue  (1244320, 0, ...
 00958   524   NtContinue  (1244320, 0, ...
 00959   524   NtContinue  (1244320, 0, ...
 00960   524   NtContinue  (1244320, 0, ...
 00961   524   NtContinue  (1244320, 0, ...
 00962   524   NtContinue  (1244320, 0, ...
 00963   524   NtContinue  (1244320, 0, ...
 00964   524   NtContinue  (1244320, 0, ...
 00965   524   NtContinue  (1244320, 0, ...
 00966   524   NtContinue  (1244320, 0, ...
 00967   524   NtContinue  (1244320, 0, ...
 00968   524   NtContinue  (1244320, 0, ...
 00969   524   NtContinue  (1244320, 0, ...
 00970   524   NtContinue  (1244320, 0, ...
 00971   524   NtContinue  (1244320, 0, ...
 00972   524   NtContinue  (1244320, 0, ...
 00973   524   NtContinue  (1244320, 0, ...
 00974   524   NtContinue  (1244320, 0, ...
 00975   524   NtContinue  (1244320, 0, ...
 00976   524   NtContinue  (1244320, 0, ...
 00977   524   NtContinue  (1244320, 0, ...
 00978   524   NtContinue  (1244320, 0, ...
 00979   524   NtContinue  (1244320, 0, ...
 00980   524   NtContinue  (1244320, 0, ...
 00981   524   NtContinue  (1244320, 0, ...
 00982   524   NtContinue  (1244320, 0, ...
 00983   524   NtContinue  (1244320, 0, ...
 00984   524   NtContinue  (1244320, 0, ...
 00985   524   NtContinue  (1244320, 0, ...
 00986   524   NtContinue  (1244320, 0, ...
 00987   524   NtContinue  (1244320, 0, ...
 00988   524   NtContinue  (1244320, 0, ...
 00989   524   NtContinue  (1244320, 0, ...
 00990   524   NtContinue  (1244320, 0, ...
 00991   524   NtContinue  (1244320, 0, ...
 00992   524   NtContinue  (1244320, 0, ...
 00993   524   NtContinue  (1244320, 0, ...
 00994   524   NtContinue  (1244320, 0, ...
 00995   524   NtContinue  (1244320, 0, ...
 00996   524   NtContinue  (1244320, 0, ...
 00997   524   NtContinue  (1244320, 0, ...
 00998   524   NtContinue  (1244320, 0, ...
 00999   524   NtContinue  (1244320, 0, ...
 01000   524   NtContinue  (1244320, 0, ...
 01001   524   NtContinue  (1244320, 0, ...
 01002   524   NtContinue  (1244320, 0, ...
 01003   524   NtContinue  (1244320, 0, ...
 01004   524   NtContinue  (1244320, 0, ...
 01005   524   NtContinue  (1244320, 0, ...
 01006   524   NtContinue  (1244320, 0, ...
 01007   524   NtContinue  (1244320, 0, ...
 01008   524   NtContinue  (1244320, 0, ...
 01009   524   NtContinue  (1244320, 0, ...
 01010   524   NtContinue  (1244320, 0, ...
 01011   524   NtContinue  (1244320, 0, ...
 01012   524   NtContinue  (1244320, 0, ...
 01013   524   NtContinue  (1244320, 0, ...
 01014   524   NtContinue  (1244320, 0, ...
 01015   524   NtContinue  (1244320, 0, ...
 01016   524   NtContinue  (1244320, 0, ...
 01017   524   NtContinue  (1244320, 0, ...
 01018   524   NtContinue  (1244320, 0, ...
 01019   524   NtContinue  (1244320, 0, ...
 01020   524   NtContinue  (1244320, 0, ...
 01021   524   NtContinue  (1244320, 0, ...
 01022   524   NtContinue  (1244320, 0, ...
 01023   524   NtContinue  (1244320, 0, ...
 01024   524   NtContinue  (1244320, 0, ...
 01025   524   NtContinue  (1244320, 0, ...
 01026   524   NtContinue  (1244320, 0, ...
 01027   524   NtContinue  (1244320, 0, ...
 01028   524   NtContinue  (1244320, 0, ...
 01029   524   NtContinue  (1244320, 0, ...
 01030   524   NtContinue  (1244320, 0, ...
 01031   524   NtContinue  (1244320, 0, ...
 01032   524   NtContinue  (1244320, 0, ...
 01033   524   NtContinue  (1244320, 0, ...
 01034   524   NtContinue  (1244320, 0, ...
 01035   524   NtContinue  (1244320, 0, ...
 01036   524   NtContinue  (1244320, 0, ...
 01037   524   NtContinue  (1244320, 0, ...
 01038   524   NtContinue  (1244320, 0, ...
 01039   524   NtContinue  (1244320, 0, ...
 01040   524   NtContinue  (1244320, 0, ...
 01041   524   NtContinue  (1244320, 0, ...
 01042   524   NtContinue  (1244320, 0, ...
 01043   524   NtContinue  (1244320, 0, ...
 01044   524   NtContinue  (1244320, 0, ...
 01045   524   NtContinue  (1244320, 0, ...
 01046   524   NtContinue  (1244320, 0, ...
 01047   524   NtContinue  (1244320, 0, ...
 01048   524   NtContinue  (1244320, 0, ...
 01049   524   NtContinue  (1244320, 0, ...
 01050   524   NtContinue  (1244320, 0, ...
 01051   524   NtContinue  (1244320, 0, ...
 01052   524   NtContinue  (1244320, 0, ...
 01053   524   NtContinue  (1244320, 0, ...
 01054   524   NtContinue  (1244320, 0, ...
 01055   524   NtContinue  (1244320, 0, ...
 01056   524   NtContinue  (1244320, 0, ...
 01057   524   NtContinue  (1244320, 0, ...
 01058   524   NtContinue  (1244320, 0, ...
 01059   524   NtContinue  (1244320, 0, ...
 01060   524   NtContinue  (1244320, 0, ...
 01061   524   NtContinue  (1244320, 0, ...
 01062   524   NtContinue  (1244320, 0, ...
 01063   524   NtContinue  (1244320, 0, ...
 01064   524   NtContinue  (1244320, 0, ...
 01065   524   NtContinue  (1244320, 0, ...
 01066   524   NtContinue  (1244320, 0, ...
 01067   524   NtContinue  (1244320, 0, ...
 01068   524   NtContinue  (1244320, 0, ...
 01069   524   NtContinue  (1244320, 0, ...
 01070   524   NtContinue  (1244320, 0, ...
 01071   524   NtContinue  (1244320, 0, ...
 01072   524   NtContinue  (1244320, 0, ...
 01073   524   NtContinue  (1244320, 0, ...
 01074   524   NtContinue  (1244320, 0, ...
 01075   524   NtContinue  (1244320, 0, ...
 01076   524   NtContinue  (1244320, 0, ...
 01077   524   NtContinue  (1244320, 0, ...
 01078   524   NtContinue  (1244320, 0, ...
 01079   524   NtContinue  (1244320, 0, ...
 01080   524   NtContinue  (1244320, 0, ...
 01081   524   NtContinue  (1244320, 0, ...
 01082   524   NtContinue  (1244320, 0, ...
 01083   524   NtContinue  (1244320, 0, ...
 01084   524   NtContinue  (1244320, 0, ...
 01085   524   NtContinue  (1244320, 0, ...
 01086   524   NtContinue  (1244320, 0, ...
 01087   524   NtContinue  (1244320, 0, ...
 01088   524   NtContinue  (1244320, 0, ...
 01089   524   NtContinue  (1244320, 0, ...
 01090   524   NtContinue  (1244320, 0, ...
 01091   524   NtContinue  (1244320, 0, ...
 01092   524   NtContinue  (1244320, 0, ...
 01093   524   NtContinue  (1244320, 0, ...
 01094   524   NtContinue  (1244320, 0, ...
 01095   524   NtContinue  (1244320, 0, ...
 01096   524   NtContinue  (1244320, 0, ...
 01097   524   NtContinue  (1244320, 0, ...
 01098   524   NtContinue  (1244320, 0, ...
 01099   524   NtContinue  (1244320, 0, ...
 01100   524   NtContinue  (1244320, 0, ...
 01101   524   NtContinue  (1244320, 0, ...
 01102   524   NtContinue  (1244320, 0, ...
 01103   524   NtContinue  (1244320, 0, ...
 01104   524   NtContinue  (1244320, 0, ...
 01105   524   NtContinue  (1244320, 0, ...
 01106   524   NtContinue  (1244320, 0, ...
 01107   524   NtContinue  (1244320, 0, ...
 01108   524   NtContinue  (1244320, 0, ...
 01109   524   NtContinue  (1244320, 0, ...
 01110   524   NtContinue  (1244320, 0, ...
 01111   524   NtContinue  (1244320, 0, ...
 01112   524   NtContinue  (1244320, 0, ...
 01113   524   NtContinue  (1244320, 0, ...
 01114   524   NtContinue  (1244320, 0, ...
 01115   524   NtContinue  (1244320, 0, ...
 01116   524   NtContinue  (1244320, 0, ...
 01117   524   NtContinue  (1244320, 0, ...
 01118   524   NtContinue  (1244320, 0, ...
 01119   524   NtContinue  (1244320, 0, ...
 01120   524   NtContinue  (1244320, 0, ...
 01121   524   NtContinue  (1244320, 0, ...
 01122   524   NtContinue  (1244320, 0, ...
 01123   524   NtContinue  (1244320, 0, ...
 01124   524   NtContinue  (1244320, 0, ...
 01125   524   NtContinue  (1244320, 0, ...
 01126   524   NtContinue  (1244320, 0, ...
 01127   524   NtContinue  (1244320, 0, ...
 01128   524   NtContinue  (1244320, 0, ...
 01129   524   NtContinue  (1244320, 0, ...
 01130   524   NtContinue  (1244320, 0, ...
 01131   524   NtContinue  (1244320, 0, ...
 01132   524   NtContinue  (1244320, 0, ...
 01133   524   NtContinue  (1244320, 0, ...
 01134   524   NtContinue  (1244320, 0, ...
 01135   524   NtContinue  (1244320, 0, ...
 01136   524   NtContinue  (1244320, 0, ...
 01137   524   NtContinue  (1244320, 0, ...
 01138   524   NtContinue  (1244320, 0, ...
 01139   524   NtContinue  (1244320, 0, ...
 01140   524   NtContinue  (1244320, 0, ...
 01141   524   NtContinue  (1244320, 0, ...
 01142   524   NtContinue  (1244320, 0, ...
 01143   524   NtContinue  (1244320, 0, ...
 01144   524   NtContinue  (1244320, 0, ...
 01145   524   NtContinue  (1244320, 0, ...
 01146   524   NtContinue  (1244320, 0, ...
 01147   524   NtContinue  (1244320, 0, ...
 01148   524   NtContinue  (1244320, 0, ...
 01149   524   NtContinue  (1244320, 0, ...
 01150   524   NtContinue  (1244320, 0, ...
 01151   524   NtContinue  (1244320, 0, ...
 01152   524   NtContinue  (1244320, 0, ...
 01153   524   NtContinue  (1244320, 0, ...
 01154   524   NtContinue  (1244320, 0, ...
 01155   524   NtContinue  (1244320, 0, ...
 01156   524   NtContinue  (1244320, 0, ...
 01157   524   NtContinue  (1244320, 0, ...
 01158   524   NtContinue  (1244320, 0, ...
 01159   524   NtContinue  (1244320, 0, ...
 01160   524   NtContinue  (1244320, 0, ...
 01161   524   NtContinue  (1244320, 0, ...
 01162   524   NtContinue  (1244320, 0, ...
 01163   524   NtContinue  (1244320, 0, ...
 01164   524   NtContinue  (1244320, 0, ...
 01165   524   NtContinue  (1244320, 0, ...
 01166   524   NtContinue  (1244320, 0, ...
 01167   524   NtContinue  (1244320, 0, ...
 01168   524   NtContinue  (1244320, 0, ...
 01169   524   NtContinue  (1244320, 0, ...
 01170   524   NtContinue  (1244320, 0, ...
 01171   524   NtContinue  (1244320, 0, ...
 01172   524   NtContinue  (1244320, 0, ...
 01173   524   NtContinue  (1244320, 0, ...
 01174   524   NtContinue  (1244320, 0, ...
 01175   524   NtContinue  (1244320, 0, ...
 01176   524   NtContinue  (1244320, 0, ...
 01177   524   NtContinue  (1244320, 0, ...
 01178   524   NtContinue  (1244320, 0, ...
 01179   524   NtContinue  (1244320, 0, ...
 01180   524   NtContinue  (1244320, 0, ...
 01181   524   NtContinue  (1244320, 0, ...
 01182   524   NtContinue  (1244320, 0, ...
 01183   524   NtContinue  (1244320, 0, ...
 01184   524   NtContinue  (1244320, 0, ...
 01185   524   NtContinue  (1244320, 0, ...
 01186   524   NtContinue  (1244320, 0, ...
 01187   524   NtContinue  (1244320, 0, ...
 01188   524   NtContinue  (1244320, 0, ...
 01189   524   NtContinue  (1244320, 0, ...
 01190   524   NtContinue  (1244320, 0, ...
 01191   524   NtContinue  (1244320, 0, ...
 01192   524   NtContinue  (1244320, 0, ...
 01193   524   NtContinue  (1244320, 0, ...
 01194   524   NtContinue  (1244320, 0, ...
 01195   524   NtContinue  (1244320, 0, ...
 01196   524   NtContinue  (1244320, 0, ...
 01197   524   NtContinue  (1244320, 0, ...
 01198   524   NtContinue  (1244320, 0, ...
 01199   524   NtContinue  (1244320, 0, ...
 01200   524   NtContinue  (1244320, 0, ...
 01201   524   NtContinue  (1244320, 0, ...
 01202   524   NtContinue  (1244320, 0, ...
 01203   524   NtContinue  (1244320, 0, ...
 01204   524   NtContinue  (1244320, 0, ...
 01205   524   NtContinue  (1244320, 0, ...
 01206   524   NtContinue  (1244320, 0, ...
 01207   524   NtContinue  (1244320, 0, ...
 01208   524   NtContinue  (1244320, 0, ...
 01209   524   NtContinue  (1244320, 0, ...
 01210   524   NtContinue  (1244320, 0, ...
 01211   524   NtContinue  (1244320, 0, ...
 01212   524   NtContinue  (1244320, 0, ...
 01213   524   NtContinue  (1244320, 0, ...
 01214   524   NtContinue  (1244320, 0, ...
 01215   524   NtContinue  (1244320, 0, ...
 01216   524   NtContinue  (1244320, 0, ...
 01217   524   NtContinue  (1244320, 0, ...
 01218   524   NtContinue  (1244320, 0, ...
 01219   524   NtContinue  (1244320, 0, ...
 01220   524   NtContinue  (1244320, 0, ...
 01221   524   NtContinue  (1244320, 0, ...
 01222   524   NtContinue  (1244320, 0, ...
 01223   524   NtContinue  (1244320, 0, ...
 01224   524   NtContinue  (1244320, 0, ...
 01225   524   NtContinue  (1244320, 0, ...
 01226   524   NtContinue  (1244320, 0, ...
 01227   524   NtContinue  (1244320, 0, ...
 01228   524   NtContinue  (1244320, 0, ...
 01229   524   NtContinue  (1244320, 0, ...
 01230   524   NtContinue  (1244320, 0, ...
 01231   524   NtContinue  (1244320, 0, ...
 01232   524   NtContinue  (1244320, 0, ...
 01233   524   NtContinue  (1244320, 0, ...
 01234   524   NtContinue  (1244320, 0, ...
 01235   524   NtContinue  (1244320, 0, ...
 01236   524   NtContinue  (1244320, 0, ...
 01237   524   NtContinue  (1244320, 0, ...
 01238   524   NtContinue  (1244320, 0, ...
 01239   524   NtContinue  (1244320, 0, ...
 01240   524   NtContinue  (1244320, 0, ...
 01241   524   NtContinue  (1244320, 0, ...
 01242   524   NtContinue  (1244320, 0, ...
 01243   524   NtContinue  (1244320, 0, ...
 01244   524   NtContinue  (1244320, 0, ...
 01245   524   NtContinue  (1244320, 0, ...
 01246   524   NtContinue  (1244320, 0, ...
 01247   524   NtContinue  (1244320, 0, ...
 01248   524   NtContinue  (1244320, 0, ...
 01249   524   NtContinue  (1244320, 0, ...
 01250   524   NtContinue  (1244320, 0, ...
 01251   524   NtContinue  (1244320, 0, ...
 01252   524   NtContinue  (1244320, 0, ...
 01253   524   NtContinue  (1244320, 0, ...
 01254   524   NtContinue  (1244320, 0, ...
 01255   524   NtContinue  (1244320, 0, ...
 01256   524   NtContinue  (1244320, 0, ...
 01257   524   NtContinue  (1244320, 0, ...
 01258   524   NtContinue  (1244320, 0, ...
 01259   524   NtContinue  (1244320, 0, ...
 01260   524   NtContinue  (1244320, 0, ...
 01261   524   NtContinue  (1244320, 0, ...
 01262   524   NtContinue  (1244320, 0, ...
 01263   524   NtContinue  (1244320, 0, ...
 01264   524   NtContinue  (1244320, 0, ...
 01265   524   NtContinue  (1244320, 0, ...
 01266   524   NtContinue  (1244320, 0, ...
 01267   524   NtContinue  (1244320, 0, ...
 01268   524   NtContinue  (1244320, 0, ...
 01269   524   NtContinue  (1244320, 0, ...
 01270   524   NtContinue  (1244320, 0, ...
 01271   524   NtContinue  (1244320, 0, ...
 01272   524   NtContinue  (1244320, 0, ...
 01273   524   NtContinue  (1244320, 0, ...
 01274   524   NtContinue  (1244320, 0, ...
 01275   524   NtContinue  (1244320, 0, ...
 01276   524   NtContinue  (1244320, 0, ...
 01277   524   NtContinue  (1244320, 0, ...
 01278   524   NtContinue  (1244320, 0, ...
 01279   524   NtContinue  (1244320, 0, ...
 01280   524   NtContinue  (1244320, 0, ...
 01281   524   NtContinue  (1244320, 0, ...
 01282   524   NtContinue  (1244320, 0, ...
 01283   524   NtContinue  (1244320, 0, ...
 01284   524   NtContinue  (1244320, 0, ...
 01285   524   NtContinue  (1244320, 0, ...
 01286   524   NtContinue  (1244320, 0, ...
 01287   524   NtContinue  (1244320, 0, ...
 01288   524   NtContinue  (1244320, 0, ...
 01289   524   NtContinue  (1244320, 0, ...
 01290   524   NtContinue  (1244320, 0, ...
 01291   524   NtContinue  (1244320, 0, ...
 01292   524   NtContinue  (1244320, 0, ...
 01293   524   NtContinue  (1244320, 0, ...
 01294   524   NtContinue  (1244320, 0, ...
 01295   524   NtContinue  (1244320, 0, ...
 01296   524   NtContinue  (1244320, 0, ...
 01297   524   NtContinue  (1244320, 0, ...
 01298   524   NtContinue  (1244320, 0, ...
 01299   524   NtContinue  (1244320, 0, ...
 01300   524   NtContinue  (1244320, 0, ...
 01301   524   NtContinue  (1244320, 0, ...
 01302   524   NtContinue  (1244320, 0, ...
 01303   524   NtContinue  (1244320, 0, ...
 01304   524   NtContinue  (1244320, 0, ...
 01305   524   NtContinue  (1244320, 0, ...
 01306   524   NtContinue  (1244320, 0, ...
 01307   524   NtContinue  (1244320, 0, ...
 01308   524   NtContinue  (1244320, 0, ...
 01309   524   NtContinue  (1244320, 0, ...
 01310   524   NtContinue  (1244320, 0, ...
 01311   524   NtContinue  (1244320, 0, ...
 01312   524   NtContinue  (1244320, 0, ...
 01313   524   NtContinue  (1244320, 0, ...
 01314   524   NtContinue  (1244320, 0, ...
 01315   524   NtContinue  (1244320, 0, ...
 01316   524   NtContinue  (1244320, 0, ...
 01317   524   NtContinue  (1244320, 0, ...
 01318   524   NtContinue  (1244320, 0, ...
 01319   524   NtContinue  (1244320, 0, ...
 01320   524   NtContinue  (1244320, 0, ...
 01321   524   NtContinue  (1244320, 0, ...
 01322   524   NtContinue  (1244320, 0, ...
 01323   524   NtContinue  (1244320, 0, ...
 01324   524   NtContinue  (1244320, 0, ...
 01325   524   NtContinue  (1244320, 0, ...
 01326   524   NtContinue  (1244320, 0, ...
 01327   524   NtContinue  (1244320, 0, ...
 01328   524   NtContinue  (1244320, 0, ...
 01329   524   NtContinue  (1244320, 0, ...
 01330   524   NtContinue  (1244320, 0, ...
 01331   524   NtContinue  (1244320, 0, ...
 01332   524   NtContinue  (1244320, 0, ...
 01333   524   NtContinue  (1244320, 0, ...
 01334   524   NtContinue  (1244320, 0, ...
 01335   524   NtContinue  (1244320, 0, ...
 01336   524   NtContinue  (1244320, 0, ...
 01337   524   NtContinue  (1244320, 0, ...
 01338   524   NtContinue  (1244320, 0, ...
 01339   524   NtContinue  (1244320, 0, ...
 01340   524   NtContinue  (1244320, 0, ...
 01341   524   NtContinue  (1244320, 0, ...
 01342   524   NtContinue  (1244320, 0, ...
 01343   524   NtContinue  (1244320, 0, ...
 01344   524   NtContinue  (1244320, 0, ...
 01345   524   NtContinue  (1244320, 0, ...
 01346   524   NtContinue  (1244320, 0, ...
 01347   524   NtContinue  (1244320, 0, ...
 01348   524   NtContinue  (1244320, 0, ...
 01349   524   NtContinue  (1244320, 0, ...
 01350   524   NtContinue  (1244320, 0, ...
 01351   524   NtContinue  (1244320, 0, ...
 01352   524   NtContinue  (1244320, 0, ...
 01353   524   NtContinue  (1244320, 0, ...
 01354   524   NtContinue  (1244320, 0, ...
 01355   524   NtContinue  (1244320, 0, ...
 01356   524   NtContinue  (1244320, 0, ...
 01357   524   NtContinue  (1244320, 0, ...
 01358   524   NtContinue  (1244320, 0, ...
 01359   524   NtContinue  (1244320, 0, ...
 01360   524   NtContinue  (1244320, 0, ...
 01361   524   NtContinue  (1244320, 0, ...
 01362   524   NtContinue  (1244320, 0, ...
 01363   524   NtContinue  (1244320, 0, ...
 01364   524   NtContinue  (1244320, 0, ...
 01365   524   NtContinue  (1244320, 0, ...
 01366   524   NtContinue  (1244320, 0, ...
 01367   524   NtContinue  (1244320, 0, ...
 01368   524   NtContinue  (1244320, 0, ...
 01369   524   NtContinue  (1244320, 0, ...
 01370   524   NtContinue  (1244320, 0, ...
 01371   524   NtContinue  (1244320, 0, ...
 01372   524   NtContinue  (1244320, 0, ...
 01373   524   NtContinue  (1244320, 0, ...
 01374   524   NtContinue  (1244320, 0, ...
 01375   524   NtContinue  (1244320, 0, ...
 01376   524   NtContinue  (1244320, 0, ...
 01377   524   NtContinue  (1244320, 0, ...
 01378   524   NtContinue  (1244320, 0, ...
 01379   524   NtContinue  (1244320, 0, ...
 01380   524   NtContinue  (1244320, 0, ...
 01381   524   NtContinue  (1244320, 0, ...
 01382   524   NtContinue  (1244320, 0, ...
 01383   524   NtContinue  (1244320, 0, ...
 01384   524   NtContinue  (1244320, 0, ...
 01385   524   NtContinue  (1244320, 0, ...
 01386   524   NtContinue  (1244320, 0, ...
 01387   524   NtContinue  (1244320, 0, ...
 01388   524   NtContinue  (1244320, 0, ...
 01389   524   NtContinue  (1244320, 0, ...
 01390   524   NtContinue  (1244320, 0, ...
 01391   524   NtContinue  (1244320, 0, ...
 01392   524   NtContinue  (1244320, 0, ...
 01393   524   NtContinue  (1244320, 0, ...
 01394   524   NtContinue  (1244320, 0, ...
 01395   524   NtContinue  (1244320, 0, ...
 01396   524   NtContinue  (1244320, 0, ...
 01397   524   NtContinue  (1244320, 0, ...
 01398   524   NtContinue  (1244320, 0, ...
 01399   524   NtContinue  (1244320, 0, ...
 01400   524   NtContinue  (1244320, 0, ...
 01401   524   NtContinue  (1244320, 0, ...
 01402   524   NtContinue  (1244320, 0, ...
 01403   524   NtContinue  (1244320, 0, ...
 01404   524   NtContinue  (1244320, 0, ...
 01405   524   NtContinue  (1244320, 0, ...
 01406   524   NtContinue  (1244320, 0, ...
 01407   524   NtContinue  (1244320, 0, ...
 01408   524   NtContinue  (1244320, 0, ...
 01409   524   NtContinue  (1244320, 0, ...
 01410   524   NtContinue  (1244320, 0, ...
 01411   524   NtContinue  (1244320, 0, ...
 01412   524   NtContinue  (1244320, 0, ...
 01413   524   NtContinue  (1244320, 0, ...
 01414   524   NtContinue  (1244320, 0, ...
 01415   524   NtContinue  (1244320, 0, ...
 01416   524   NtContinue  (1244320, 0, ...
 01417   524   NtContinue  (1244320, 0, ...
 01418   524   NtContinue  (1244320, 0, ...
 01419   524   NtContinue  (1244320, 0, ...
 01420   524   NtContinue  (1244320, 0, ...
 01421   524   NtContinue  (1244320, 0, ...
 01422   524   NtContinue  (1244320, 0, ...
 01423   524   NtContinue  (1244320, 0, ...
 01424   524   NtContinue  (1244320, 0, ...
 01425   524   NtContinue  (1244320, 0, ...
 01426   524   NtContinue  (1244320, 0, ...
 01427   524   NtContinue  (1244320, 0, ...
 01428   524   NtContinue  (1244320, 0, ...
 01429   524   NtContinue  (1244320, 0, ...
 01430   524   NtContinue  (1244320, 0, ...
 01431   524   NtContinue  (1244320, 0, ...
 01432   524   NtContinue  (1244320, 0, ...
 01433   524   NtContinue  (1244320, 0, ...
 01434   524   NtContinue  (1244320, 0, ...
 01435   524   NtContinue  (1244320, 0, ...
 01436   524   NtContinue  (1244320, 0, ...
 01437   524   NtContinue  (1244320, 0, ...
 01438   524   NtContinue  (1244320, 0, ...
 01439   524   NtContinue  (1244320, 0, ...
 01440   524   NtContinue  (1244320, 0, ...
 01441   524   NtContinue  (1244320, 0, ...
 01442   524   NtContinue  (1244320, 0, ...
 01443   524   NtContinue  (1244320, 0, ...
 01444   524   NtContinue  (1244320, 0, ...
 01445   524   NtContinue  (1244320, 0, ...
 01446   524   NtContinue  (1244320, 0, ...
 01447   524   NtContinue  (1244320, 0, ...
 01448   524   NtContinue  (1244320, 0, ...
 01449   524   NtContinue  (1244320, 0, ...
 01450   524   NtContinue  (1244320, 0, ...
 01451   524   NtContinue  (1244320, 0, ...
 01452   524   NtContinue  (1244320, 0, ...
 01453   524   NtContinue  (1244320, 0, ...
 01454   524   NtContinue  (1244320, 0, ...
 01455   524   NtContinue  (1244320, 0, ...
 01456   524   NtContinue  (1244320, 0, ...
 01457   524   NtContinue  (1244320, 0, ...
 01458   524   NtContinue  (1244320, 0, ...
 01459   524   NtContinue  (1244320, 0, ...
 01460   524   NtContinue  (1244320, 0, ...
 01461   524   NtContinue  (1244320, 0, ...
 01462   524   NtContinue  (1244320, 0, ...
 01463   524   NtContinue  (1244320, 0, ...
 01464   524   NtContinue  (1244320, 0, ...
 01465   524   NtContinue  (1244320, 0, ...
 01466   524   NtContinue  (1244320, 0, ...
 01467   524   NtContinue  (1244320, 0, ...
 01468   524   NtContinue  (1244320, 0, ...
 01469   524   NtContinue  (1244320, 0, ...
 01470   524   NtContinue  (1244320, 0, ...
 01471   524   NtContinue  (1244320, 0, ...
 01472   524   NtContinue  (1244320, 0, ...
 01473   524   NtContinue  (1244320, 0, ...
 01474   524   NtContinue  (1244320, 0, ...
 01475   524   NtContinue  (1244320, 0, ...
 01476   524   NtContinue  (1244320, 0, ...
 01477   524   NtContinue  (1244320, 0, ...
 01478   524   NtContinue  (1244320, 0, ...
 01479   524   NtContinue  (1244320, 0, ...
 01480   524   NtContinue  (1244320, 0, ...
 01481   524   NtContinue  (1244320, 0, ...
 01482   524   NtContinue  (1244320, 0, ...
 01483   524   NtContinue  (1244320, 0, ...
 01484   524   NtContinue  (1244320, 0, ...
 01485   524   NtContinue  (1244320, 0, ...
 01486   524   NtContinue  (1244320, 0, ...
 01487   524   NtContinue  (1244320, 0, ...
 01488   524   NtContinue  (1244320, 0, ...
 01489   524   NtContinue  (1244320, 0, ...
 01490   524   NtContinue  (1244320, 0, ...
 01491   524   NtContinue  (1244320, 0, ...
 01492   524   NtContinue  (1244320, 0, ...
 01493   524   NtContinue  (1244320, 0, ...
 01494   524   NtContinue  (1244320, 0, ...
 01495   524   NtContinue  (1244320, 0, ...
 01496   524   NtContinue  (1244320, 0, ...
 01497   524   NtContinue  (1244320, 0, ...
 01498   524   NtContinue  (1244320, 0, ...
 01499   524   NtContinue  (1244320, 0, ...
 01500   524   NtContinue  (1244320, 0, ...
 01501   524   NtContinue  (1244320, 0, ...
 01502   524   NtContinue  (1244320, 0, ...
 01503   524   NtContinue  (1244320, 0, ...
 01504   524   NtContinue  (1244320, 0, ...
 01505   524   NtContinue  (1244320, 0, ...
 01506   524   NtContinue  (1244320, 0, ...
 01507   524   NtContinue  (1244320, 0, ...
 01508   524   NtContinue  (1244320, 0, ...
 01509   524   NtContinue  (1244320, 0, ...
 01510   524   NtContinue  (1244320, 0, ...
 01511   524   NtContinue  (1244320, 0, ...
 01512   524   NtContinue  (1244320, 0, ...
 01513   524   NtContinue  (1244320, 0, ...
 01514   524   NtContinue  (1244320, 0, ...
 01515   524   NtContinue  (1244320, 0, ...
 01516   524   NtContinue  (1244320, 0, ...
 01517   524   NtContinue  (1244320, 0, ...
 01518   524   NtContinue  (1244320, 0, ...
 01519   524   NtContinue  (1244320, 0, ...
 01520   524   NtContinue  (1244320, 0, ...
 01521   524   NtContinue  (1244320, 0, ...
 01522   524   NtContinue  (1244320, 0, ...
 01523   524   NtContinue  (1244320, 0, ...
 01524   524   NtContinue  (1244320, 0, ...
 01525   524   NtContinue  (1244320, 0, ...
 01526   524   NtContinue  (1244320, 0, ...
 01527   524   NtContinue  (1244320, 0, ...
 01528   524   NtContinue  (1244320, 0, ...
 01529   524   NtContinue  (1244320, 0, ...
 01530   524   NtContinue  (1244320, 0, ...
 01531   524   NtContinue  (1244320, 0, ...
 01532   524   NtContinue  (1244320, 0, ...
 01533   524   NtContinue  (1244320, 0, ...
 01534   524   NtContinue  (1244320, 0, ...
 01535   524   NtContinue  (1244320, 0, ...
 01536   524   NtContinue  (1244320, 0, ...
 01537   524   NtContinue  (1244320, 0, ...
 01538   524   NtContinue  (1244320, 0, ...
 01539   524   NtContinue  (1244320, 0, ...
 01540   524   NtContinue  (1244320, 0, ...
 01541   524   NtContinue  (1244320, 0, ...
 01542   524   NtContinue  (1244320, 0, ...
 01543   524   NtContinue  (1244320, 0, ...
 01544   524   NtContinue  (1244320, 0, ...
 01545   524   NtContinue  (1244320, 0, ...
 01546   524   NtContinue  (1244320, 0, ...
 01547   524   NtContinue  (1244320, 0, ...
 01548   524   NtContinue  (1244320, 0, ...
 01549   524   NtContinue  (1244320, 0, ...
 01550   524   NtContinue  (1244320, 0, ...
 01551   524   NtContinue  (1244320, 0, ...
 01552   524   NtContinue  (1244320, 0, ...
 01553   524   NtContinue  (1244320, 0, ...
 01554   524   NtContinue  (1244320, 0, ...
 01555   524   NtContinue  (1244320, 0, ...
 01556   524   NtContinue  (1244320, 0, ...
 01557   524   NtContinue  (1244320, 0, ...
 01558   524   NtContinue  (1244320, 0, ...
 01559   524   NtContinue  (1244320, 0, ...
 01560   524   NtContinue  (1244320, 0, ...
 01561   524   NtContinue  (1244320, 0, ...
 01562   524   NtContinue  (1244320, 0, ...
 01563   524   NtContinue  (1244320, 0, ...
 01564   524   NtContinue  (1244320, 0, ...
 01565   524   NtContinue  (1244320, 0, ...
 01566   524   NtContinue  (1244320, 0, ...
 01567   524   NtContinue  (1244320, 0, ...
 01568   524   NtContinue  (1244320, 0, ...
 01569   524   NtContinue  (1244320, 0, ...
 01570   524   NtContinue  (1244320, 0, ...
 01571   524   NtContinue  (1244320, 0, ...
 01572   524   NtContinue  (1244320, 0, ...
 01573   524   NtContinue  (1244320, 0, ...
 01574   524   NtContinue  (1244320, 0, ...
 01575   524   NtContinue  (1244320, 0, ...
 01576   524   NtContinue  (1244320, 0, ...
 01577   524   NtContinue  (1244320, 0, ...
 01578   524   NtContinue  (1244320, 0, ...
 01579   524   NtContinue  (1244320, 0, ...
 01580   524   NtContinue  (1244320, 0, ...
 01581   524   NtContinue  (1244320, 0, ...
 01582   524   NtContinue  (1244320, 0, ...
 01583   524   NtContinue  (1244320, 0, ...
 01584   524   NtContinue  (1244320, 0, ...
 01585   524   NtContinue  (1244320, 0, ...
 01586   524   NtContinue  (1244320, 0, ...
 01587   524   NtContinue  (1244320, 0, ...
 01588   524   NtContinue  (1244320, 0, ...
 01589   524   NtContinue  (1244320, 0, ...
 01590   524   NtContinue  (1244320, 0, ...
 01591   524   NtContinue  (1244320, 0, ...
 01592   524   NtContinue  (1244320, 0, ...
 01593   524   NtContinue  (1244320, 0, ...
 01594   524   NtContinue  (1244320, 0, ...
 01595   524   NtContinue  (1244320, 0, ...
 01596   524   NtContinue  (1244320, 0, ...
 01597   524   NtContinue  (1244320, 0, ...
 01598   524   NtContinue  (1244320, 0, ...
 01599   524   NtContinue  (1244320, 0, ...
 01600   524   NtContinue  (1244320, 0, ...
 01601   524   NtContinue  (1244320, 0, ...
 01602   524   NtContinue  (1244320, 0, ...
 01603   524   NtContinue  (1244320, 0, ...
 01604   524   NtContinue  (1244320, 0, ...
 01605   524   NtContinue  (1244320, 0, ...
 01606   524   NtContinue  (1244320, 0, ...
 01607   524   NtContinue  (1244320, 0, ...
 01608   524   NtContinue  (1244320, 0, ...
 01609   524   NtContinue  (1244320, 0, ...
 01610   524   NtContinue  (1244320, 0, ...
 01611   524   NtContinue  (1244320, 0, ...
 01612   524   NtContinue  (1244320, 0, ...
 01613   524   NtContinue  (1244320, 0, ...
 01614   524   NtContinue  (1244320, 0, ...
 01615   524   NtContinue  (1244320, 0, ...
 01616   524   NtContinue  (1244320, 0, ...
 01617   524   NtContinue  (1244320, 0, ...
 01618   524   NtContinue  (1244320, 0, ...
 01619   524   NtContinue  (1244320, 0, ...
 01620   524   NtContinue  (1244320, 0, ...
 01621   524   NtContinue  (1244320, 0, ...
 01622   524   NtContinue  (1244320, 0, ...
 01623   524   NtContinue  (1244320, 0, ...
 01624   524   NtContinue  (1244320, 0, ...
 01625   524   NtContinue  (1244320, 0, ...
 01626   524   NtContinue  (1244320, 0, ...
 01627   524   NtContinue  (1244320, 0, ...
 01628   524   NtContinue  (1244320, 0, ...
 01629   524   NtContinue  (1244320, 0, ...
 01630   524   NtContinue  (1244320, 0, ...
 01631   524   NtContinue  (1244320, 0, ...
 01632   524   NtContinue  (1244320, 0, ...
 01633   524   NtContinue  (1244320, 0, ...
 01634   524   NtContinue  (1244320, 0, ...
 01635   524   NtContinue  (1244320, 0, ...
 01636   524   NtContinue  (1244320, 0, ...
 01637   524   NtContinue  (1244320, 0, ...
 01638   524   NtContinue  (1244320, 0, ...
 01639   524   NtContinue  (1244320, 0, ...
 01640   524   NtContinue  (1244320, 0, ...
 01641   524   NtContinue  (1244320, 0, ...
 01642   524   NtContinue  (1244320, 0, ...
 01643   524   NtContinue  (1244320, 0, ...
 01644   524   NtContinue  (1244320, 0, ...
 01645   524   NtContinue  (1244320, 0, ...
 01646   524   NtContinue  (1244320, 0, ...
 01647   524   NtContinue  (1244320, 0, ...
 01648   524   NtContinue  (1244320, 0, ...
 01649   524   NtContinue  (1244320, 0, ...
 01650   524   NtContinue  (1244320, 0, ...
 01651   524   NtContinue  (1244320, 0, ...
 01652   524   NtContinue  (1244320, 0, ...
 01653   524   NtContinue  (1244320, 0, ...
 01654   524   NtContinue  (1244320, 0, ...
 01655   524   NtContinue  (1244320, 0, ...
 01656   524   NtContinue  (1244320, 0, ...
 01657   524   NtContinue  (1244320, 0, ...
 01658   524   NtContinue  (1244320, 0, ...
 01659   524   NtContinue  (1244320, 0, ...
 01660   524   NtContinue  (1244320, 0, ...
 01661   524   NtContinue  (1244320, 0, ...
 01662   524   NtContinue  (1244320, 0, ...
 01663   524   NtContinue  (1244320, 0, ...
 01664   524   NtContinue  (1244320, 0, ...
 01665   524   NtContinue  (1244320, 0, ...
 01666   524   NtContinue  (1244320, 0, ...
 01667   524   NtContinue  (1244320, 0, ...
 01668   524   NtContinue  (1244320, 0, ...
 01669   524   NtContinue  (1244320, 0, ...
 01670   524   NtContinue  (1244320, 0, ...
 01671   524   NtContinue  (1244320, 0, ...
 01672   524   NtContinue  (1244320, 0, ...
 01673   524   NtContinue  (1244320, 0, ...
 01674   524   NtContinue  (1244320, 0, ...
 01675   524   NtContinue  (1244320, 0, ...
 01676   524   NtContinue  (1244320, 0, ...
 01677   524   NtContinue  (1244320, 0, ...
 01678   524   NtContinue  (1244320, 0, ...
 01679   524   NtContinue  (1244320, 0, ...
 01680   524   NtContinue  (1244320, 0, ...
 01681   524   NtContinue  (1244320, 0, ...
 01682   524   NtContinue  (1244320, 0, ...
 01683   524   NtContinue  (1244320, 0, ...
 01684   524   NtContinue  (1244320, 0, ...
 01685   524   NtContinue  (1244320, 0, ...
 01686   524   NtContinue  (1244320, 0, ...
 01687   524   NtContinue  (1244320, 0, ...
 01688   524   NtContinue  (1244320, 0, ...
 01689   524   NtContinue  (1244320, 0, ...
 01690   524   NtContinue  (1244320, 0, ...
 01691   524   NtContinue  (1244320, 0, ...
 01692   524   NtContinue  (1244320, 0, ...
 01693   524   NtContinue  (1244320, 0, ...
 01694   524   NtContinue  (1244320, 0, ...
 01695   524   NtContinue  (1244320, 0, ...
 01696   524   NtContinue  (1244320, 0, ...
 01697   524   NtContinue  (1244320, 0, ...
 01698   524   NtContinue  (1244320, 0, ...
 01699   524   NtContinue  (1244320, 0, ...
 01700   524   NtContinue  (1244320, 0, ...
 01701   524   NtContinue  (1244320, 0, ...
 01702   524   NtContinue  (1244320, 0, ...
 01703   524   NtContinue  (1244320, 0, ...
 01704   524   NtContinue  (1244320, 0, ...
 01705   524   NtContinue  (1244320, 0, ...
 01706   524   NtContinue  (1244320, 0, ...
 01707   524   NtContinue  (1244320, 0, ...
 01708   524   NtContinue  (1244320, 0, ...
 01709   524   NtContinue  (1244320, 0, ...
 01710   524   NtContinue  (1244320, 0, ...
 01711   524   NtContinue  (1244320, 0, ...
 01712   524   NtContinue  (1244320, 0, ...
 01713   524   NtContinue  (1244320, 0, ...
 01714   524   NtContinue  (1244320, 0, ...
 01715   524   NtContinue  (1244320, 0, ...
 01716   524   NtContinue  (1244320, 0, ...
 01717   524   NtContinue  (1244320, 0, ...
 01718   524   NtContinue  (1244320, 0, ...
 01719   524   NtContinue  (1244320, 0, ...
 01720   524   NtContinue  (1244320, 0, ...
 01721   524   NtContinue  (1244320, 0, ...
 01722   524   NtContinue  (1244320, 0, ...
 01723   524   NtContinue  (1244320, 0, ...
 01724   524   NtContinue  (1244320, 0, ...
 01725   524   NtContinue  (1244320, 0, ...
 01726   524   NtContinue  (1244320, 0, ...
 01727   524   NtContinue  (1244320, 0, ...
 01728   524   NtContinue  (1244320, 0, ...
 01729   524   NtContinue  (1244320, 0, ...
 01730   524   NtContinue  (1244320, 0, ...
 01731   524   NtContinue  (1244320, 0, ...
 01732   524   NtContinue  (1244320, 0, ...
 01733   524   NtContinue  (1244320, 0, ...
 01734   524   NtContinue  (1244320, 0, ...
 01735   524   NtContinue  (1244320, 0, ...
 01736   524   NtContinue  (1244320, 0, ...
 01737   524   NtContinue  (1244320, 0, ...
 01738   524   NtContinue  (1244320, 0, ...
 01739   524   NtContinue  (1244320, 0, ...
 01740   524   NtContinue  (1244320, 0, ...
 01741   524   NtContinue  (1244320, 0, ...
 01742   524   NtContinue  (1244320, 0, ...
 01743   524   NtContinue  (1244320, 0, ...
 01744   524   NtContinue  (1244320, 0, ...
 01745   524   NtContinue  (1244320, 0, ...
 01746   524   NtContinue  (1244320, 0, ...
 01747   524   NtContinue  (1244320, 0, ...
 01748   524   NtContinue  (1244320, 0, ...
 01749   524   NtContinue  (1244320, 0, ...
 01750   524   NtContinue  (1244320, 0, ...
 01751   524   NtContinue  (1244320, 0, ...
 01752   524   NtContinue  (1244320, 0, ...
 01753   524   NtContinue  (1244320, 0, ...
 01754   524   NtContinue  (1244320, 0, ...
 01755   524   NtContinue  (1244320, 0, ...
 01756   524   NtContinue  (1244320, 0, ...
 01757   524   NtContinue  (1244320, 0, ...
 01758   524   NtContinue  (1244320, 0, ...
 01759   524   NtContinue  (1244320, 0, ...
 01760   524   NtContinue  (1244320, 0, ...
 01761   524   NtContinue  (1244320, 0, ...
 01762   524   NtContinue  (1244320, 0, ...
 01763   524   NtContinue  (1244320, 0, ...
 01764   524   NtContinue  (1244320, 0, ...
 01765   524   NtContinue  (1244320, 0, ...
 01766   524   NtContinue  (1244320, 0, ...
 01767   524   NtContinue  (1244320, 0, ...
 01768   524   NtContinue  (1244320, 0, ...
 01769   524   NtContinue  (1244320, 0, ...
 01770   524   NtContinue  (1244320, 0, ...
 01771   524   NtContinue  (1244320, 0, ...
 01772   524   NtContinue  (1244320, 0, ...
 01773   524   NtContinue  (1244320, 0, ...
 01774   524   NtContinue  (1244320, 0, ...
 01775   524   NtContinue  (1244320, 0, ...
 01776   524   NtContinue  (1244320, 0, ...
 01777   524   NtContinue  (1244320, 0, ...
 01778   524   NtContinue  (1244320, 0, ...
 01779   524   NtContinue  (1244320, 0, ...
 01780   524   NtContinue  (1244320, 0, ...
 01781   524   NtContinue  (1244320, 0, ...
 01782   524   NtContinue  (1244320, 0, ...
 01783   524   NtContinue  (1244320, 0, ...
 01784   524   NtContinue  (1244320, 0, ...
 01785   524   NtContinue  (1244320, 0, ...
 01786   524   NtContinue  (1244320, 0, ...
 01787   524   NtContinue  (1244320, 0, ...
 01788   524   NtContinue  (1244320, 0, ...
 01789   524   NtContinue  (1244320, 0, ...
 01790   524   NtContinue  (1244320, 0, ...
 01791   524   NtContinue  (1244320, 0, ...
 01792   524   NtContinue  (1244320, 0, ...
 01793   524   NtContinue  (1244320, 0, ...
 01794   524   NtContinue  (1244320, 0, ...
 01795   524   NtContinue  (1244320, 0, ...
 01796   524   NtContinue  (1244320, 0, ...
 01797   524   NtContinue  (1244320, 0, ...
 01798   524   NtContinue  (1244320, 0, ...
 01799   524   NtContinue  (1244320, 0, ...
 01800   524   NtContinue  (1244320, 0, ...
 01801   524   NtContinue  (1244320, 0, ...
 01802   524   NtContinue  (1244320, 0, ...
 01803   524   NtContinue  (1244320, 0, ...
 01804   524   NtContinue  (1244320, 0, ...
 01805   524   NtContinue  (1244320, 0, ...
 01806   524   NtContinue  (1244320, 0, ...
 01807   524   NtContinue  (1244320, 0, ...
 01808   524   NtContinue  (1244320, 0, ...
 01809   524   NtContinue  (1244320, 0, ...
 01810   524   NtContinue  (1244320, 0, ...
 01811   524   NtContinue  (1244320, 0, ...
 01812   524   NtContinue  (1244320, 0, ...
 01813   524   NtContinue  (1244320, 0, ...
 01814   524   NtContinue  (1244320, 0, ...
 01815   524   NtContinue  (1244320, 0, ...
 01816   524   NtContinue  (1244320, 0, ...
 01817   524   NtContinue  (1244320, 0, ...
 01818   524   NtContinue  (1244320, 0, ...
 01819   524   NtContinue  (1244320, 0, ...
 01820   524   NtContinue  (1244320, 0, ...
 01821   524   NtContinue  (1244320, 0, ...
 01822   524   NtContinue  (1244320, 0, ...
 01823   524   NtContinue  (1244320, 0, ...
 01824   524   NtContinue  (1244320, 0, ...
 01825   524   NtContinue  (1244320, 0, ...
 01826   524   NtContinue  (1244320, 0, ...
 01827   524   NtContinue  (1244320, 0, ...
 01828   524   NtContinue  (1244320, 0, ...
 01829   524   NtContinue  (1244320, 0, ...
 01830   524   NtContinue  (1244320, 0, ...
 01831   524   NtContinue  (1244320, 0, ...
 01832   524   NtContinue  (1244320, 0, ...
 01833   524   NtContinue  (1244320, 0, ...
 01834   524   NtContinue  (1244320, 0, ...
 01835   524   NtContinue  (1244320, 0, ...
 01836   524   NtContinue  (1244320, 0, ...
 01837   524   NtContinue  (1244320, 0, ...
 01838   524   NtContinue  (1244320, 0, ...
 01839   524   NtContinue  (1244320, 0, ...
 01840   524   NtContinue  (1244320, 0, ...
 01841   524   NtContinue  (1244320, 0, ...
 01842   524   NtContinue  (1244320, 0, ...
 01843   524   NtContinue  (1244320, 0, ...
 01844   524   NtContinue  (1244320, 0, ...
 01845   524   NtContinue  (1244320, 0, ...
 01846   524   NtContinue  (1244320, 0, ...
 01847   524   NtContinue  (1244320, 0, ...
 01848   524   NtContinue  (1244320, 0, ...
 01849   524   NtContinue  (1244320, 0, ...
 01850   524   NtContinue  (1244320, 0, ...
 01851   524   NtContinue  (1244320, 0, ...
 01852   524   NtContinue  (1244320, 0, ...
 01853   524   NtContinue  (1244320, 0, ...
 01854   524   NtContinue  (1244320, 0, ...
 01855   524   NtContinue  (1244320, 0, ...
 01856   524   NtContinue  (1244320, 0, ...
 01857   524   NtContinue  (1244320, 0, ...
 01858   524   NtContinue  (1244320, 0, ...
 01859   524   NtContinue  (1244320, 0, ...
 01860   524   NtContinue  (1244320, 0, ...
 01861   524   NtContinue  (1244320, 0, ...
 01862   524   NtContinue  (1244320, 0, ...
 01863   524   NtContinue  (1244320, 0, ...
 01864   524   NtContinue  (1244320, 0, ...
 01865   524   NtContinue  (1244320, 0, ...
 01866   524   NtContinue  (1244320, 0, ...
 01867   524   NtContinue  (1244320, 0, ...
 01868   524   NtContinue  (1244320, 0, ...
 01869   524   NtContinue  (1244320, 0, ...
 01870   524   NtContinue  (1244320, 0, ...
 01871   524   NtContinue  (1244320, 0, ...
 01872   524   NtContinue  (1244320, 0, ...
 01873   524   NtContinue  (1244320, 0, ...
 01874   524   NtContinue  (1244320, 0, ...
 01875   524   NtContinue  (1244320, 0, ...
 01876   524   NtContinue  (1244320, 0, ...
 01877   524   NtContinue  (1244320, 0, ...
 01878   524   NtContinue  (1244320, 0, ...
 01879   524   NtContinue  (1244320, 0, ...
 01880   524   NtContinue  (1244320, 0, ...
 01881   524   NtContinue  (1244320, 0, ...
 01882   524   NtContinue  (1244320, 0, ...
 01883   524   NtContinue  (1244320, 0, ...
 01884   524   NtContinue  (1244320, 0, ...
 01885   524   NtContinue  (1244320, 0, ...
 01886   524   NtContinue  (1244320, 0, ...
 01887   524   NtContinue  (1244320, 0, ...
 01888   524   NtContinue  (1244320, 0, ...
 01889   524   NtContinue  (1244320, 0, ...
 01890   524   NtContinue  (1244320, 0, ...
 01891   524   NtContinue  (1244320, 0, ...
 01892   524   NtContinue  (1244320, 0, ...
 01893   524   NtContinue  (1244320, 0, ...
 01894   524   NtContinue  (1244320, 0, ...
 01895   524   NtContinue  (1244320, 0, ...
 01896   524   NtContinue  (1244320, 0, ...
 01897   524   NtContinue  (1244320, 0, ...
 01898   524   NtContinue  (1244320, 0, ...
 01899   524   NtContinue  (1244320, 0, ...
 01900   524   NtContinue  (1244320, 0, ...
 01901   524   NtContinue  (1244320, 0, ...
 01902   524   NtContinue  (1244320, 0, ...
 01903   524   NtContinue  (1244320, 0, ...
 01904   524   NtContinue  (1244320, 0, ...
 01905   524   NtContinue  (1244320, 0, ...
 01906   524   NtContinue  (1244320, 0, ...
 01907   524   NtContinue  (1244320, 0, ...
 01908   524   NtContinue  (1244320, 0, ...
 01909   524   NtContinue  (1244320, 0, ...
 01910   524   NtContinue  (1244320, 0, ...
 01911   524   NtContinue  (1244320, 0, ...
 01912   524   NtContinue  (1244320, 0, ...
 01913   524   NtContinue  (1244320, 0, ...
 01914   524   NtContinue  (1244320, 0, ...
 01915   524   NtContinue  (1244320, 0, ...
 01916   524   NtContinue  (1244320, 0, ...
 01917   524   NtContinue  (1244320, 0, ...
 01918   524   NtContinue  (1244320, 0, ...
 01919   524   NtContinue  (1244320, 0, ...
 01920   524   NtContinue  (1244320, 0, ...
 01921   524   NtContinue  (1244320, 0, ...
 01922   524   NtContinue  (1244320, 0, ...
 01923   524   NtContinue  (1244320, 0, ...
 01924   524   NtContinue  (1244320, 0, ...
 01925   524   NtContinue  (1244320, 0, ...
 01926   524   NtContinue  (1244320, 0, ...
 01927   524   NtContinue  (1244320, 0, ...
 01928   524   NtContinue  (1244320, 0, ...
 01929   524   NtContinue  (1244320, 0, ...
 01930   524   NtContinue  (1244320, 0, ...
 01931   524   NtContinue  (1244320, 0, ...
 01932   524   NtContinue  (1244320, 0, ...
 01933   524   NtContinue  (1244320, 0, ...
 01934   524   NtContinue  (1244320, 0, ...
 01935   524   NtContinue  (1244320, 0, ...
 01936   524   NtContinue  (1244320, 0, ...
 01937   524   NtContinue  (1244320, 0, ...
 01938   524   NtContinue  (1244320, 0, ...
 01939   524   NtContinue  (1244320, 0, ...
 01940   524   NtContinue  (1244320, 0, ...
 01941   524   NtContinue  (1244320, 0, ...
 01942   524   NtContinue  (1244320, 0, ...
 01943   524   NtContinue  (1244320, 0, ...
 01944   524   NtContinue  (1244320, 0, ...
 01945   524   NtContinue  (1244320, 0, ...
 01946   524   NtContinue  (1244320, 0, ...
 01947   524   NtContinue  (1244320, 0, ...
 01948   524   NtContinue  (1244320, 0, ...
 01949   524   NtContinue  (1244320, 0, ...
 01950   524   NtContinue  (1244320, 0, ...
 01951   524   NtContinue  (1244320, 0, ...
 01952   524   NtContinue  (1244320, 0, ...
 01953   524   NtContinue  (1244320, 0, ...
 01954   524   NtContinue  (1244320, 0, ...
 01955   524   NtContinue  (1244320, 0, ...
 01956   524   NtContinue  (1244320, 0, ...
 01957   524   NtContinue  (1244320, 0, ...
 01958   524   NtContinue  (1244320, 0, ...
 01959   524   NtContinue  (1244320, 0, ...
 01960   524   NtContinue  (1244320, 0, ...
 01961   524   NtContinue  (1244320, 0, ...
 01962   524   NtContinue  (1244320, 0, ...
 01963   524   NtContinue  (1244320, 0, ...
 01964   524   NtContinue  (1244320, 0, ...
 01965   524   NtContinue  (1244320, 0, ...
 01966   524   NtContinue  (1244320, 0, ...
 01967   524   NtContinue  (1244320, 0, ...
 01968   524   NtContinue  (1244320, 0, ...
 01969   524   NtContinue  (1244320, 0, ...
 01970   524   NtContinue  (1244320, 0, ...
 01971   524   NtContinue  (1244320, 0, ...
 01972   524   NtContinue  (1244320, 0, ...
 01973   524   NtContinue  (1244320, 0, ...
 01974   524   NtContinue  (1244320, 0, ...
 01975   524   NtContinue  (1244320, 0, ...
 01976   524   NtContinue  (1244320, 0, ...
 01977   524   NtContinue  (1244320, 0, ...
 01978   524   NtContinue  (1244320, 0, ...
 01979   524   NtContinue  (1244320, 0, ...
 01980   524   NtContinue  (1244320, 0, ...
 01981   524   NtContinue  (1244320, 0, ...
 01982   524   NtContinue  (1244320, 0, ...
 01983   524   NtContinue  (1244320, 0, ...
 01984   524   NtContinue  (1244320, 0, ...
 01985   524   NtContinue  (1244320, 0, ...
 01986   524   NtContinue  (1244320, 0, ...
 01987   524   NtContinue  (1244320, 0, ...
 01988   524   NtContinue  (1244320, 0, ...
 01989   524   NtContinue  (1244320, 0, ...
 01990   524   NtContinue  (1244320, 0, ...
 01991   524   NtContinue  (1244320, 0, ...
 01992   524   NtContinue  (1244320, 0, ...
 01993   524   NtContinue  (1244320, 0, ...
 01994   524   NtContinue  (1244320, 0, ...
 01995   524   NtContinue  (1244320, 0, ...
 01996   524   NtContinue  (1244320, 0, ...
 01997   524   NtContinue  (1244320, 0, ...
 01998   524   NtContinue  (1244320, 0, ...
 01999   524   NtContinue  (1244320, 0, ...
 02000   524   NtContinue  (1244320, 0, ...
 02001   524   NtContinue  (1244320, 0, ...
 02002   524   NtContinue  (1244320, 0, ...
 02003   524   NtContinue  (1244320, 0, ...
 02004   524   NtContinue  (1244320, 0, ...
 02005   524   NtContinue  (1244320, 0, ...
 02006   524   NtContinue  (1244320, 0, ...
 02007   524   NtContinue  (1244320, 0, ...
 02008   524   NtContinue  (1244320, 0, ...
 02009   524   NtContinue  (1244320, 0, ...
 02010   524   NtContinue  (1244320, 0, ...
 02011   524   NtContinue  (1244320, 0, ...
 02012   524   NtContinue  (1244320, 0, ...
 02013   524   NtContinue  (1244320, 0, ...
 02014   524   NtContinue  (1244320, 0, ...
 02015   524   NtContinue  (1244320, 0, ...
 02016   524   NtContinue  (1244320, 0, ...
 02017   524   NtContinue  (1244320, 0, ...
 02018   524   NtContinue  (1244320, 0, ...
 02019   524   NtContinue  (1244320, 0, ...
 02020   524   NtContinue  (1244320, 0, ...
 02021   524   NtContinue  (1244320, 0, ...
 02022   524   NtContinue  (1244320, 0, ...
 02023   524   NtContinue  (1244320, 0, ...
 02024   524   NtContinue  (1244320, 0, ...
 02025   524   NtContinue  (1244320, 0, ...
 02026   524   NtContinue  (1244320, 0, ...
 02027   524   NtContinue  (1244320, 0, ...
 02028   524   NtContinue  (1244320, 0, ...
 02029   524   NtContinue  (1244320, 0, ...
 02030   524   NtContinue  (1244320, 0, ...
 02031   524   NtContinue  (1244320, 0, ...
 02032   524   NtContinue  (1244320, 0, ...
 02033   524   NtContinue  (1244320, 0, ...
 02034   524   NtContinue  (1244320, 0, ...
 02035   524   NtContinue  (1244320, 0, ...
 02036   524   NtContinue  (1244320, 0, ...
 02037   524   NtContinue  (1244320, 0, ...
 02038   524   NtContinue  (1244320, 0, ...
 02039   524   NtContinue  (1244320, 0, ...
 02040   524   NtContinue  (1244320, 0, ...
 02041   524   NtContinue  (1244320, 0, ...
 02042   524   NtContinue  (1244320, 0, ...
 02043   524   NtContinue  (1244320, 0, ...
 02044   524   NtContinue  (1244320, 0, ...
 02045   524   NtContinue  (1244320, 0, ...
 02046   524   NtContinue  (1244320, 0, ...
 02047   524   NtContinue  (1244320, 0, ...
 02048   524   NtContinue  (1244320, 0, ...
 02049   524   NtContinue  (1244320, 0, ...
 02050   524   NtContinue  (1244320, 0, ...
 02051   524   NtContinue  (1244320, 0, ...
 02052   524   NtContinue  (1244320, 0, ...
 02053   524   NtContinue  (1244320, 0, ...
 02054   524   NtContinue  (1244320, 0, ...
 02055   524   NtContinue  (1244320, 0, ...
 02056   524   NtContinue  (1244320, 0, ...
 02057   524   NtContinue  (1244320, 0, ...
 02058   524   NtContinue  (1244320, 0, ...
 02059   524   NtContinue  (1244320, 0, ...
 02060   524   NtContinue  (1244320, 0, ...
 02061   524   NtContinue  (1244320, 0, ...
 02062   524   NtContinue  (1244320, 0, ...
 02063   524   NtContinue  (1244320, 0, ...
 02064   524   NtContinue  (1244320, 0, ...
 02065   524   NtContinue  (1244320, 0, ...
 02066   524   NtContinue  (1244320, 0, ...
 02067   524   NtContinue  (1244320, 0, ...
 02068   524   NtContinue  (1244320, 0, ...
 02069   524   NtContinue  (1244320, 0, ...
 02070   524   NtContinue  (1244320, 0, ...
 02071   524   NtContinue  (1244320, 0, ...
 02072   524   NtContinue  (1244320, 0, ...
 02073   524   NtContinue  (1244320, 0, ...
 02074   524   NtContinue  (1244320, 0, ...
 02075   524   NtContinue  (1244320, 0, ...
 02076   524   NtContinue  (1244320, 0, ...
 02077   524   NtContinue  (1244320, 0, ...
 02078   524   NtContinue  (1244320, 0, ...
 02079   524   NtContinue  (1244320, 0, ...
 02080   524   NtContinue  (1244320, 0, ...
 02081   524   NtContinue  (1244320, 0, ...
 02082   524   NtContinue  (1244320, 0, ...
 02083   524   NtContinue  (1244320, 0, ...
 02084   524   NtContinue  (1244320, 0, ...
 02085   524   NtContinue  (1244320, 0, ...
 02086   524   NtContinue  (1244320, 0, ...
 02087   524   NtContinue  (1244320, 0, ...
 02088   524   NtContinue  (1244320, 0, ...
 02089   524   NtContinue  (1244320, 0, ...
 02090   524   NtContinue  (1244320, 0, ...
 02091   524   NtContinue  (1244320, 0, ...
 02092   524   NtContinue  (1244320, 0, ...
 02093   524   NtContinue  (1244320, 0, ...
 02094   524   NtContinue  (1244320, 0, ...
 02095   524   NtContinue  (1244320, 0, ...
 02096   524   NtContinue  (1244320, 0, ...
 02097   524   NtContinue  (1244320, 0, ...
 02098   524   NtContinue  (1244320, 0, ...
 02099   524   NtContinue  (1244320, 0, ...
 02100   524   NtContinue  (1244320, 0, ...
 02101   524   NtContinue  (1244320, 0, ...
 02102   524   NtContinue  (1244320, 0, ...
 02103   524   NtContinue  (1244320, 0, ...
 02104   524   NtContinue  (1244320, 0, ...
 02105   524   NtContinue  (1244320, 0, ...
 02106   524   NtContinue  (1244320, 0, ...
 02107   524   NtContinue  (1244320, 0, ...
 02108   524   NtContinue  (1244320, 0, ...
 02109   524   NtContinue  (1244320, 0, ...
 02110   524   NtContinue  (1244320, 0, ...
 02111   524   NtContinue  (1244320, 0, ...
 02112   524   NtContinue  (1244320, 0, ...
 02113   524   NtContinue  (1244320, 0, ...
 02114   524   NtContinue  (1244320, 0, ...
 02115   524   NtContinue  (1244320, 0, ...
 02116   524   NtContinue  (1244320, 0, ...
 02117   524   NtContinue  (1244320, 0, ...
 02118   524   NtContinue  (1244320, 0, ...
 02119   524   NtContinue  (1244320, 0, ...
 02120   524   NtContinue  (1244320, 0, ...
 02121   524   NtContinue  (1244320, 0, ...
 02122   524   NtContinue  (1244320, 0, ...
 02123   524   NtContinue  (1244320, 0, ...
 02124   524   NtContinue  (1244320, 0, ...
 02125   524   NtContinue  (1244320, 0, ...
 02126   524   NtContinue  (1244320, 0, ...
 02127   524   NtContinue  (1244320, 0, ...
 02128   524   NtContinue  (1244320, 0, ...
 02129   524   NtContinue  (1244320, 0, ...
 02130   524   NtContinue  (1244320, 0, ...
 02131   524   NtContinue  (1244320, 0, ...
 02132   524   NtContinue  (1244320, 0, ...
 02133   524   NtContinue  (1244320, 0, ...
 02134   524   NtContinue  (1244320, 0, ...
 02135   524   NtContinue  (1244320, 0, ...
 02136   524   NtContinue  (1244320, 0, ...
 02137   524   NtContinue  (1244320, 0, ...
 02138   524   NtContinue  (1244320, 0, ...
 02139   524   NtContinue  (1244320, 0, ...
 02140   524   NtContinue  (1244320, 0, ...
 02141   524   NtContinue  (1244320, 0, ...
 02142   524   NtContinue  (1244320, 0, ...
 02143   524   NtContinue  (1244320, 0, ...
 02144   524   NtContinue  (1244320, 0, ...
 02145   524   NtContinue  (1244320, 0, ...
 02146   524   NtContinue  (1244320, 0, ...
 02147   524   NtContinue  (1244320, 0, ...
 02148   524   NtContinue  (1244320, 0, ...
 02149   524   NtContinue  (1244320, 0, ...
 02150   524   NtContinue  (1244320, 0, ...
 02151   524   NtContinue  (1244320, 0, ...
 02152   524   NtContinue  (1244320, 0, ...
 02153   524   NtContinue  (1244320, 0, ...
 02154   524   NtContinue  (1244320, 0, ...
 02155   524   NtContinue  (1244320, 0, ...
 02156   524   NtContinue  (1244320, 0, ...
 02157   524   NtContinue  (1244320, 0, ...
 02158   524   NtContinue  (1244320, 0, ...
 02159   524   NtContinue  (1244320, 0, ...
 02160   524   NtContinue  (1244320, 0, ...
 02161   524   NtContinue  (1244320, 0, ...
 02162   524   NtContinue  (1244320, 0, ...
 02163   524   NtContinue  (1244320, 0, ...
 02164   524   NtContinue  (1244320, 0, ...
 02165   524   NtContinue  (1244320, 0, ...
 02166   524   NtContinue  (1244320, 0, ...
 02167   524   NtContinue  (1244320, 0, ...
 02168   524   NtContinue  (1244320, 0, ...
 02169   524   NtContinue  (1244320, 0, ...
 02170   524   NtContinue  (1244320, 0, ...
 02171   524   NtContinue  (1244320, 0, ...
 02172   524   NtContinue  (1244320, 0, ...
 02173   524   NtContinue  (1244320, 0, ...
 02174   524   NtContinue  (1244320, 0, ...
 02175   524   NtContinue  (1244320, 0, ...
 02176   524   NtContinue  (1244320, 0, ...
 02177   524   NtContinue  (1244320, 0, ...
 02178   524   NtContinue  (1244320, 0, ...
 02179   524   NtContinue  (1244320, 0, ...
 02180   524   NtContinue  (1244320, 0, ...
 02181   524   NtContinue  (1244320, 0, ...
 02182   524   NtContinue  (1244320, 0, ...
 02183   524   NtContinue  (1244320, 0, ...
 02184   524   NtContinue  (1244320, 0, ...
 02185   524   NtContinue  (1244320, 0, ...
 02186   524   NtContinue  (1244320, 0, ...
 02187   524   NtContinue  (1244320, 0, ...
 02188   524   NtContinue  (1244320, 0, ...
 02189   524   NtContinue  (1244320, 0, ...
 02190   524   NtContinue  (1244320, 0, ...
 02191   524   NtContinue  (1244320, 0, ...
 02192   524   NtContinue  (1244320, 0, ...
 02193   524   NtContinue  (1244320, 0, ...
 02194   524   NtContinue  (1244320, 0, ...
 02195   524   NtContinue  (1244320, 0, ...
 02196   524   NtContinue  (1244320, 0, ...
 02197   524   NtContinue  (1244320, 0, ...
 02198   524   NtContinue  (1244320, 0, ...
 02199   524   NtContinue  (1244320, 0, ...
 02200   524   NtContinue  (1244320, 0, ...
 02201   524   NtContinue  (1244320, 0, ...
 02202   524   NtContinue  (1244320, 0, ...
 02203   524   NtContinue  (1244320, 0, ...
 02204   524   NtContinue  (1244320, 0, ...
 02205   524   NtContinue  (1244320, 0, ...
 02206   524   NtContinue  (1244320, 0, ...
 02207   524   NtContinue  (1244320, 0, ...
 02208   524   NtContinue  (1244320, 0, ...
 02209   524   NtContinue  (1244320, 0, ...
 02210   524   NtContinue  (1244320, 0, ...
 02211   524   NtContinue  (1244320, 0, ...
 02212   524   NtContinue  (1244320, 0, ...
 02213   524   NtContinue  (1244320, 0, ...
 02214   524   NtContinue  (1244320, 0, ...
 02215   524   NtContinue  (1244320, 0, ...
 02216   524   NtContinue  (1244320, 0, ...
 02217   524   NtContinue  (1244320, 0, ...
 02218   524   NtContinue  (1244320, 0, ...
 02219   524   NtContinue  (1244320, 0, ...
 02220   524   NtContinue  (1244320, 0, ...
 02221   524   NtContinue  (1244320, 0, ...
 02222   524   NtContinue  (1244320, 0, ...
 02223   524   NtContinue  (1244320, 0, ...
 02224   524   NtContinue  (1244320, 0, ...
 02225   524   NtContinue  (1244320, 0, ...
 02226   524   NtContinue  (1244320, 0, ...
 02227   524   NtContinue  (1244320, 0, ...
 02228   524   NtContinue  (1244320, 0, ...
 02229   524   NtContinue  (1244320, 0, ...
 02230   524   NtContinue  (1244320, 0, ...
 02231   524   NtContinue  (1244320, 0, ...
 02232   524   NtContinue  (1244320, 0, ...
 02233   524   NtContinue  (1244320, 0, ...
 02234   524   NtContinue  (1244320, 0, ...
 02235   524   NtContinue  (1244320, 0, ...
 02236   524   NtContinue  (1244320, 0, ...
 02237   524   NtContinue  (1244320, 0, ...
 02238   524   NtContinue  (1244320, 0, ...
 02239   524   NtContinue  (1244320, 0, ...
 02240   524   NtContinue  (1244320, 0, ...
 02241   524   NtContinue  (1244320, 0, ...
 02242   524   NtContinue  (1244320, 0, ...
 02243   524   NtContinue  (1244320, 0, ...
 02244   524   NtContinue  (1244320, 0, ...
 02245   524   NtContinue  (1244320, 0, ...
 02246   524   NtContinue  (1244320, 0, ...
 02247   524   NtContinue  (1244320, 0, ...
 02248   524   NtContinue  (1244320, 0, ...
 02249   524   NtContinue  (1244320, 0, ...
 02250   524   NtContinue  (1244320, 0, ...
 02251   524   NtContinue  (1244320, 0, ...
 02252   524   NtContinue  (1244320, 0, ...
 02253   524   NtContinue  (1244320, 0, ...
 02254   524   NtContinue  (1244320, 0, ...
 02255   524   NtContinue  (1244320, 0, ...
 02256   524   NtContinue  (1244320, 0, ...
 02257   524   NtContinue  (1244320, 0, ...
 02258   524   NtContinue  (1244320, 0, ...
 02259   524   NtContinue  (1244320, 0, ...
 02260   524   NtContinue  (1244320, 0, ...
 02261   524   NtContinue  (1244320, 0, ...
 02262   524   NtContinue  (1244320, 0, ...
 02263   524   NtContinue  (1244320, 0, ...
 02264   524   NtContinue  (1244320, 0, ...
 02265   524   NtContinue  (1244320, 0, ...
 02266   524   NtContinue  (1244320, 0, ...
 02267   524   NtContinue  (1244320, 0, ...
 02268   524   NtContinue  (1244320, 0, ...
 02269   524   NtContinue  (1244320, 0, ...
 02270   524   NtContinue  (1244320, 0, ...
 02271   524   NtContinue  (1244320, 0, ...
 02272   524   NtContinue  (1244320, 0, ...
 02273   524   NtContinue  (1244320, 0, ...
 02274   524   NtContinue  (1244320, 0, ...
 02275   524   NtContinue  (1244320, 0, ...
 02276   524   NtContinue  (1244320, 0, ...
 02277   524   NtContinue  (1244320, 0, ...
 02278   524   NtContinue  (1244320, 0, ...
 02279   524   NtContinue  (1244320, 0, ...
 02280   524   NtContinue  (1244320, 0, ...
 02281   524   NtContinue  (1244320, 0, ...
 02282   524   NtContinue  (1244320, 0, ...
 02283   524   NtContinue  (1244320, 0, ...
 02284   524   NtContinue  (1244320, 0, ...
 02285   524   NtContinue  (1244320, 0, ...
 02286   524   NtContinue  (1244320, 0, ...
 02287   524   NtContinue  (1244320, 0, ...
 02288   524   NtContinue  (1244320, 0, ...
 02289   524   NtContinue  (1244320, 0, ...
 02290   524   NtContinue  (1244320, 0, ...
 02291   524   NtContinue  (1244320, 0, ...
 02292   524   NtContinue  (1244320, 0, ...
 02293   524   NtContinue  (1244320, 0, ...
 02294   524   NtContinue  (1244320, 0, ...
 02295   524   NtContinue  (1244320, 0, ...
 02296   524   NtContinue  (1244320, 0, ...
 02297   524   NtContinue  (1244320, 0, ...
 02298   524   NtContinue  (1244320, 0, ...
 02299   524   NtContinue  (1244320, 0, ...
 02300   524   NtContinue  (1244320, 0, ...
 02301   524   NtContinue  (1244320, 0, ...
 02302   524   NtContinue  (1244320, 0, ...
 02303   524   NtContinue  (1244320, 0, ...
 02304   524   NtContinue  (1244320, 0, ...
 02305   524   NtContinue  (1244320, 0, ...
 02306   524   NtContinue  (1244320, 0, ...
 02307   524   NtContinue  (1244320, 0, ...
 02308   524   NtContinue  (1244320, 0, ...
 02309   524   NtContinue  (1244320, 0, ...
 02310   524   NtContinue  (1244320, 0, ...
 02311   524   NtContinue  (1244320, 0, ...
 02312   524   NtContinue  (1244320, 0, ...
 02313   524   NtContinue  (1244320, 0, ...
 02314   524   NtContinue  (1244320, 0, ...
 02315   524   NtContinue  (1244320, 0, ...
 02316   524   NtContinue  (1244320, 0, ...
 02317   524   NtContinue  (1244320, 0, ...
 02318   524   NtContinue  (1244320, 0, ...
 02319   524   NtContinue  (1244320, 0, ...
 02320   524   NtContinue  (1244320, 0, ...
 02321   524   NtContinue  (1244320, 0, ...
 02322   524   NtContinue  (1244320, 0, ...
 02323   524   NtContinue  (1244320, 0, ...
 02324   524   NtContinue  (1244320, 0, ...
 02325   524   NtContinue  (1244320, 0, ...
 02326   524   NtContinue  (1244320, 0, ...
 02327   524   NtContinue  (1244320, 0, ...
 02328   524   NtContinue  (1244320, 0, ...
 02329   524   NtContinue  (1244320, 0, ...
 02330   524   NtContinue  (1244320, 0, ...
 02331   524   NtContinue  (1244320, 0, ...
 02332   524   NtContinue  (1244320, 0, ...
 02333   524   NtContinue  (1244320, 0, ...
 02334   524   NtContinue  (1244320, 0, ...
 02335   524   NtContinue  (1244320, 0, ...
 02336   524   NtContinue  (1244320, 0, ...
 02337   524   NtContinue  (1244320, 0, ...
 02338   524   NtContinue  (1244320, 0, ...
 02339   524   NtContinue  (1244320, 0, ...
 02340   524   NtContinue  (1244320, 0, ...
 02341   524   NtContinue  (1244320, 0, ...
 02342   524   NtContinue  (1244320, 0, ...
 02343   524   NtContinue  (1244320, 0, ...
 02344   524   NtContinue  (1244320, 0, ...
 02345   524   NtContinue  (1244320, 0, ...
 02346   524   NtContinue  (1244320, 0, ...
 02347   524   NtContinue  (1244320, 0, ...
 02348   524   NtContinue  (1244320, 0, ...
 02349   524   NtContinue  (1244320, 0, ...
 02350   524   NtContinue  (1244320, 0, ...
 02351   524   NtContinue  (1244320, 0, ...
 02352   524   NtContinue  (1244320, 0, ...
 02353   524   NtContinue  (1244320, 0, ...
 02354   524   NtContinue  (1244320, 0, ...
 02355   524   NtContinue  (1244320, 0, ...
 02356   524   NtContinue  (1244320, 0, ...
 02357   524   NtContinue  (1244320, 0, ...
 02358   524   NtContinue  (1244320, 0, ...
 02359   524   NtContinue  (1244320, 0, ...
 02360   524   NtContinue  (1244320, 0, ...
 02361   524   NtContinue  (1244320, 0, ...
 02362   524   NtContinue  (1244320, 0, ...
 02363   524   NtContinue  (1244320, 0, ...
 02364   524   NtContinue  (1244320, 0, ...
 02365   524   NtContinue  (1244320, 0, ...
 02366   524   NtContinue  (1244320, 0, ...
 02367   524   NtContinue  (1244320, 0, ...
 02368   524   NtContinue  (1244320, 0, ...
 02369   524   NtContinue  (1244320, 0, ...
 02370   524   NtContinue  (1244320, 0, ...
 02371   524   NtContinue  (1244320, 0, ...
 02372   524   NtContinue  (1244320, 0, ...
 02373   524   NtContinue  (1244320, 0, ...
 02374   524   NtContinue  (1244320, 0, ...
 02375   524   NtContinue  (1244320, 0, ...
 02376   524   NtContinue  (1244320, 0, ...
 02377   524   NtContinue  (1244320, 0, ...
 02378   524   NtContinue  (1244320, 0, ...
 02379   524   NtContinue  (1244320, 0, ...
 02380   524   NtContinue  (1244320, 0, ...
 02381   524   NtContinue  (1244320, 0, ...
 02382   524   NtContinue  (1244320, 0, ...
 02383   524   NtContinue  (1244320, 0, ...
 02384   524   NtContinue  (1244320, 0, ...
 02385   524   NtContinue  (1244320, 0, ...
 02386   524   NtContinue  (1244320, 0, ...
 02387   524   NtContinue  (1244320, 0, ...
 02388   524   NtContinue  (1244320, 0, ...
 02389   524   NtContinue  (1244320, 0, ...
 02390   524   NtContinue  (1244320, 0, ...
 02391   524   NtContinue  (1244320, 0, ...
 02392   524   NtContinue  (1244320, 0, ...
 02393   524   NtContinue  (1244320, 0, ...
 02394   524   NtContinue  (1244320, 0, ...
 02395   524   NtContinue  (1244320, 0, ...
 02396   524   NtContinue  (1244320, 0, ...
 02397   524   NtContinue  (1244320, 0, ...
 02398   524   NtContinue  (1244320, 0, ...
 02399   524   NtContinue  (1244320, 0, ...
 02400   524   NtContinue  (1244320, 0, ...
 02401   524   NtContinue  (1244320, 0, ...
 02402   524   NtContinue  (1244320, 0, ...
 02403   524   NtContinue  (1244320, 0, ...
 02404   524   NtContinue  (1244320, 0, ...
 02405   524   NtContinue  (1244320, 0, ...
 02406   524   NtContinue  (1244320, 0, ...
 02407   524   NtContinue  (1244320, 0, ...
 02408   524   NtContinue  (1244320, 0, ...
 02409   524   NtContinue  (1244320, 0, ...
 02410   524   NtContinue  (1244320, 0, ...
 02411   524   NtContinue  (1244320, 0, ...
 02412   524   NtContinue  (1244320, 0, ...
 02413   524   NtContinue  (1244320, 0, ...
 02414   524   NtContinue  (1244320, 0, ...
 02415   524   NtContinue  (1244320, 0, ...
 02416   524   NtContinue  (1244320, 0, ...
 02417   524   NtContinue  (1244320, 0, ...
 02418   524   NtContinue  (1244320, 0, ...
 02419   524   NtContinue  (1244320, 0, ...
 02420   524   NtContinue  (1244320, 0, ...
 02421   524   NtContinue  (1244320, 0, ...
 02422   524   NtContinue  (1244320, 0, ...
 02423   524   NtContinue  (1244320, 0, ...
 02424   524   NtContinue  (1244320, 0, ...
 02425   524   NtContinue  (1244320, 0, ...
 02426   524   NtContinue  (1244320, 0, ...
 02427   524   NtContinue  (1244320, 0, ...
 02428   524   NtContinue  (1244320, 0, ...
 02429   524   NtContinue  (1244320, 0, ...
 02430   524   NtContinue  (1244320, 0, ...
 02431   524   NtContinue  (1244320, 0, ...
 02432   524   NtContinue  (1244320, 0, ...
 02433   524   NtContinue  (1244320, 0, ...
 02434   524   NtContinue  (1244320, 0, ...
 02435   524   NtContinue  (1244320, 0, ...
 02436   524   NtContinue  (1244320, 0, ...
 02437   524   NtContinue  (1244320, 0, ...
 02438   524   NtContinue  (1244320, 0, ...
 02439   524   NtContinue  (1244320, 0, ...
 02440   524   NtContinue  (1244320, 0, ...
 02441   524   NtContinue  (1244320, 0, ...
 02442   524   NtContinue  (1244320, 0, ...
 02443   524   NtContinue  (1244320, 0, ...
 02444   524   NtContinue  (1244320, 0, ...
 02445   524   NtContinue  (1244320, 0, ...
 02446   524   NtContinue  (1244320, 0, ...
 02447   524   NtContinue  (1244320, 0, ...
 02448   524   NtContinue  (1244320, 0, ...
 02449   524   NtContinue  (1244320, 0, ...
 02450   524   NtContinue  (1244320, 0, ...
 02451   524   NtContinue  (1244320, 0, ...
 02452   524   NtContinue  (1244320, 0, ...
 02453   524   NtContinue  (1244320, 0, ...
 02454   524   NtContinue  (1244320, 0, ...
 02455   524   NtContinue  (1244320, 0, ...
 02456   524   NtContinue  (1244320, 0, ...
 02457   524   NtContinue  (1244320, 0, ...
 02458   524   NtContinue  (1244320, 0, ...
 02459   524   NtContinue  (1244320, 0, ...
 02460   524   NtContinue  (1244320, 0, ...
 02461   524   NtContinue  (1244320, 0, ...
 02462   524   NtContinue  (1244320, 0, ...
 02463   524   NtContinue  (1244320, 0, ...
 02464   524   NtContinue  (1244320, 0, ...
 02465   524   NtContinue  (1244320, 0, ...
 02466   524   NtContinue  (1244320, 0, ...
 02467   524   NtContinue  (1244320, 0, ...
 02468   524   NtContinue  (1244320, 0, ...
 02469   524   NtContinue  (1244320, 0, ...
 02470   524   NtContinue  (1244320, 0, ...
 02471   524   NtContinue  (1244320, 0, ...
 02472   524   NtContinue  (1244320, 0, ...
 02473   524   NtContinue  (1244320, 0, ...
 02474   524   NtContinue  (1244320, 0, ...
 02475   524   NtContinue  (1244320, 0, ...
 02476   524   NtContinue  (1244320, 0, ...
 02477   524   NtContinue  (1244320, 0, ...
 02478   524   NtContinue  (1244320, 0, ...
 02479   524   NtContinue  (1244320, 0, ...
 02480   524   NtContinue  (1244320, 0, ...
 02481   524   NtContinue  (1244320, 0, ...
 02482   524   NtContinue  (1244320, 0, ...
 02483   524   NtContinue  (1244320, 0, ...
 02484   524   NtContinue  (1244320, 0, ...
 02485   524   NtContinue  (1244320, 0, ...
 02486   524   NtContinue  (1244320, 0, ...
 02487   524   NtContinue  (1244320, 0, ...
 02488   524   NtContinue  (1244320, 0, ...
 02489   524   NtContinue  (1244320, 0, ...
 02490   524   NtContinue  (1244320, 0, ...
 02491   524   NtContinue  (1244320, 0, ...
 02492   524   NtContinue  (1244320, 0, ...
 02493   524   NtContinue  (1244320, 0, ...
 02494   524   NtContinue  (1244320, 0, ...
 02495   524   NtContinue  (1244320, 0, ...
 02496   524   NtContinue  (1244320, 0, ...
 02497   524   NtContinue  (1244320, 0, ...
 02498   524   NtContinue  (1244320, 0, ...
 02499   524   NtContinue  (1244320, 0, ...
 02500   524   NtContinue  (1244320, 0, ...
 02501   524   NtContinue  (1244320, 0, ...
 02502   524   NtContinue  (1244320, 0, ...
 02503   524   NtContinue  (1244320, 0, ...
 02504   524   NtContinue  (1244320, 0, ...
 02505   524   NtContinue  (1244320, 0, ...
 02506   524   NtContinue  (1244320, 0, ...
 02507   524   NtContinue  (1244320, 0, ...
 02508   524   NtContinue  (1244320, 0, ...
 02509   524   NtContinue  (1244320, 0, ...
 02510   524   NtContinue  (1244320, 0, ...
 02511   524   NtContinue  (1244320, 0, ...
 02512   524   NtContinue  (1244320, 0, ...
 02513   524   NtContinue  (1244320, 0, ...
 02514   524   NtContinue  (1244320, 0, ...
 02515   524   NtContinue  (1244320, 0, ...
 02516   524   NtContinue  (1244320, 0, ...
 02517   524   NtContinue  (1244320, 0, ...
 02518   524   NtContinue  (1244320, 0, ...
 02519   524   NtContinue  (1244320, 0, ...
 02520   524   NtContinue  (1244320, 0, ...
 02521   524   NtContinue  (1244320, 0, ...
 02522   524   NtContinue  (1244320, 0, ...
 02523   524   NtContinue  (1244320, 0, ...
 02524   524   NtContinue  (1244320, 0, ...
 02525   524   NtContinue  (1244320, 0, ...
 02526   524   NtContinue  (1244320, 0, ...
 02527   524   NtContinue  (1244320, 0, ...
 02528   524   NtContinue  (1244320, 0, ...
 02529   524   NtContinue  (1244320, 0, ...
 02530   524   NtContinue  (1244320, 0, ...
 02531   524   NtContinue  (1244320, 0, ...
 02532   524   NtContinue  (1244320, 0, ...
 02533   524   NtContinue  (1244320, 0, ...
 02534   524   NtContinue  (1244320, 0, ...
 02535   524   NtContinue  (1244320, 0, ...
 02536   524   NtContinue  (1244320, 0, ...
 02537   524   NtContinue  (1244320, 0, ...
 02538   524   NtContinue  (1244320, 0, ...
 02539   524   NtContinue  (1244320, 0, ...
 02540   524   NtContinue  (1244320, 0, ...
 02541   524   NtContinue  (1244320, 0, ...
 02542   524   NtContinue  (1244320, 0, ...
 02543   524   NtContinue  (1244320, 0, ...
 02544   524   NtContinue  (1244320, 0, ...
 02545   524   NtContinue  (1244320, 0, ...
 02546   524   NtContinue  (1244320, 0, ...
 02547   524   NtContinue  (1244320, 0, ...
 02548   524   NtContinue  (1244320, 0, ...
 02549   524   NtContinue  (1244320, 0, ...
 02550   524   NtContinue  (1244320, 0, ...
 02551   524   NtContinue  (1244320, 0, ...
 02552   524   NtContinue  (1244320, 0, ...
 02553   524   NtContinue  (1244320, 0, ...
 02554   524   NtContinue  (1244320, 0, ...
 02555   524   NtContinue  (1244320, 0, ...
 02556   524   NtContinue  (1244320, 0, ...
 02557   524   NtContinue  (1244320, 0, ...
 02558   524   NtContinue  (1244320, 0, ...
 02559   524   NtContinue  (1244320, 0, ...
 02560   524   NtContinue  (1244320, 0, ...
 02561   524   NtContinue  (1244320, 0, ...
 02562   524   NtContinue  (1244320, 0, ...
 02563   524   NtContinue  (1244320, 0, ...
 02564   524   NtContinue  (1244320, 0, ...
 02565   524   NtContinue  (1244320, 0, ...
 02566   524   NtContinue  (1244320, 0, ...
 02567   524   NtContinue  (1244320, 0, ...
 02568   524   NtContinue  (1244320, 0, ...
 02569   524   NtContinue  (1244320, 0, ...
 02570   524   NtContinue  (1244320, 0, ...
 02571   524   NtContinue  (1244320, 0, ...
 02572   524   NtContinue  (1244320, 0, ...
 02573   524   NtContinue  (1244320, 0, ...
 02574   524   NtContinue  (1244320, 0, ...
 02575   524   NtContinue  (1244320, 0, ...
 02576   524   NtContinue  (1244320, 0, ...
 02577   524   NtContinue  (1244320, 0, ...
 02578   524   NtContinue  (1244320, 0, ...
 02579   524   NtContinue  (1244320, 0, ...
 02580   524   NtContinue  (1244320, 0, ...
 02581   524   NtContinue  (1244320, 0, ...
 02582   524   NtContinue  (1244320, 0, ...
 02583   524   NtContinue  (1244320, 0, ...
 02584   524   NtContinue  (1244320, 0, ...
 02585   524   NtContinue  (1244320, 0, ...
 02586   524   NtContinue  (1244320, 0, ...
 02587   524   NtContinue  (1244320, 0, ...
 02588   524   NtContinue  (1244320, 0, ...
 02589   524   NtContinue  (1244320, 0, ...
 02590   524   NtContinue  (1244320, 0, ...
 02591   524   NtContinue  (1244320, 0, ...
 02592   524   NtContinue  (1244320, 0, ...
 02593   524   NtContinue  (1244320, 0, ...
 02594   524   NtContinue  (1244320, 0, ...
 02595   524   NtContinue  (1244320, 0, ...
 02596   524   NtContinue  (1244320, 0, ...
 02597   524   NtContinue  (1244320, 0, ...
 02598   524   NtContinue  (1244320, 0, ...
 02599   524   NtContinue  (1244320, 0, ...
 02600   524   NtContinue  (1244320, 0, ...
 02601   524   NtContinue  (1244320, 0, ...
 02602   524   NtContinue  (1244320, 0, ...
 02603   524   NtContinue  (1244320, 0, ...
 02604   524   NtContinue  (1244320, 0, ...
 02605   524   NtContinue  (1244320, 0, ...
 02606   524   NtContinue  (1244320, 0, ...
 02607   524   NtContinue  (1244320, 0, ...
 02608   524   NtContinue  (1244320, 0, ...
 02609   524   NtContinue  (1244320, 0, ...
 02610   524   NtContinue  (1244320, 0, ...
 02611   524   NtContinue  (1244320, 0, ...
 02612   524   NtContinue  (1244320, 0, ...
 02613   524   NtContinue  (1244320, 0, ...
 02614   524   NtContinue  (1244320, 0, ...
 02615   524   NtContinue  (1244320, 0, ...
 02616   524   NtContinue  (1244320, 0, ...
 02617   524   NtContinue  (1244320, 0, ...
 02618   524   NtContinue  (1244320, 0, ...
 02619   524   NtContinue  (1244320, 0, ...
 02620   524   NtContinue  (1244320, 0, ...
 02621   524   NtContinue  (1244320, 0, ...
 02622   524   NtContinue  (1244320, 0, ...
 02623   524   NtContinue  (1244320, 0, ...
 02624   524   NtContinue  (1244320, 0, ...
 02625   524   NtContinue  (1244320, 0, ...
 02626   524   NtContinue  (1244320, 0, ...
 02627   524   NtContinue  (1244320, 0, ...
 02628   524   NtContinue  (1244320, 0, ...
 02629   524   NtContinue  (1244320, 0, ...
 02630   524   NtContinue  (1244320, 0, ...
 02631   524   NtContinue  (1244320, 0, ...
 02632   524   NtContinue  (1244320, 0, ...
 02633   524   NtContinue  (1244320, 0, ...
 02634   524   NtContinue  (1244320, 0, ...
 02635   524   NtContinue  (1244320, 0, ...
 02636   524   NtContinue  (1244320, 0, ...
 02637   524   NtContinue  (1244320, 0, ...
 02638   524   NtContinue  (1244320, 0, ...
 02639   524   NtContinue  (1244320, 0, ...
 02640   524   NtContinue  (1244320, 0, ...
 02641   524   NtContinue  (1244320, 0, ...
 02642   524   NtContinue  (1244320, 0, ...
 02643   524   NtContinue  (1244320, 0, ...
 02644   524   NtContinue  (1244320, 0, ...
 02645   524   NtContinue  (1244320, 0, ...
 02646   524   NtContinue  (1244320, 0, ...
 02647   524   NtContinue  (1244320, 0, ...
 02648   524   NtContinue  (1244320, 0, ...
 02649   524   NtContinue  (1244320, 0, ...
 02650   524   NtContinue  (1244320, 0, ...
 02651   524   NtContinue  (1244320, 0, ...
 02652   524   NtContinue  (1244320, 0, ...
 02653   524   NtContinue  (1244320, 0, ...
 02654   524   NtContinue  (1244320, 0, ...
 02655   524   NtContinue  (1244320, 0, ...
 02656   524   NtContinue  (1244320, 0, ...
 02657   524   NtContinue  (1244320, 0, ...
 02658   524   NtContinue  (1244320, 0, ...
 02659   524   NtContinue  (1244320, 0, ...
 02660   524   NtContinue  (1244320, 0, ...
 02661   524   NtContinue  (1244320, 0, ...
 02662   524   NtContinue  (1244320, 0, ...
 02663   524   NtContinue  (1244320, 0, ...
 02664   524   NtContinue  (1244320, 0, ...
 02665   524   NtContinue  (1244320, 0, ...
 02666   524   NtContinue  (1244320, 0, ...
 02667   524   NtContinue  (1244320, 0, ...
 02668   524   NtContinue  (1244320, 0, ...
 02669   524   NtContinue  (1244320, 0, ...
 02670   524   NtContinue  (1244320, 0, ...
 02671   524   NtContinue  (1244320, 0, ...
 02672   524   NtContinue  (1244320, 0, ...
 02673   524   NtContinue  (1244320, 0, ...
 02674   524   NtContinue  (1244320, 0, ...
 02675   524   NtContinue  (1244320, 0, ...
 02676   524   NtContinue  (1244320, 0, ...
 02677   524   NtContinue  (1244320, 0, ...
 02678   524   NtContinue  (1244320, 0, ...
 02679   524   NtContinue  (1244320, 0, ...
 02680   524   NtContinue  (1244320, 0, ...
 02681   524   NtContinue  (1244320, 0, ...
 02682   524   NtContinue  (1244320, 0, ...
 02683   524   NtContinue  (1244320, 0, ...
 02684   524   NtContinue  (1244320, 0, ...
 02685   524   NtContinue  (1244320, 0, ...
 02686   524   NtContinue  (1244320, 0, ...
 02687   524   NtContinue  (1244320, 0, ...
 02688   524   NtContinue  (1244320, 0, ...
 02689   524   NtContinue  (1244320, 0, ...
 02690   524   NtContinue  (1244320, 0, ...
 02691   524   NtContinue  (1244320, 0, ...
 02692   524   NtContinue  (1244320, 0, ...
 02693   524   NtContinue  (1244320, 0, ...
 02694   524   NtContinue  (1244320, 0, ...
 02695   524   NtContinue  (1244320, 0, ...
 02696   524   NtContinue  (1244320, 0, ...
 02697   524   NtContinue  (1244320, 0, ...
 02698   524   NtContinue  (1244320, 0, ...
 02699   524   NtContinue  (1244320, 0, ...
 02700   524   NtContinue  (1244320, 0, ...
 02701   524   NtContinue  (1244320, 0, ...
 02702   524   NtContinue  (1244320, 0, ...
 02703   524   NtContinue  (1244320, 0, ...
 02704   524   NtContinue  (1244320, 0, ...
 02705   524   NtContinue  (1244320, 0, ...
 02706   524   NtContinue  (1244320, 0, ...
 02707   524   NtContinue  (1244320, 0, ...
 02708   524   NtContinue  (1244320, 0, ...
 02709   524   NtContinue  (1244320, 0, ...
 02710   524   NtContinue  (1244320, 0, ...
 02711   524   NtContinue  (1244320, 0, ...
 02712   524   NtContinue  (1244320, 0, ...
 02713   524   NtContinue  (1244320, 0, ...
 02714   524   NtContinue  (1244320, 0, ...
 02715   524   NtContinue  (1244320, 0, ...
 02716   524   NtContinue  (1244320, 0, ...
 02717   524   NtContinue  (1244320, 0, ...
 02718   524   NtContinue  (1244320, 0, ...
 02719   524   NtContinue  (1244320, 0, ...
 02720   524   NtContinue  (1244320, 0, ...
 02721   524   NtContinue  (1244320, 0, ...
 02722   524   NtContinue  (1244320, 0, ...
 02723   524   NtContinue  (1244320, 0, ...
 02724   524   NtContinue  (1244320, 0, ...
 02725   524   NtContinue  (1244320, 0, ...
 02726   524   NtContinue  (1244320, 0, ...
 02727   524   NtContinue  (1244320, 0, ...
 02728   524   NtContinue  (1244320, 0, ...
 02729   524   NtContinue  (1244320, 0, ...
 02730   524   NtContinue  (1244320, 0, ...
 02731   524   NtContinue  (1244320, 0, ...
 02732   524   NtContinue  (1244320, 0, ...
 02733   524   NtContinue  (1244320, 0, ...
 02734   524   NtContinue  (1244320, 0, ...
 02735   524   NtContinue  (1244320, 0, ...
 02736   524   NtContinue  (1244320, 0, ...
 02737   524   NtContinue  (1244320, 0, ...
 02738   524   NtContinue  (1244320, 0, ...
 02739   524   NtContinue  (1244320, 0, ...
 02740   524   NtContinue  (1244320, 0, ...
 02741   524   NtContinue  (1244320, 0, ...
 02742   524   NtContinue  (1244320, 0, ...
 02743   524   NtContinue  (1244320, 0, ...
 02744   524   NtContinue  (1244320, 0, ...
 02745   524   NtContinue  (1244320, 0, ...
 02746   524   NtContinue  (1244320, 0, ...
 02747   524   NtContinue  (1244320, 0, ...
 02748   524   NtContinue  (1244320, 0, ...
 02749   524   NtContinue  (1244320, 0, ...
 02750   524   NtContinue  (1244320, 0, ...
 02751   524   NtContinue  (1244320, 0, ...
 02752   524   NtContinue  (1244320, 0, ...
 02753   524   NtContinue  (1244320, 0, ...
 02754   524   NtContinue  (1244320, 0, ...
 02755   524   NtContinue  (1244320, 0, ...
 02756   524   NtContinue  (1244320, 0, ...
 02757   524   NtContinue  (1244320, 0, ...
 02758   524   NtContinue  (1244320, 0, ...
 02759   524   NtContinue  (1244320, 0, ...
 02760   524   NtContinue  (1244320, 0, ...
 02761   524   NtContinue  (1244320, 0, ...
 02762   524   NtContinue  (1244320, 0, ...
 02763   524   NtContinue  (1244320, 0, ...
 02764   524   NtContinue  (1244320, 0, ...
 02765   524   NtContinue  (1244320, 0, ...
 02766   524   NtContinue  (1244320, 0, ...
 02767   524   NtContinue  (1244320, 0, ...
 02768   524   NtContinue  (1244320, 0, ...
 02769   524   NtContinue  (1244320, 0, ...
 02770   524   NtContinue  (1244320, 0, ...
 02771   524   NtContinue  (1244320, 0, ...
 02772   524   NtContinue  (1244320, 0, ...
 02773   524   NtContinue  (1244320, 0, ...
 02774   524   NtContinue  (1244320, 0, ...
 02775   524   NtContinue  (1244320, 0, ...
 02776   524   NtContinue  (1244320, 0, ...
 02777   524   NtContinue  (1244320, 0, ...
 02778   524   NtContinue  (1244320, 0, ...
 02779   524   NtContinue  (1244320, 0, ...
 02780   524   NtContinue  (1244320, 0, ...
 02781   524   NtContinue  (1244320, 0, ...
 02782   524   NtContinue  (1244320, 0, ...
 02783   524   NtContinue  (1244320, 0, ...
 02784   524   NtContinue  (1244320, 0, ...
 02785   524   NtContinue  (1244320, 0, ...
 02786   524   NtContinue  (1244320, 0, ...
 02787   524   NtContinue  (1244320, 0, ...
 02788   524   NtContinue  (1244320, 0, ...
 02789   524   NtContinue  (1244320, 0, ...
 02790   524   NtContinue  (1244320, 0, ...
 02791   524   NtContinue  (1244320, 0, ...
 02792   524   NtContinue  (1244320, 0, ...
 02793   524   NtContinue  (1244320, 0, ...
 02794   524   NtContinue  (1244320, 0, ...
 02795   524   NtContinue  (1244320, 0, ...
 02796   524   NtContinue  (1244320, 0, ...
 02797   524   NtContinue  (1244320, 0, ...
 02798   524   NtContinue  (1244320, 0, ...
 02799   524   NtContinue  (1244320, 0, ...
 02800   524   NtContinue  (1244320, 0, ...
 02801   524   NtContinue  (1244320, 0, ...
 02802   524   NtContinue  (1244320, 0, ...
 02803   524   NtContinue  (1244320, 0, ...
 02804   524   NtContinue  (1244320, 0, ...
 02805   524   NtContinue  (1244320, 0, ...
 02806   524   NtContinue  (1244320, 0, ...
 02807   524   NtContinue  (1244320, 0, ...
 02808   524   NtContinue  (1244320, 0, ...
 02809   524   NtContinue  (1244320, 0, ...
 02810   524   NtContinue  (1244320, 0, ...
 02811   524   NtContinue  (1244320, 0, ...
 02812   524   NtContinue  (1244320, 0, ...
 02813   524   NtContinue  (1244320, 0, ...
 02814   524   NtContinue  (1244320, 0, ...
 02815   524   NtContinue  (1244320, 0, ...
 02816   524   NtContinue  (1244320, 0, ...
 02817   524   NtContinue  (1244320, 0, ...
 02818   524   NtContinue  (1244320, 0, ...
 02819   524   NtContinue  (1244320, 0, ...
 02820   524   NtContinue  (1244320, 0, ...
 02821   524   NtContinue  (1244320, 0, ...
 02822   524   NtContinue  (1244320, 0, ...
 02823   524   NtContinue  (1244320, 0, ...
 02824   524   NtContinue  (1244320, 0, ...
 02825   524   NtContinue  (1244320, 0, ...
 02826   524   NtContinue  (1244320, 0, ...
 02827   524   NtContinue  (1244320, 0, ...
 02828   524   NtContinue  (1244320, 0, ...
 02829   524   NtContinue  (1244320, 0, ...
 02830   524   NtContinue  (1244320, 0, ...
 02831   524   NtContinue  (1244320, 0, ...
 02832   524   NtContinue  (1244320, 0, ...
 02833   524   NtContinue  (1244320, 0, ...
 02834   524   NtContinue  (1244320, 0, ...
 02835   524   NtContinue  (1244320, 0, ...
 02836   524   NtContinue  (1244320, 0, ...
 02837   524   NtContinue  (1244320, 0, ...
 02838   524   NtContinue  (1244320, 0, ...
 02839   524   NtContinue  (1244320, 0, ...
 02840   524   NtContinue  (1244320, 0, ...
 02841   524   NtContinue  (1244320, 0, ...
 02842   524   NtContinue  (1244320, 0, ...
 02843   524   NtContinue  (1244320, 0, ...
 02844   524   NtContinue  (1244320, 0, ...
 02845   524   NtContinue  (1244320, 0, ...
 02846   524   NtContinue  (1244320, 0, ...
 02847   524   NtContinue  (1244320, 0, ...
 02848   524   NtContinue  (1244320, 0, ...
 02849   524   NtContinue  (1244320, 0, ...
 02850   524   NtContinue  (1244320, 0, ...
 02851   524   NtContinue  (1244320, 0, ...
 02852   524   NtContinue  (1244320, 0, ...
 02853   524   NtContinue  (1244320, 0, ...
 02854   524   NtContinue  (1244320, 0, ...
 02855   524   NtContinue  (1244320, 0, ...
 02856   524   NtContinue  (1244320, 0, ...
 02857   524   NtContinue  (1244320, 0, ...
 02858   524   NtContinue  (1244320, 0, ...
 02859   524   NtContinue  (1244320, 0, ...
 02860   524   NtContinue  (1244320, 0, ...
 02861   524   NtContinue  (1244320, 0, ...
 02862   524   NtContinue  (1244320, 0, ...
 02863   524   NtContinue  (1244320, 0, ...
 02864   524   NtContinue  (1244320, 0, ...
 02865   524   NtContinue  (1244320, 0, ...
 02866   524   NtContinue  (1244320, 0, ...
 02867   524   NtContinue  (1244320, 0, ...
 02868   524   NtContinue  (1244320, 0, ...
 02869   524   NtContinue  (1244320, 0, ...
 02870   524   NtContinue  (1244320, 0, ...
 02871   524   NtContinue  (1244320, 0, ...
 02872   524   NtContinue  (1244320, 0, ...
 02873   524   NtContinue  (1244320, 0, ...
 02874   524   NtContinue  (1244320, 0, ...
 02875   524   NtContinue  (1244320, 0, ...
 02876   524   NtContinue  (1244320, 0, ...
 02877   524   NtContinue  (1244320, 0, ...
 02878   524   NtContinue  (1244320, 0, ...
 02879   524   NtContinue  (1244320, 0, ...
 02880   524   NtContinue  (1244320, 0, ...
 02881   524   NtContinue  (1244320, 0, ...
 02882   524   NtContinue  (1244320, 0, ...
 02883   524   NtContinue  (1244320, 0, ...
 02884   524   NtContinue  (1244320, 0, ...
 02885   524   NtContinue  (1244320, 0, ...
 02886   524   NtContinue  (1244320, 0, ...
 02887   524   NtContinue  (1244320, 0, ...
 02888   524   NtContinue  (1244320, 0, ...
 02889   524   NtContinue  (1244320, 0, ...
 02890   524   NtContinue  (1244320, 0, ...
 02891   524   NtContinue  (1244320, 0, ...
 02892   524   NtContinue  (1244320, 0, ...
 02893   524   NtContinue  (1244320, 0, ...
 02894   524   NtContinue  (1244320, 0, ...
 02895   524   NtContinue  (1244320, 0, ...
 02896   524   NtContinue  (1244320, 0, ...
 02897   524   NtContinue  (1244320, 0, ...
 02898   524   NtContinue  (1244320, 0, ...
 02899   524   NtContinue  (1244320, 0, ...
 02900   524   NtContinue  (1244320, 0, ...
 02901   524   NtContinue  (1244320, 0, ...
 02902   524   NtContinue  (1244320, 0, ...
 02903   524   NtContinue  (1244320, 0, ...
 02904   524   NtContinue  (1244320, 0, ...
 02905   524   NtContinue  (1244320, 0, ...
 02906   524   NtContinue  (1244320, 0, ...
 02907   524   NtContinue  (1244320, 0, ...
 02908   524   NtContinue  (1244320, 0, ...
 02909   524   NtContinue  (1244320, 0, ...
 02910   524   NtContinue  (1244320, 0, ...
 02911   524   NtContinue  (1244320, 0, ...
 02912   524   NtContinue  (1244320, 0, ...
 02913   524   NtContinue  (1244320, 0, ...
 02914   524   NtContinue  (1244320, 0, ...
 02915   524   NtContinue  (1244320, 0, ...
 02916   524   NtContinue  (1244320, 0, ...
 02917   524   NtContinue  (1244320, 0, ...
 02918   524   NtContinue  (1244320, 0, ...
 02919   524   NtContinue  (1244320, 0, ...
 02920   524   NtContinue  (1244320, 0, ...
 02921   524   NtContinue  (1244320, 0, ...
 02922   524   NtContinue  (1244320, 0, ...
 02923   524   NtContinue  (1244320, 0, ...
 02924   524   NtContinue  (1244320, 0, ...
 02925   524   NtContinue  (1244320, 0, ...
 02926   524   NtContinue  (1244320, 0, ...
 02927   524   NtContinue  (1244320, 0, ...
 02928   524   NtContinue  (1244320, 0, ...
 02929   524   NtContinue  (1244320, 0, ...
 02930   524   NtContinue  (1244320, 0, ...
 02931   524   NtContinue  (1244320, 0, ...
 02932   524   NtContinue  (1244320, 0, ...
 02933   524   NtContinue  (1244320, 0, ...
 02934   524   NtContinue  (1244320, 0, ...
 02935   524   NtContinue  (1244320, 0, ...
 02936   524   NtContinue  (1244320, 0, ...
 02937   524   NtContinue  (1244320, 0, ...
 02938   524   NtContinue  (1244320, 0, ...
 02939   524   NtContinue  (1244320, 0, ...
 02940   524   NtContinue  (1244320, 0, ...
 02941   524   NtContinue  (1244320, 0, ...
 02942   524   NtContinue  (1244320, 0, ...
 02943   524   NtContinue  (1244320, 0, ...
 02944   524   NtContinue  (1244320, 0, ...
 02945   524   NtContinue  (1244320, 0, ...
 02946   524   NtContinue  (1244320, 0, ...
 02947   524   NtContinue  (1244320, 0, ...
 02948   524   NtContinue  (1244320, 0, ...
 02949   524   NtContinue  (1244320, 0, ...
 02950   524   NtContinue  (1244320, 0, ...
 02951   524   NtContinue  (1244320, 0, ...
 02952   524   NtContinue  (1244320, 0, ...
 02953   524   NtContinue  (1244320, 0, ...
 02954   524   NtContinue  (1244320, 0, ...
 02955   524   NtContinue  (1244320, 0, ...
 02956   524   NtContinue  (1244320, 0, ...
 02957   524   NtContinue  (1244320, 0, ...
 02958   524   NtContinue  (1244320, 0, ...
 02959   524   NtContinue  (1244320, 0, ...
 02960   524   NtContinue  (1244320, 0, ...
 02961   524   NtContinue  (1244320, 0, ...
 02962   524   NtContinue  (1244320, 0, ...
 02963   524   NtContinue  (1244320, 0, ...
 02964   524   NtContinue  (1244320, 0, ...
 02965   524   NtContinue  (1244320, 0, ...
 02966   524   NtContinue  (1244320, 0, ...
 02967   524   NtContinue  (1244320, 0, ...
 02968   524   NtContinue  (1244320, 0, ...
 02969   524   NtContinue  (1244320, 0, ...
 02970   524   NtContinue  (1244320, 0, ...
 02971   524   NtContinue  (1244320, 0, ...
 02972   524   NtContinue  (1244320, 0, ...
 02973   524   NtContinue  (1244320, 0, ...
 02974   524   NtContinue  (1244320, 0, ...
 02975   524   NtContinue  (1244320, 0, ...
 02976   524   NtContinue  (1244320, 0, ...
 02977   524   NtContinue  (1244320, 0, ...
 02978   524   NtContinue  (1244320, 0, ...
 02979   524   NtContinue  (1244320, 0, ...
 02980   524   NtContinue  (1244320, 0, ...
 02981   524   NtContinue  (1244320, 0, ...
 02982   524   NtContinue  (1244320, 0, ...
 02983   524   NtContinue  (1244320, 0, ...
 02984   524   NtContinue  (1244320, 0, ...
 02985   524   NtContinue  (1244320, 0, ...
 02986   524   NtContinue  (1244320, 0, ...
 02987   524   NtContinue  (1244320, 0, ...
 02988   524   NtContinue  (1244320, 0, ...
 02989   524   NtContinue  (1244320, 0, ...
 02990   524   NtContinue  (1244320, 0, ...
 02991   524   NtContinue  (1244320, 0, ...
 02992   524   NtContinue  (1244320, 0, ...
 02993   524   NtContinue  (1244320, 0, ...
 02994   524   NtContinue  (1244320, 0, ...
 02995   524   NtContinue  (1244320, 0, ...
 02996   524   NtContinue  (1244320, 0, ...
 02997   524   NtContinue  (1244320, 0, ...
 02998   524   NtContinue  (1244320, 0, ...
 02999   524   NtContinue  (1244320, 0, ...
 03000   524   NtContinue  (1244320, 0, ...
 03001   524   NtContinue  (1244320, 0, ...
 03002   524   NtContinue  (1244320, 0, ...
 03003   524   NtContinue  (1244320, 0, ...
 03004   524   NtContinue  (1244320, 0, ...
 03005   524   NtContinue  (1244320, 0, ...
 03006   524   NtContinue  (1244320, 0, ...
 03007   524   NtContinue  (1244320, 0, ...
 03008   524   NtContinue  (1244320, 0, ...
 03009   524   NtContinue  (1244320, 0, ...
 03010   524   NtContinue  (1244320, 0, ...
 03011   524   NtContinue  (1244320, 0, ...
 03012   524   NtContinue  (1244320, 0, ...
 03013   524   NtContinue  (1244320, 0, ...
 03014   524   NtContinue  (1244320, 0, ...
 03015   524   NtContinue  (1244320, 0, ...
 03016   524   NtContinue  (1244320, 0, ...
 03017   524   NtContinue  (1244320, 0, ...
 03018   524   NtContinue  (1244320, 0, ...
 03019   524   NtContinue  (1244320, 0, ...
 03020   524   NtContinue  (1244320, 0, ...
 03021   524   NtContinue  (1244320, 0, ...
 03022   524   NtContinue  (1244320, 0, ...
 03023   524   NtContinue  (1244320, 0, ...
 03024   524   NtContinue  (1244320, 0, ...
 03025   524   NtContinue  (1244320, 0, ...
 03026   524   NtContinue  (1244320, 0, ...
 03027   524   NtContinue  (1244320, 0, ...
 03028   524   NtContinue  (1244320, 0, ...
 03029   524   NtContinue  (1244320, 0, ...
 03030   524   NtContinue  (1244320, 0, ...
 03031   524   NtContinue  (1244320, 0, ...
 03032   524   NtContinue  (1244320, 0, ...
 03033   524   NtContinue  (1244320, 0, ...
 03034   524   NtContinue  (1244320, 0, ...
 03035   524   NtContinue  (1244320, 0, ...
 03036   524   NtContinue  (1244320, 0, ...
 03037   524   NtContinue  (1244320, 0, ...
 03038   524   NtContinue  (1244320, 0, ...
 03039   524   NtContinue  (1244320, 0, ...
 03040   524   NtContinue  (1244320, 0, ...
 03041   524   NtContinue  (1244320, 0, ...
 03042   524   NtContinue  (1244320, 0, ...
 03043   524   NtContinue  (1244320, 0, ...
 03044   524   NtContinue  (1244320, 0, ...
 03045   524   NtContinue  (1244320, 0, ...
 03046   524   NtContinue  (1244320, 0, ...
 03047   524   NtContinue  (1244320, 0, ...
 03048   524   NtContinue  (1244320, 0, ...
 03049   524   NtContinue  (1244320, 0, ...
 03050   524   NtContinue  (1244320, 0, ...
 03051   524   NtContinue  (1244320, 0, ...
 03052   524   NtContinue  (1244320, 0, ...
 03053   524   NtContinue  (1244320, 0, ...
 03054   524   NtContinue  (1244320, 0, ...
 03055   524   NtContinue  (1244320, 0, ...
 03056   524   NtContinue  (1244320, 0, ...
 03057   524   NtContinue  (1244320, 0, ...
 03058   524   NtContinue  (1244320, 0, ...
 03059   524   NtContinue  (1244320, 0, ...
 03060   524   NtContinue  (1244320, 0, ...
 03061   524   NtContinue  (1244320, 0, ...
 03062   524   NtContinue  (1244320, 0, ...
 03063   524   NtContinue  (1244320, 0, ...
 03064   524   NtContinue  (1244320, 0, ...
 03065   524   NtContinue  (1244320, 0, ...
 03066   524   NtContinue  (1244320, 0, ...
 03067   524   NtContinue  (1244320, 0, ...
 03068   524   NtContinue  (1244320, 0, ...
 03069   524   NtContinue  (1244320, 0, ...
 03070   524   NtContinue  (1244320, 0, ...
 03071   524   NtContinue  (1244320, 0, ...
 03072   524   NtContinue  (1244320, 0, ...
 03073   524   NtContinue  (1244320, 0, ...
 03074   524   NtContinue  (1244320, 0, ...
 03075   524   NtContinue  (1244320, 0, ...
 03076   524   NtContinue  (1244320, 0, ...
 03077   524   NtContinue  (1244320, 0, ...
 03078   524   NtContinue  (1244320, 0, ...
 03079   524   NtContinue  (1244320, 0, ...
 03080   524   NtContinue  (1244320, 0, ...
 03081   524   NtContinue  (1244320, 0, ...
 03082   524   NtContinue  (1244320, 0, ...
 03083   524   NtContinue  (1244320, 0, ...
 03084   524   NtContinue  (1244320, 0, ...
 03085   524   NtContinue  (1244320, 0, ...
 03086   524   NtContinue  (1244320, 0, ...
 03087   524   NtContinue  (1244320, 0, ...
 03088   524   NtContinue  (1244320, 0, ...
 03089   524   NtContinue  (1244320, 0, ...
 03090   524   NtContinue  (1244320, 0, ...
 03091   524   NtContinue  (1244320, 0, ...
 03092   524   NtContinue  (1244320, 0, ...
 03093   524   NtContinue  (1244320, 0, ...
 03094   524   NtContinue  (1244320, 0, ...
 03095   524   NtContinue  (1244320, 0, ...
 03096   524   NtContinue  (1244320, 0, ...
 03097   524   NtContinue  (1244320, 0, ...
 03098   524   NtContinue  (1244320, 0, ...
 03099   524   NtContinue  (1244320, 0, ...
 03100   524   NtContinue  (1244320, 0, ...
 03101   524   NtContinue  (1244320, 0, ...
 03102   524   NtContinue  (1244320, 0, ...
 03103   524   NtContinue  (1244320, 0, ...
 03104   524   NtContinue  (1244320, 0, ...
 03105   524   NtContinue  (1244320, 0, ...
 03106   524   NtContinue  (1244320, 0, ...
 03107   524   NtContinue  (1244320, 0, ...
 03108   524   NtContinue  (1244320, 0, ...
 03109   524   NtContinue  (1244320, 0, ...
 03110   524   NtContinue  (1244320, 0, ...
 03111   524   NtContinue  (1244320, 0, ...
 03112   524   NtContinue  (1244320, 0, ...
 03113   524   NtContinue  (1244320, 0, ...
 03114   524   NtContinue  (1244320, 0, ...
 03115   524   NtContinue  (1244320, 0, ...
 03116   524   NtContinue  (1244320, 0, ...
 03117   524   NtContinue  (1244320, 0, ...
 03118   524   NtContinue  (1244320, 0, ...
 03119   524   NtContinue  (1244320, 0, ...
 03120   524   NtContinue  (1244320, 0, ...
 03121   524   NtContinue  (1244320, 0, ...
 03122   524   NtContinue  (1244320, 0, ...
 03123   524   NtContinue  (1244320, 0, ...
 03124   524   NtContinue  (1244320, 0, ...
 03125   524   NtContinue  (1244320, 0, ...
 03126   524   NtContinue  (1244320, 0, ...
 03127   524   NtContinue  (1244320, 0, ...
 03128   524   NtContinue  (1244320, 0, ...
 03129   524   NtContinue  (1244320, 0, ...
 03130   524   NtContinue  (1244320, 0, ...
 03131   524   NtContinue  (1244320, 0, ...
 03132   524   NtContinue  (1244320, 0, ...
 03133   524   NtContinue  (1244320, 0, ...
 03134   524   NtContinue  (1244320, 0, ...
 03135   524   NtContinue  (1244320, 0, ...
 03136   524   NtContinue  (1244320, 0, ...
 03137   524   NtContinue  (1244320, 0, ...
 03138   524   NtContinue  (1244320, 0, ...
 03139   524   NtContinue  (1244320, 0, ...
 03140   524   NtContinue  (1244320, 0, ...
 03141   524   NtContinue  (1244320, 0, ...
 03142   524   NtContinue  (1244320, 0, ...
 03143   524   NtContinue  (1244320, 0, ...
 03144   524   NtContinue  (1244320, 0, ...
 03145   524   NtContinue  (1244320, 0, ...
 03146   524   NtContinue  (1244320, 0, ...
 03147   524   NtContinue  (1244320, 0, ...
 03148   524   NtContinue  (1244320, 0, ...
 03149   524   NtContinue  (1244320, 0, ...
 03150   524   NtContinue  (1244320, 0, ...
 03151   524   NtContinue  (1244320, 0, ...
 03152   524   NtContinue  (1244320, 0, ...
 03153   524   NtContinue  (1244320, 0, ...
 03154   524   NtContinue  (1244320, 0, ...
 03155   524   NtContinue  (1244320, 0, ...
 03156   524   NtContinue  (1244320, 0, ...
 03157   524   NtContinue  (1244320, 0, ...
 03158   524   NtContinue  (1244320, 0, ...
 03159   524   NtContinue  (1244320, 0, ...
 03160   524   NtContinue  (1244320, 0, ...
 03161   524   NtContinue  (1244320, 0, ...
 03162   524   NtContinue  (1244320, 0, ...
 03163   524   NtContinue  (1244320, 0, ...
 03164   524   NtContinue  (1244320, 0, ...
 03165   524   NtContinue  (1244320, 0, ...
 03166   524   NtContinue  (1244320, 0, ...
 03167   524   NtContinue  (1244320, 0, ...
 03168   524   NtContinue  (1244320, 0, ...
 03169   524   NtContinue  (1244320, 0, ...
 03170   524   NtContinue  (1244320, 0, ...
 03171   524   NtContinue  (1244320, 0, ...
 03172   524   NtContinue  (1244320, 0, ...
 03173   524   NtContinue  (1244320, 0, ...
 03174   524   NtContinue  (1244320, 0, ...
 03175   524   NtContinue  (1244320, 0, ...
 03176   524   NtContinue  (1244320, 0, ...
 03177   524   NtContinue  (1244320, 0, ...
 03178   524   NtContinue  (1244320, 0, ...
 03179   524   NtContinue  (1244320, 0, ...
 03180   524   NtContinue  (1244320, 0, ...
 03181   524   NtContinue  (1244320, 0, ...
 03182   524   NtContinue  (1244320, 0, ...
 03183   524   NtContinue  (1244320, 0, ...
 03184   524   NtContinue  (1244320, 0, ...
 03185   524   NtContinue  (1244320, 0, ...
 03186   524   NtContinue  (1244320, 0, ...
 03187   524   NtContinue  (1244320, 0, ...
 03188   524   NtContinue  (1244320, 0, ...
 03189   524   NtContinue  (1244320, 0, ...
 03190   524   NtContinue  (1244320, 0, ...
 03191   524   NtContinue  (1244320, 0, ...
 03192   524   NtContinue  (1244320, 0, ...
 03193   524   NtContinue  (1244320, 0, ...
 03194   524   NtContinue  (1244320, 0, ...
 03195   524   NtContinue  (1244320, 0, ...
 03196   524   NtContinue  (1244320, 0, ...
 03197   524   NtContinue  (1244320, 0, ...
 03198   524   NtContinue  (1244320, 0, ...
 03199   524   NtContinue  (1244320, 0, ...
 03200   524   NtContinue  (1244320, 0, ...
 03201   524   NtContinue  (1244320, 0, ...
 03202   524   NtContinue  (1244320, 0, ...
 03203   524   NtContinue  (1244320, 0, ...
 03204   524   NtContinue  (1244320, 0, ...
 03205   524   NtContinue  (1244320, 0, ...
 03206   524   NtContinue  (1244320, 0, ...
 03207   524   NtContinue  (1244320, 0, ...
 03208   524   NtContinue  (1244320, 0, ...
 03209   524   NtContinue  (1244320, 0, ...
 03210   524   NtContinue  (1244320, 0, ...
 03211   524   NtContinue  (1244320, 0, ...
 03212   524   NtContinue  (1244320, 0, ...
 03213   524   NtContinue  (1244320, 0, ...
 03214   524   NtContinue  (1244320, 0, ...
 03215   524   NtContinue  (1244320, 0, ...
 03216   524   NtContinue  (1244320, 0, ...
 03217   524   NtContinue  (1244320, 0, ...
 03218   524   NtContinue  (1244320, 0, ...
 03219   524   NtContinue  (1244320, 0, ...
 03220   524   NtContinue  (1244320, 0, ...
 03221   524   NtContinue  (1244320, 0, ...
 03222   524   NtContinue  (1244320, 0, ...
 03223   524   NtContinue  (1244320, 0, ...
 03224   524   NtContinue  (1244320, 0, ...
 03225   524   NtContinue  (1244320, 0, ...
 03226   524   NtContinue  (1244320, 0, ...
 03227   524   NtContinue  (1244320, 0, ...
 03228   524   NtContinue  (1244320, 0, ...
 03229   524   NtContinue  (1244320, 0, ...
 03230   524   NtContinue  (1244320, 0, ...
 03231   524   NtContinue  (1244320, 0, ...
 03232   524   NtContinue  (1244320, 0, ...
 03233   524   NtContinue  (1244320, 0, ...
 03234   524   NtContinue  (1244320, 0, ...
 03235   524   NtContinue  (1244320, 0, ...
 03236   524   NtContinue  (1244320, 0, ...
 03237   524   NtContinue  (1244320, 0, ...
 03238   524   NtContinue  (1244320, 0, ...
 03239   524   NtContinue  (1244320, 0, ...
 03240   524   NtContinue  (1244320, 0, ...
 03241   524   NtContinue  (1244320, 0, ...
 03242   524   NtContinue  (1244320, 0, ...
 03243   524   NtContinue  (1244320, 0, ...
 03244   524   NtContinue  (1244320, 0, ...
 03245   524   NtContinue  (1244320, 0, ...
 03246   524   NtContinue  (1244320, 0, ...
 03247   524   NtContinue  (1244320, 0, ...
 03248   524   NtContinue  (1244320, 0, ...
 03249   524   NtContinue  (1244320, 0, ...
 03250   524   NtContinue  (1244320, 0, ...
 03251   524   NtContinue  (1244320, 0, ...
 03252   524   NtContinue  (1244320, 0, ...
 03253   524   NtContinue  (1244320, 0, ...
 03254   524   NtContinue  (1244320, 0, ...
 03255   524   NtContinue  (1244320, 0, ...
 03256   524   NtContinue  (1244320, 0, ...
 03257   524   NtContinue  (1244320, 0, ...
 03258   524   NtContinue  (1244320, 0, ...
 03259   524   NtContinue  (1244320, 0, ...
 03260   524   NtContinue  (1244320, 0, ...
 03261   524   NtContinue  (1244320, 0, ...
 03262   524   NtContinue  (1244320, 0, ...
 03263   524   NtContinue  (1244320, 0, ...
 03264   524   NtContinue  (1244320, 0, ...
 03265   524   NtContinue  (1244320, 0, ...
 03266   524   NtContinue  (1244320, 0, ...
 03267   524   NtContinue  (1244320, 0, ...
 03268   524   NtContinue  (1244320, 0, ...
 03269   524   NtContinue  (1244320, 0, ...
 03270   524   NtContinue  (1244320, 0, ...
 03271   524   NtContinue  (1244320, 0, ...
 03272   524   NtContinue  (1244320, 0, ...
 03273   524   NtContinue  (1244320, 0, ...
 03274   524   NtContinue  (1244320, 0, ...
 03275   524   NtContinue  (1244320, 0, ...
 03276   524   NtContinue  (1244320, 0, ...
 03277   524   NtContinue  (1244320, 0, ...
 03278   524   NtContinue  (1244320, 0, ...
 03279   524   NtContinue  (1244320, 0, ...
 03280   524   NtContinue  (1244320, 0, ...
 03281   524   NtContinue  (1244320, 0, ...
 03282   524   NtContinue  (1244320, 0, ...
 03283   524   NtContinue  (1244320, 0, ...
 03284   524   NtContinue  (1244320, 0, ...
 03285   524   NtContinue  (1244320, 0, ...
 03286   524   NtContinue  (1244320, 0, ...
 03287   524   NtContinue  (1244320, 0, ...
 03288   524   NtContinue  (1244320, 0, ...
 03289   524   NtContinue  (1244320, 0, ...
 03290   524   NtContinue  (1244320, 0, ...
 03291   524   NtContinue  (1244320, 0, ...
 03292   524   NtContinue  (1244320, 0, ...
 03293   524   NtContinue  (1244320, 0, ...
 03294   524   NtContinue  (1244320, 0, ...
 03295   524   NtContinue  (1244320, 0, ...
 03296   524   NtContinue  (1244320, 0, ...
 03297   524   NtContinue  (1244320, 0, ...
 03298   524   NtContinue  (1244320, 0, ...
 03299   524   NtContinue  (1244320, 0, ...
 03300   524   NtContinue  (1244320, 0, ...
 03301   524   NtContinue  (1244320, 0, ...
 03302   524   NtContinue  (1244320, 0, ...
 03303   524   NtContinue  (1244320, 0, ...
 03304   524   NtContinue  (1244320, 0, ...
 03305   524   NtContinue  (1244320, 0, ...
 03306   524   NtContinue  (1244320, 0, ...
 03307   524   NtContinue  (1244320, 0, ...
 03308   524   NtContinue  (1244320, 0, ...
 03309   524   NtContinue  (1244320, 0, ...
 03310   524   NtContinue  (1244320, 0, ...
 03311   524   NtContinue  (1244320, 0, ...
 03312   524   NtContinue  (1244320, 0, ...
 03313   524   NtContinue  (1244320, 0, ...
 03314   524   NtContinue  (1244320, 0, ...
 03315   524   NtContinue  (1244320, 0, ...
 03316   524   NtContinue  (1244320, 0, ...
 03317   524   NtContinue  (1244320, 0, ...
 03318   524   NtContinue  (1244320, 0, ...
 03319   524   NtContinue  (1244320, 0, ...
 03320   524   NtContinue  (1244320, 0, ...
 03321   524   NtContinue  (1244320, 0, ...
 03322   524   NtContinue  (1244320, 0, ...
 03323   524   NtContinue  (1244320, 0, ...
 03324   524   NtContinue  (1244320, 0, ...
 03325   524   NtContinue  (1244320, 0, ...
 03326   524   NtContinue  (1244320, 0, ...
 03327   524   NtContinue  (1244320, 0, ...
 03328   524   NtContinue  (1244320, 0, ...
 03329   524   NtContinue  (1244320, 0, ...
 03330   524   NtContinue  (1244320, 0, ...
 03331   524   NtContinue  (1244320, 0, ...
 03332   524   NtContinue  (1244320, 0, ...
 03333   524   NtContinue  (1244320, 0, ...
 03334   524   NtContinue  (1244320, 0, ...
 03335   524   NtContinue  (1244320, 0, ...
 03336   524   NtContinue  (1244320, 0, ...
 03337   524   NtContinue  (1244320, 0, ...
 03338   524   NtContinue  (1244320, 0, ...
 03339   524   NtContinue  (1244320, 0, ...
 03340   524   NtContinue  (1244320, 0, ...
 03341   524   NtContinue  (1244320, 0, ...
 03342   524   NtContinue  (1244320, 0, ...
 03343   524   NtContinue  (1244320, 0, ...
 03344   524   NtContinue  (1244320, 0, ...
 03345   524   NtContinue  (1244320, 0, ...
 03346   524   NtContinue  (1244320, 0, ...
 03347   524   NtContinue  (1244320, 0, ...
 03348   524   NtContinue  (1244320, 0, ...
 03349   524   NtContinue  (1244320, 0, ...
 03350   524   NtContinue  (1244320, 0, ...
 03351   524   NtContinue  (1244320, 0, ...
 03352   524   NtContinue  (1244320, 0, ...
 03353   524   NtContinue  (1244320, 0, ...
 03354   524   NtContinue  (1244320, 0, ...
 03355   524   NtContinue  (1244320, 0, ...
 03356   524   NtContinue  (1244320, 0, ...
 03357   524   NtContinue  (1244320, 0, ...
 03358   524   NtContinue  (1244320, 0, ...
 03359   524   NtContinue  (1244320, 0, ...
 03360   524   NtContinue  (1244320, 0, ...
 03361   524   NtContinue  (1244320, 0, ...
 03362   524   NtContinue  (1244320, 0, ...
 03363   524   NtContinue  (1244320, 0, ...
 03364   524   NtContinue  (1244320, 0, ...
 03365   524   NtContinue  (1244320, 0, ...
 03366   524   NtContinue  (1244320, 0, ...
 03367   524   NtContinue  (1244320, 0, ...
 03368   524   NtContinue  (1244320, 0, ...
 03369   524   NtContinue  (1244320, 0, ...
 03370   524   NtContinue  (1244320, 0, ...
 03371   524   NtContinue  (1244320, 0, ...
 03372   524   NtContinue  (1244320, 0, ...
 03373   524   NtContinue  (1244320, 0, ...
 03374   524   NtContinue  (1244320, 0, ...
 03375   524   NtContinue  (1244320, 0, ...
 03376   524   NtContinue  (1244320, 0, ...
 03377   524   NtContinue  (1244320, 0, ...
 03378   524   NtContinue  (1244320, 0, ...
 03379   524   NtContinue  (1244320, 0, ...
 03380   524   NtContinue  (1244320, 0, ...
 03381   524   NtContinue  (1244320, 0, ...
 03382   524   NtContinue  (1244320, 0, ...
 03383   524   NtContinue  (1244320, 0, ...
 03384   524   NtContinue  (1244320, 0, ...
 03385   524   NtContinue  (1244320, 0, ...
 03386   524   NtContinue  (1244320, 0, ...
 03387   524   NtContinue  (1244320, 0, ...
 03388   524   NtContinue  (1244320, 0, ...
 03389   524   NtContinue  (1244320, 0, ...
 03390   524   NtContinue  (1244320, 0, ...
 03391   524   NtContinue  (1244320, 0, ...
 03392   524   NtContinue  (1244320, 0, ...
 03393   524   NtContinue  (1244320, 0, ...
 03394   524   NtContinue  (1244320, 0, ...
 03395   524   NtContinue  (1244320, 0, ...
 03396   524   NtContinue  (1244320, 0, ...
 03397   524   NtContinue  (1244320, 0, ...
 03398   524   NtContinue  (1244320, 0, ...
 03399   524   NtContinue  (1244320, 0, ...
 03400   524   NtContinue  (1244320, 0, ...
 03401   524   NtContinue  (1244320, 0, ...
 03402   524   NtContinue  (1244320, 0, ...
 03403   524   NtContinue  (1244320, 0, ...
 03404   524   NtContinue  (1244320, 0, ...
 03405   524   NtContinue  (1244320, 0, ...
 03406   524   NtContinue  (1244320, 0, ...
 03407   524   NtContinue  (1244320, 0, ...
 03408   524   NtContinue  (1244320, 0, ...
 03409   524   NtContinue  (1244320, 0, ...
 03410   524   NtContinue  (1244320, 0, ...
 03411   524   NtContinue  (1244320, 0, ...
 03412   524   NtContinue  (1244320, 0, ...
 03413   524   NtContinue  (1244320, 0, ...
 03414   524   NtContinue  (1244320, 0, ...
 03415   524   NtContinue  (1244320, 0, ...
 03416   524   NtContinue  (1244320, 0, ...
 03417   524   NtContinue  (1244320, 0, ...
 03418   524   NtContinue  (1244320, 0, ...
 03419   524   NtContinue  (1244320, 0, ...
 03420   524   NtContinue  (1244320, 0, ...
 03421   524   NtContinue  (1244320, 0, ...
 03422   524   NtContinue  (1244320, 0, ...
 03423   524   NtContinue  (1244320, 0, ...
 03424   524   NtContinue  (1244320, 0, ...
 03425   524   NtContinue  (1244320, 0, ...
 03426   524   NtContinue  (1244320, 0, ...
 03427   524   NtContinue  (1244320, 0, ...
 03428   524   NtContinue  (1244320, 0, ...
 03429   524   NtContinue  (1244320, 0, ...
 03430   524   NtContinue  (1244320, 0, ...
 03431   524   NtContinue  (1244320, 0, ...
 03432   524   NtContinue  (1244320, 0, ...
 03433   524   NtContinue  (1244320, 0, ...
 03434   524   NtContinue  (1244320, 0, ...
 03435   524   NtContinue  (1244320, 0, ...
 03436   524   NtContinue  (1244320, 0, ...
 03437   524   NtContinue  (1244320, 0, ...
 03438   524   NtContinue  (1244320, 0, ...
 03439   524   NtContinue  (1244320, 0, ...
 03440   524   NtContinue  (1244320, 0, ...
 03441   524   NtContinue  (1244320, 0, ...
 03442   524   NtContinue  (1244320, 0, ...
 03443   524   NtContinue  (1244320, 0, ...
 03444   524   NtContinue  (1244320, 0, ...
 03445   524   NtContinue  (1244320, 0, ...
 03446   524   NtContinue  (1244320, 0, ...
 03447   524   NtContinue  (1244320, 0, ...
 03448   524   NtContinue  (1244320, 0, ...
 03449   524   NtContinue  (1244320, 0, ...
 03450   524   NtContinue  (1244320, 0, ...
 03451   524   NtContinue  (1244320, 0, ...
 03452   524   NtContinue  (1244320, 0, ...
 03453   524   NtContinue  (1244320, 0, ...
 03454   524   NtContinue  (1244320, 0, ...
 03455   524   NtContinue  (1244320, 0, ...
 03456   524   NtContinue  (1244320, 0, ...
 03457   524   NtContinue  (1244320, 0, ...
 03458   524   NtContinue  (1244320, 0, ...
 03459   524   NtContinue  (1244320, 0, ...
 03460   524   NtContinue  (1244320, 0, ...
 03461   524   NtContinue  (1244320, 0, ...
 03462   524   NtContinue  (1244320, 0, ...
 03463   524   NtContinue  (1244320, 0, ...
 03464   524   NtContinue  (1244320, 0, ...
 03465   524   NtContinue  (1244320, 0, ...
 03466   524   NtContinue  (1244320, 0, ...
 03467   524   NtContinue  (1244320, 0, ...
 03468   524   NtContinue  (1244320, 0, ...
 03469   524   NtContinue  (1244320, 0, ...
 03470   524   NtContinue  (1244320, 0, ...
 03471   524   NtContinue  (1244320, 0, ...
 03472   524   NtContinue  (1244320, 0, ...
 03473   524   NtContinue  (1244320, 0, ...
 03474   524   NtContinue  (1244320, 0, ...
 03475   524   NtContinue  (1244320, 0, ...
 03476   524   NtContinue  (1244320, 0, ...
 03477   524   NtContinue  (1244320, 0, ...
 03478   524   NtContinue  (1244320, 0, ...
 03479   524   NtContinue  (1244320, 0, ...
 03480   524   NtContinue  (1244320, 0, ...
 03481   524   NtContinue  (1244320, 0, ...
 03482   524   NtContinue  (1244320, 0, ...
 03483   524   NtContinue  (1244320, 0, ...
 03484   524   NtContinue  (1244320, 0, ...
 03485   524   NtContinue  (1244320, 0, ...
 03486   524   NtContinue  (1244320, 0, ...
 03487   524   NtContinue  (1244320, 0, ...
 03488   524   NtContinue  (1244320, 0, ...
 03489   524   NtContinue  (1244320, 0, ...
 03490   524   NtContinue  (1244320, 0, ...
 03491   524   NtContinue  (1244320, 0, ...
 03492   524   NtContinue  (1244320, 0, ...
 03493   524   NtContinue  (1244320, 0, ...
 03494   524   NtContinue  (1244320, 0, ...
 03495   524   NtContinue  (1244320, 0, ...
 03496   524   NtContinue  (1244320, 0, ...
 03497   524   NtContinue  (1244320, 0, ...
 03498   524   NtContinue  (1244320, 0, ...
 03499   524   NtContinue  (1244320, 0, ...
 03500   524   NtContinue  (1244320, 0, ...
 03501   524   NtContinue  (1244320, 0, ...
 03502   524   NtContinue  (1244320, 0, ...
 03503   524   NtContinue  (1244320, 0, ...
 03504   524   NtContinue  (1244320, 0, ...
 03505   524   NtContinue  (1244320, 0, ...
 03506   524   NtContinue  (1244320, 0, ...
 03507   524   NtContinue  (1244320, 0, ...
 03508   524   NtContinue  (1244320, 0, ...
 03509   524   NtContinue  (1244320, 0, ...
 03510   524   NtContinue  (1244320, 0, ...
 03511   524   NtContinue  (1244320, 0, ...
 03512   524   NtContinue  (1244320, 0, ...
 03513   524   NtContinue  (1244320, 0, ...
 03514   524   NtContinue  (1244320, 0, ...
 03515   524   NtContinue  (1244320, 0, ...
 03516   524   NtContinue  (1244320, 0, ...
 03517   524   NtContinue  (1244320, 0, ...
 03518   524   NtContinue  (1244320, 0, ...
 03519   524   NtContinue  (1244320, 0, ...
 03520   524   NtContinue  (1244320, 0, ...
 03521   524   NtContinue  (1244320, 0, ...
 03522   524   NtContinue  (1244320, 0, ...
 03523   524   NtContinue  (1244320, 0, ...
 03524   524   NtContinue  (1244320, 0, ...
 03525   524   NtContinue  (1244320, 0, ...
 03526   524   NtContinue  (1244320, 0, ...
 03527   524   NtContinue  (1244320, 0, ...
 03528   524   NtContinue  (1244320, 0, ...
 03529   524   NtContinue  (1244320, 0, ...
 03530   524   NtContinue  (1244320, 0, ...
 03531   524   NtContinue  (1244320, 0, ...
 03532   524   NtContinue  (1244320, 0, ...
 03533   524   NtContinue  (1244320, 0, ...
 03534   524   NtContinue  (1244320, 0, ...
 03535   524   NtContinue  (1244320, 0, ...
 03536   524   NtContinue  (1244320, 0, ...
 03537   524   NtContinue  (1244320, 0, ...
 03538   524   NtContinue  (1244320, 0, ...
 03539   524   NtContinue  (1244320, 0, ...
 03540   524   NtContinue  (1244320, 0, ...
 03541   524   NtContinue  (1244320, 0, ...
 03542   524   NtContinue  (1244320, 0, ...
 03543   524   NtContinue  (1244320, 0, ...
 03544   524   NtContinue  (1244320, 0, ...
 03545   524   NtContinue  (1244320, 0, ...
 03546   524   NtContinue  (1244320, 0, ...
 03547   524   NtContinue  (1244320, 0, ...
 03548   524   NtContinue  (1244320, 0, ...
 03549   524   NtContinue  (1244320, 0, ...
 03550   524   NtContinue  (1244320, 0, ...
 03551   524   NtContinue  (1244320, 0, ...
 03552   524   NtContinue  (1244320, 0, ...
 03553   524   NtContinue  (1244320, 0, ...
 03554   524   NtContinue  (1244320, 0, ...
 03555   524   NtContinue  (1244320, 0, ...
 03556   524   NtContinue  (1244320, 0, ...
 03557   524   NtContinue  (1244320, 0, ...
 03558   524   NtContinue  (1244320, 0, ...
 03559   524   NtContinue  (1244320, 0, ...
 03560   524   NtContinue  (1244320, 0, ...
 03561   524   NtContinue  (1244320, 0, ...
 03562   524   NtContinue  (1244320, 0, ...
 03563   524   NtContinue  (1244320, 0, ...
 03564   524   NtContinue  (1244320, 0, ...
 03565   524   NtContinue  (1244320, 0, ...
 03566   524   NtContinue  (1244320, 0, ...
 03567   524   NtContinue  (1244320, 0, ...
 03568   524   NtContinue  (1244320, 0, ...
 03569   524   NtContinue  (1244320, 0, ...
 03570   524   NtContinue  (1244320, 0, ...
 03571   524   NtContinue  (1244320, 0, ...
 03572   524   NtContinue  (1244320, 0, ...
 03573   524   NtContinue  (1244320, 0, ...
 03574   524   NtContinue  (1244320, 0, ...
 03575   524   NtContinue  (1244320, 0, ...
 03576   524   NtContinue  (1244320, 0, ...
 03577   524   NtContinue  (1244320, 0, ...
 03578   524   NtContinue  (1244320, 0, ...
 03579   524   NtContinue  (1244320, 0, ...
 03580   524   NtContinue  (1244320, 0, ...
 03581   524   NtContinue  (1244320, 0, ...
 03582   524   NtContinue  (1244320, 0, ...
 03583   524   NtContinue  (1244320, 0, ...
 03584   524   NtContinue  (1244320, 0, ...
 03585   524   NtContinue  (1244320, 0, ...
 03586   524   NtContinue  (1244320, 0, ...
 03587   524   NtContinue  (1244320, 0, ...
 03588   524   NtContinue  (1244320, 0, ...
 03589   524   NtContinue  (1244320, 0, ...
 03590   524   NtContinue  (1244320, 0, ...
 03591   524   NtContinue  (1244320, 0, ...
 03592   524   NtContinue  (1244320, 0, ...
 03593   524   NtContinue  (1244320, 0, ...
 03594   524   NtContinue  (1244320, 0, ...
 03595   524   NtContinue  (1244320, 0, ...
 03596   524   NtContinue  (1244320, 0, ...
 03597   524   NtContinue  (1244320, 0, ...
 03598   524   NtContinue  (1244320, 0, ...
 03599   524   NtContinue  (1244320, 0, ...
 03600   524   NtContinue  (1244320, 0, ...
 03601   524   NtContinue  (1244320, 0, ...
 03602   524   NtContinue  (1244320, 0, ...
 03603   524   NtContinue  (1244320, 0, ...
 03604   524   NtContinue  (1244320, 0, ...
 03605   524   NtContinue  (1244320, 0, ...
 03606   524   NtContinue  (1244320, 0, ...
 03607   524   NtContinue  (1244320, 0, ...
 03608   524   NtContinue  (1244320, 0, ...
 03609   524   NtContinue  (1244320, 0, ...
 03610   524   NtContinue  (1244320, 0, ...
 03611   524   NtContinue  (1244320, 0, ...
 03612   524   NtContinue  (1244320, 0, ...
 03613   524   NtContinue  (1244320, 0, ...
 03614   524   NtContinue  (1244320, 0, ...
 03615   524   NtContinue  (1244320, 0, ...
 03616   524   NtContinue  (1244320, 0, ...
 03617   524   NtContinue  (1244320, 0, ...
 03618   524   NtContinue  (1244320, 0, ...
 03619   524   NtContinue  (1244320, 0, ...
 03620   524   NtContinue  (1244320, 0, ...
 03621   524   NtContinue  (1244320, 0, ...
 03622   524   NtContinue  (1244320, 0, ...
 03623   524   NtContinue  (1244320, 0, ...
 03624   524   NtContinue  (1244320, 0, ...
 03625   524   NtContinue  (1244320, 0, ...
 03626   524   NtContinue  (1244320, 0, ...
 03627   524   NtContinue  (1244320, 0, ...
 03628   524   NtContinue  (1244320, 0, ...
 03629   524   NtContinue  (1244320, 0, ...
 03630   524   NtContinue  (1244320, 0, ...
 03631   524   NtContinue  (1244320, 0, ...
 03632   524   NtContinue  (1244320, 0, ...
 03633   524   NtContinue  (1244320, 0, ...
 03634   524   NtContinue  (1244320, 0, ...
 03635   524   NtContinue  (1244320, 0, ...
 03636   524   NtContinue  (1244320, 0, ...
 03637   524   NtContinue  (1244320, 0, ...
 03638   524   NtContinue  (1244320, 0, ...
 03639   524   NtContinue  (1244320, 0, ...
 03640   524   NtContinue  (1244320, 0, ...
 03641   524   NtContinue  (1244320, 0, ...
 03642   524   NtContinue  (1244320, 0, ...
 03643   524   NtContinue  (1244320, 0, ...
 03644   524   NtContinue  (1244320, 0, ...
 03645   524   NtContinue  (1244320, 0, ...
 03646   524   NtContinue  (1244320, 0, ...
 03647   524   NtContinue  (1244320, 0, ...
 03648   524   NtContinue  (1244320, 0, ...
 03649   524   NtContinue  (1244320, 0, ...
 03650   524   NtContinue  (1244320, 0, ...
 03651   524   NtContinue  (1244320, 0, ...
 03652   524   NtContinue  (1244320, 0, ...
 03653   524   NtContinue  (1244320, 0, ...
 03654   524   NtContinue  (1244320, 0, ...
 03655   524   NtContinue  (1244320, 0, ...
 03656   524   NtContinue  (1244320, 0, ...
 03657   524   NtContinue  (1244320, 0, ...
 03658   524   NtContinue  (1244320, 0, ...
 03659   524   NtContinue  (1244320, 0, ...
 03660   524   NtContinue  (1244320, 0, ...
 03661   524   NtContinue  (1244320, 0, ...
 03662   524   NtContinue  (1244320, 0, ...
 03663   524   NtContinue  (1244320, 0, ...
 03664   524   NtContinue  (1244320, 0, ...
 03665   524   NtContinue  (1244320, 0, ...
 03666   524   NtContinue  (1244320, 0, ...
 03667   524   NtContinue  (1244320, 0, ...
 03668   524   NtContinue  (1244320, 0, ...
 03669   524   NtContinue  (1244320, 0, ...
 03670   524   NtContinue  (1244320, 0, ...
 03671   524   NtContinue  (1244320, 0, ...
 03672   524   NtContinue  (1244320, 0, ...
 03673   524   NtContinue  (1244320, 0, ...
 03674   524   NtContinue  (1244320, 0, ...
 03675   524   NtContinue  (1244320, 0, ...
 03676   524   NtContinue  (1244320, 0, ...
 03677   524   NtContinue  (1244320, 0, ...
 03678   524   NtContinue  (1244320, 0, ...
 03679   524   NtContinue  (1244320, 0, ...
 03680   524   NtContinue  (1244320, 0, ...
 03681   524   NtContinue  (1244320, 0, ...
 03682   524   NtContinue  (1244320, 0, ...
 03683   524   NtContinue  (1244320, 0, ...
 03684   524   NtContinue  (1244320, 0, ...
 03685   524   NtContinue  (1244320, 0, ...
 03686   524   NtContinue  (1244320, 0, ...
 03687   524   NtContinue  (1244320, 0, ...
 03688   524   NtContinue  (1244320, 0, ...
 03689   524   NtContinue  (1244320, 0, ...
 03690   524   NtContinue  (1244320, 0, ...
 03691   524   NtContinue  (1244320, 0, ...
 03692   524   NtContinue  (1244320, 0, ...
 03693   524   NtContinue  (1244320, 0, ...
 03694   524   NtContinue  (1244320, 0, ...
 03695   524   NtContinue  (1244320, 0, ...
 03696   524   NtContinue  (1244320, 0, ...
 03697   524   NtContinue  (1244320, 0, ...
 03698   524   NtContinue  (1244320, 0, ...
 03699   524   NtContinue  (1244320, 0, ...
 03700   524   NtContinue  (1244320, 0, ...
 03701   524   NtContinue  (1244320, 0, ...
 03702   524   NtContinue  (1244320, 0, ...
 03703   524   NtContinue  (1244320, 0, ...
 03704   524   NtContinue  (1244320, 0, ...
 03705   524   NtContinue  (1244320, 0, ...
 03706   524   NtContinue  (1244320, 0, ...
 03707   524   NtContinue  (1244320, 0, ...
 03708   524   NtContinue  (1244320, 0, ...
 03709   524   NtContinue  (1244320, 0, ...
 03710   524   NtContinue  (1244320, 0, ...
 03711   524   NtContinue  (1244320, 0, ...
 03712   524   NtContinue  (1244320, 0, ...
 03713   524   NtContinue  (1244320, 0, ...
 03714   524   NtContinue  (1244320, 0, ...
 03715   524   NtContinue  (1244320, 0, ...
 03716   524   NtContinue  (1244320, 0, ...
 03717   524   NtContinue  (1244320, 0, ...
 03718   524   NtContinue  (1244320, 0, ...
 03719   524   NtContinue  (1244320, 0, ...
 03720   524   NtContinue  (1244320, 0, ...
 03721   524   NtContinue  (1244320, 0, ...
 03722   524   NtContinue  (1244320, 0, ...
 03723   524   NtContinue  (1244320, 0, ...
 03724   524   NtContinue  (1244320, 0, ...
 03725   524   NtContinue  (1244320, 0, ...
 03726   524   NtContinue  (1244320, 0, ...
 03727   524   NtContinue  (1244320, 0, ...
 03728   524   NtContinue  (1244320, 0, ...
 03729   524   NtContinue  (1244320, 0, ...
 03730   524   NtContinue  (1244320, 0, ...
 03731   524   NtContinue  (1244320, 0, ...
 03732   524   NtContinue  (1244320, 0, ...
 03733   524   NtContinue  (1244320, 0, ...
 03734   524   NtContinue  (1244320, 0, ...
 03735   524   NtContinue  (1244320, 0, ...
 03736   524   NtContinue  (1244320, 0, ...
 03737   524   NtContinue  (1244320, 0, ...
 03738   524   NtContinue  (1244320, 0, ...
 03739   524   NtContinue  (1244320, 0, ...
 03740   524   NtContinue  (1244320, 0, ...
 03741   524   NtContinue  (1244320, 0, ...
 03742   524   NtContinue  (1244320, 0, ...
 03743   524   NtContinue  (1244320, 0, ...
 03744   524   NtContinue  (1244320, 0, ...
 03745   524   NtContinue  (1244320, 0, ...
 03746   524   NtContinue  (1244320, 0, ...
 03747   524   NtContinue  (1244320, 0, ...
 03748   524   NtContinue  (1244320, 0, ...
 03749   524   NtContinue  (1244320, 0, ...
 03750   524   NtContinue  (1244320, 0, ...
 03751   524   NtContinue  (1244320, 0, ...
 03752   524   NtContinue  (1244320, 0, ...
 03753   524   NtContinue  (1244320, 0, ...
 03754   524   NtContinue  (1244320, 0, ...
 03755   524   NtContinue  (1244320, 0, ...
 03756   524   NtContinue  (1244320, 0, ...
 03757   524   NtContinue  (1244320, 0, ...
 03758   524   NtContinue  (1244320, 0, ...
 03759   524   NtContinue  (1244320, 0, ...
 03760   524   NtContinue  (1244320, 0, ...
 03761   524   NtContinue  (1244320, 0, ...
 03762   524   NtContinue  (1244320, 0, ...
 03763   524   NtContinue  (1244320, 0, ...
 03764   524   NtContinue  (1244320, 0, ...
 03765   524   NtContinue  (1244320, 0, ...
 03766   524   NtContinue  (1244320, 0, ...
 03767   524   NtContinue  (1244320, 0, ...
 03768   524   NtContinue  (1244320, 0, ...
 03769   524   NtContinue  (1244320, 0, ...
 03770   524   NtContinue  (1244320, 0, ...
 03771   524   NtContinue  (1244320, 0, ...
 03772   524   NtContinue  (1244320, 0, ...
 03773   524   NtContinue  (1244320, 0, ...
 03774   524   NtContinue  (1244320, 0, ...
 03775   524   NtContinue  (1244320, 0, ...
 03776   524   NtContinue  (1244320, 0, ...
 03777   524   NtContinue  (1244320, 0, ...
 03778   524   NtContinue  (1244320, 0, ...
 03779   524   NtContinue  (1244320, 0, ...
 03780   524   NtContinue  (1244320, 0, ...
 03781   524   NtContinue  (1244320, 0, ...
 03782   524   NtContinue  (1244320, 0, ...
 03783   524   NtContinue  (1244320, 0, ...
 03784   524   NtContinue  (1244320, 0, ...
 03785   524   NtContinue  (1244320, 0, ...
 03786   524   NtContinue  (1244320, 0, ...
 03787   524   NtContinue  (1244320, 0, ...
 03788   524   NtContinue  (1244320, 0, ...
 03789   524   NtContinue  (1244320, 0, ...
 03790   524   NtContinue  (1244320, 0, ...
 03791   524   NtContinue  (1244320, 0, ...
 03792   524   NtContinue  (1244320, 0, ...
 03793   524   NtContinue  (1244320, 0, ...
 03794   524   NtContinue  (1244320, 0, ...
 03795   524   NtContinue  (1244320, 0, ...
 03796   524   NtContinue  (1244320, 0, ...
 03797   524   NtContinue  (1244320, 0, ...
 03798   524   NtContinue  (1244320, 0, ...
 03799   524   NtContinue  (1244320, 0, ...
 03800   524   NtContinue  (1244320, 0, ...
 03801   524   NtContinue  (1244320, 0, ...
 03802   524   NtContinue  (1244320, 0, ...
 03803   524   NtContinue  (1244320, 0, ...
 03804   524   NtContinue  (1244320, 0, ...
 03805   524   NtContinue  (1244320, 0, ...
 03806   524   NtContinue  (1244320, 0, ...
 03807   524   NtContinue  (1244320, 0, ...
 03808   524   NtContinue  (1244320, 0, ...
 03809   524   NtContinue  (1244320, 0, ...
 03810   524   NtContinue  (1244320, 0, ...
 03811   524   NtContinue  (1244320, 0, ...
 03812   524   NtContinue  (1244320, 0, ...
 03813   524   NtContinue  (1244320, 0, ...
 03814   524   NtContinue  (1244320, 0, ...
 03815   524   NtContinue  (1244320, 0, ...
 03816   524   NtContinue  (1244320, 0, ...
 03817   524   NtContinue  (1244320, 0, ...
 03818   524   NtContinue  (1244320, 0, ...
 03819   524   NtContinue  (1244320, 0, ...
 03820   524   NtContinue  (1244320, 0, ...
 03821   524   NtContinue  (1244320, 0, ...
 03822   524   NtContinue  (1244320, 0, ...
 03823   524   NtContinue  (1244320, 0, ...
 03824   524   NtContinue  (1244320, 0, ...
 03825   524   NtContinue  (1244320, 0, ...
 03826   524   NtContinue  (1244320, 0, ...
 03827   524   NtContinue  (1244320, 0, ...
 03828   524   NtContinue  (1244320, 0, ...
 03829   524   NtContinue  (1244320, 0, ...
 03830   524   NtContinue  (1244320, 0, ...
 03831   524   NtContinue  (1244320, 0, ...
 03832   524   NtContinue  (1244320, 0, ...
 03833   524   NtContinue  (1244320, 0, ...
 03834   524   NtContinue  (1244320, 0, ...
 03835   524   NtContinue  (1244320, 0, ...
 03836   524   NtContinue  (1244320, 0, ...
 03837   524   NtContinue  (1244320, 0, ...
 03838   524   NtContinue  (1244320, 0, ...
 03839   524   NtContinue  (1244320, 0, ...
 03840   524   NtContinue  (1244320, 0, ...
 03841   524   NtContinue  (1244320, 0, ...
 03842   524   NtContinue  (1244320, 0, ...
 03843   524   NtContinue  (1244320, 0, ...
 03844   524   NtContinue  (1244320, 0, ...
 03845   524   NtContinue  (1244320, 0, ...
 03846   524   NtContinue  (1244320, 0, ...
 03847   524   NtContinue  (1244320, 0, ...
 03848   524   NtContinue  (1244320, 0, ...
 03849   524   NtContinue  (1244320, 0, ...
 03850   524   NtContinue  (1244320, 0, ...
 03851   524   NtContinue  (1244320, 0, ...
 03852   524   NtContinue  (1244320, 0, ...
 03853   524   NtContinue  (1244320, 0, ...
 03854   524   NtContinue  (1244320, 0, ...
 03855   524   NtContinue  (1244320, 0, ...
 03856   524   NtContinue  (1244320, 0, ...
 03857   524   NtContinue  (1244320, 0, ...
 03858   524   NtContinue  (1244320, 0, ...
 03859   524   NtContinue  (1244320, 0, ...
 03860   524   NtContinue  (1244320, 0, ...
 03861   524   NtContinue  (1244320, 0, ...
 03862   524   NtContinue  (1244320, 0, ...
 03863   524   NtContinue  (1244320, 0, ...
 03864   524   NtContinue  (1244320, 0, ...
 03865   524   NtContinue  (1244320, 0, ...
 03866   524   NtContinue  (1244320, 0, ...
 03867   524   NtContinue  (1244320, 0, ...
 03868   524   NtContinue  (1244320, 0, ...
 03869   524   NtContinue  (1244320, 0, ...
 03870   524   NtContinue  (1244320, 0, ...
 03871   524   NtContinue  (1244320, 0, ...
 03872   524   NtContinue  (1244320, 0, ...
 03873   524   NtContinue  (1244320, 0, ...
 03874   524   NtContinue  (1244320, 0, ...
 03875   524   NtContinue  (1244320, 0, ...
 03876   524   NtContinue  (1244320, 0, ...
 03877   524   NtContinue  (1244320, 0, ...
 03878   524   NtContinue  (1244320, 0, ...
 03879   524   NtContinue  (1244320, 0, ...
 03880   524   NtContinue  (1244320, 0, ...
 03881   524   NtContinue  (1244320, 0, ...
 03882   524   NtContinue  (1244320, 0, ...
 03883   524   NtContinue  (1244320, 0, ...
 03884   524   NtContinue  (1244320, 0, ...
 03885   524   NtContinue  (1244320, 0, ...
 03886   524   NtContinue  (1244320, 0, ...
 03887   524   NtContinue  (1244320, 0, ...
 03888   524   NtContinue  (1244320, 0, ...
 03889   524   NtContinue  (1244320, 0, ...
 03890   524   NtContinue  (1244320, 0, ...
 03891   524   NtContinue  (1244320, 0, ...
 03892   524   NtContinue  (1244320, 0, ...
 03893   524   NtContinue  (1244320, 0, ...
 03894   524   NtContinue  (1244320, 0, ...
 03895   524   NtContinue  (1244320, 0, ...
 03896   524   NtContinue  (1244320, 0, ...
 03897   524   NtContinue  (1244320, 0, ...
 03898   524   NtContinue  (1244320, 0, ...
 03899   524   NtContinue  (1244320, 0, ...
 03900   524   NtContinue  (1244320, 0, ...
 03901   524   NtContinue  (1244320, 0, ...
 03902   524   NtContinue  (1244320, 0, ...
 03903   524   NtContinue  (1244320, 0, ...
 03904   524   NtContinue  (1244320, 0, ...
 03905   524   NtContinue  (1244320, 0, ...
 03906   524   NtContinue  (1244320, 0, ...
 03907   524   NtContinue  (1244320, 0, ...
 03908   524   NtContinue  (1244320, 0, ...
 03909   524   NtContinue  (1244320, 0, ...
 03910   524   NtContinue  (1244320, 0, ...
 03911   524   NtContinue  (1244320, 0, ...
 03912   524   NtContinue  (1244320, 0, ...
 03913   524   NtContinue  (1244320, 0, ...
 03914   524   NtContinue  (1244320, 0, ...
 03915   524   NtContinue  (1244320, 0, ...
 03916   524   NtContinue  (1244320, 0, ...
 03917   524   NtContinue  (1244320, 0, ...
 03918   524   NtContinue  (1244320, 0, ...
 03919   524   NtContinue  (1244320, 0, ...
 03920   524   NtContinue  (1244320, 0, ...
 03921   524   NtContinue  (1244320, 0, ...
 03922   524   NtContinue  (1244320, 0, ...
 03923   524   NtContinue  (1244320, 0, ...
 03924   524   NtContinue  (1244320, 0, ...
 03925   524   NtContinue  (1244320, 0, ...
 03926   524   NtContinue  (1244320, 0, ...
 03927   524   NtContinue  (1244320, 0, ...
 03928   524   NtContinue  (1244320, 0, ...
 03929   524   NtContinue  (1244320, 0, ...
 03930   524   NtContinue  (1244320, 0, ...
 03931   524   NtContinue  (1244320, 0, ...
 03932   524   NtContinue  (1244320, 0, ...
 03933   524   NtContinue  (1244320, 0, ...
 03934   524   NtContinue  (1244320, 0, ...
 03935   524   NtContinue  (1244320, 0, ...
 03936   524   NtContinue  (1244320, 0, ...
 03937   524   NtContinue  (1244320, 0, ...
 03938   524   NtContinue  (1244320, 0, ...
 03939   524   NtContinue  (1244320, 0, ...
 03940   524   NtContinue  (1244320, 0, ...
 03941   524   NtContinue  (1244320, 0, ...
 03942   524   NtContinue  (1244320, 0, ...
 03943   524   NtContinue  (1244320, 0, ...
 03944   524   NtContinue  (1244320, 0, ...
 03945   524   NtContinue  (1244320, 0, ...
 03946   524   NtContinue  (1244320, 0, ...
 03947   524   NtContinue  (1244320, 0, ...
 03948   524   NtContinue  (1244320, 0, ...
 03949   524   NtContinue  (1244320, 0, ...
 03950   524   NtContinue  (1244320, 0, ...
 03951   524   NtContinue  (1244320, 0, ...
 03952   524   NtContinue  (1244320, 0, ...
 03953   524   NtContinue  (1244320, 0, ...
 03954   524   NtContinue  (1244320, 0, ...
 03955   524   NtContinue  (1244320, 0, ...
 03956   524   NtContinue  (1244320, 0, ...
 03957   524   NtContinue  (1244320, 0, ...
 03958   524   NtContinue  (1244320, 0, ...
 03959   524   NtContinue  (1244320, 0, ...
 03960   524   NtContinue  (1244320, 0, ...
 03961   524   NtContinue  (1244320, 0, ...
 03962   524   NtContinue  (1244320, 0, ...
 03963   524   NtContinue  (1244320, 0, ...
 03964   524   NtContinue  (1244320, 0, ...
 03965   524   NtContinue  (1244320, 0, ...
 03966   524   NtContinue  (1244320, 0, ...
 03967   524   NtContinue  (1244320, 0, ...
 03968   524   NtContinue  (1244320, 0, ...
 03969   524   NtContinue  (1244320, 0, ...
 03970   524   NtContinue  (1244320, 0, ...
 03971   524   NtContinue  (1244320, 0, ...
 03972   524   NtContinue  (1244320, 0, ...
 03973   524   NtContinue  (1244320, 0, ...
 03974   524   NtContinue  (1244320, 0, ...
 03975   524   NtContinue  (1244320, 0, ...
 03976   524   NtContinue  (1244320, 0, ...
 03977   524   NtContinue  (1244320, 0, ...
 03978   524   NtContinue  (1244320, 0, ...
 03979   524   NtContinue  (1244320, 0, ...
 03980   524   NtContinue  (1244320, 0, ...
 03981   524   NtContinue  (1244320, 0, ...
 03982   524   NtContinue  (1244320, 0, ...
 03983   524   NtContinue  (1244320, 0, ...
 03984   524   NtContinue  (1244320, 0, ...
 03985   524   NtContinue  (1244320, 0, ...
 03986   524   NtContinue  (1244320, 0, ...
 03987   524   NtContinue  (1244320, 0, ...
 03988   524   NtContinue  (1244320, 0, ...
 03989   524   NtContinue  (1244320, 0, ...
 03990   524   NtContinue  (1244320, 0, ...
 03991   524   NtContinue  (1244320, 0, ...
 03992   524   NtContinue  (1244320, 0, ...
 03993   524   NtContinue  (1244320, 0, ...
 03994   524   NtContinue  (1244320, 0, ...
 03995   524   NtContinue  (1244320, 0, ...
 03996   524   NtContinue  (1244320, 0, ...
 03997   524   NtContinue  (1244320, 0, ...
 03998   524   NtContinue  (1244320, 0, ...
 03999   524   NtContinue  (1244320, 0, ...
 04000   524   NtContinue  (1244320, 0, ...
 04001   524   NtContinue  (1244320, 0, ...
 04002   524   NtContinue  (1244320, 0, ...
 04003   524   NtContinue  (1244320, 0, ...
 04004   524   NtContinue  (1244320, 0, ...
 04005   524   NtContinue  (1244320, 0, ...
 04006   524   NtContinue  (1244320, 0, ...
 04007   524   NtContinue  (1244320, 0, ...
 04008   524   NtContinue  (1244320, 0, ...
 04009   524   NtContinue  (1244320, 0, ...
 04010   524   NtContinue  (1244320, 0, ...
 04011   524   NtContinue  (1244320, 0, ...
 04012   524   NtContinue  (1244320, 0, ...
 04013   524   NtContinue  (1244320, 0, ...
 04014   524   NtContinue  (1244320, 0, ...
 04015   524   NtContinue  (1244320, 0, ...
 04016   524   NtContinue  (1244320, 0, ...
 04017   524   NtContinue  (1244320, 0, ...
 04018   524   NtContinue  (1244320, 0, ...
 04019   524   NtContinue  (1244320, 0, ...
 04020   524   NtContinue  (1244320, 0, ...
 04021   524   NtContinue  (1244320, 0, ...
 04022   524   NtContinue  (1244320, 0, ...
 04023   524   NtContinue  (1244320, 0, ...
 04024   524   NtContinue  (1244320, 0, ...
 04025   524   NtContinue  (1244320, 0, ...
 04026   524   NtContinue  (1244320, 0, ...
 04027   524   NtContinue  (1244320, 0, ...
 04028   524   NtContinue  (1244320, 0, ...
 04029   524   NtContinue  (1244320, 0, ...
 04030   524   NtContinue  (1244320, 0, ...
 04031   524   NtContinue  (1244320, 0, ...
 04032   524   NtContinue  (1244320, 0, ...
 04033   524   NtContinue  (1244320, 0, ...
 04034   524   NtContinue  (1244320, 0, ...
 04035   524   NtContinue  (1244320, 0, ...
 04036   524   NtContinue  (1244320, 0, ...
 04037   524   NtContinue  (1244320, 0, ...
 04038   524   NtContinue  (1244320, 0, ...
 04039   524   NtContinue  (1244320, 0, ...
 04040   524   NtContinue  (1244320, 0, ...
 04041   524   NtContinue  (1244320, 0, ...
 04042   524   NtContinue  (1244320, 0, ...
 04043   524   NtContinue  (1244320, 0, ...
 04044   524   NtContinue  (1244320, 0, ...
 04045   524   NtContinue  (1244320, 0, ...
 04046   524   NtContinue  (1244320, 0, ...
 04047   524   NtContinue  (1244320, 0, ...
 04048   524   NtContinue  (1244320, 0, ...
 04049   524   NtContinue  (1244320, 0, ...
 04050   524   NtContinue  (1244320, 0, ...
 04051   524   NtContinue  (1244320, 0, ...
 04052   524   NtContinue  (1244320, 0, ...
 04053   524   NtContinue  (1244320, 0, ...
 04054   524   NtContinue  (1244320, 0, ...
 04055   524   NtContinue  (1244320, 0, ...
 04056   524   NtContinue  (1244320, 0, ...
 04057   524   NtContinue  (1244320, 0, ...
 04058   524   NtContinue  (1244320, 0, ...
 04059   524   NtContinue  (1244320, 0, ...
 04060   524   NtContinue  (1244320, 0, ...
 04061   524   NtContinue  (1244320, 0, ...
 04062   524   NtContinue  (1244320, 0, ...
 04063   524   NtContinue  (1244320, 0, ...
 04064   524   NtContinue  (1244320, 0, ...
 04065   524   NtContinue  (1244320, 0, ...
 04066   524   NtContinue  (1244320, 0, ...
 04067   524   NtContinue  (1244320, 0, ...
 04068   524   NtContinue  (1244320, 0, ...
 04069   524   NtContinue  (1244320, 0, ...
 04070   524   NtContinue  (1244320, 0, ...
 04071   524   NtContinue  (1244320, 0, ...
 04072   524   NtContinue  (1244320, 0, ...
 04073   524   NtContinue  (1244320, 0, ...
 04074   524   NtContinue  (1244320, 0, ...
 04075   524   NtContinue  (1244320, 0, ...
 04076   524   NtContinue  (1244320, 0, ...
 04077   524   NtContinue  (1244320, 0, ...
 04078   524   NtContinue  (1244320, 0, ...
 04079   524   NtContinue  (1244320, 0, ...
 04080   524   NtContinue  (1244320, 0, ...
 04081   524   NtContinue  (1244320, 0, ...
 04082   524   NtContinue  (1244320, 0, ...
 04083   524   NtContinue  (1244320, 0, ...
 04084   524   NtContinue  (1244320, 0, ...
 04085   524   NtContinue  (1244320, 0, ...
 04086   524   NtContinue  (1244320, 0, ...
 04087   524   NtContinue  (1244320, 0, ...
 04088   524   NtContinue  (1244320, 0, ...
 04089   524   NtContinue  (1244320, 0, ...
 04090   524   NtContinue  (1244320, 0, ...
 04091   524   NtContinue  (1244320, 0, ...
 04092   524   NtContinue  (1244320, 0, ...
 04093   524   NtContinue  (1244320, 0, ...
 04094   524   NtContinue  (1244320, 0, ...
 04095   524   NtContinue  (1244320, 0, ...
 04096   524   NtContinue  (1244320, 0, ...
 04097   524   NtContinue  (1244320, 0, ...
 04098   524   NtContinue  (1244320, 0, ...
 04099   524   NtContinue  (1244320, 0, ...
 04100   524   NtContinue  (1244320, 0, ...
 04101   524   NtContinue  (1244320, 0, ...
 04102   524   NtContinue  (1244320, 0, ...
 04103   524   NtContinue  (1244320, 0, ...
 04104   524   NtContinue  (1244320, 0, ...
 04105   524   NtContinue  (1244320, 0, ...
 04106   524   NtContinue  (1244320, 0, ...
 04107   524   NtContinue  (1244320, 0, ...
 04108   524   NtContinue  (1244320, 0, ...
 04109   524   NtContinue  (1244320, 0, ...
 04110   524   NtContinue  (1244320, 0, ...
 04111   524   NtContinue  (1244320, 0, ...
 04112   524   NtContinue  (1244320, 0, ...
 04113   524   NtContinue  (1244320, 0, ...
 04114   524   NtContinue  (1244320, 0, ...
 04115   524   NtContinue  (1244320, 0, ...
 04116   524   NtContinue  (1244320, 0, ...
 04117   524   NtContinue  (1244320, 0, ...
 04118   524   NtContinue  (1244320, 0, ...
 04119   524   NtContinue  (1244320, 0, ...
 04120   524   NtContinue  (1244320, 0, ...
 04121   524   NtContinue  (1244320, 0, ...
 04122   524   NtContinue  (1244320, 0, ...
 04123   524   NtContinue  (1244320, 0, ...
 04124   524   NtContinue  (1244320, 0, ...
 04125   524   NtContinue  (1244320, 0, ...
 04126   524   NtContinue  (1244320, 0, ...
 04127   524   NtContinue  (1244320, 0, ...
 04128   524   NtContinue  (1244320, 0, ...
 04129   524   NtContinue  (1244320, 0, ...
 04130   524   NtContinue  (1244320, 0, ...
 04131   524   NtContinue  (1244320, 0, ...
 04132   524   NtContinue  (1244320, 0, ...
 04133   524   NtContinue  (1244320, 0, ...
 04134   524   NtContinue  (1244320, 0, ...
 04135   524   NtContinue  (1244320, 0, ...
 04136   524   NtContinue  (1244320, 0, ...
 04137   524   NtContinue  (1244320, 0, ...
 04138   524   NtContinue  (1244320, 0, ...
 04139   524   NtContinue  (1244320, 0, ...
 04140   524   NtContinue  (1244320, 0, ...
 04141   524   NtContinue  (1244320, 0, ...
 04142   524   NtContinue  (1244320, 0, ...
 04143   524   NtContinue  (1244320, 0, ...
 04144   524   NtContinue  (1244320, 0, ...
 04145   524   NtContinue  (1244320, 0, ...
 04146   524   NtContinue  (1244320, 0, ...
 04147   524   NtContinue  (1244320, 0, ...
 04148   524   NtContinue  (1244320, 0, ...
 04149   524   NtContinue  (1244320, 0, ...
 04150   524   NtContinue  (1244320, 0, ...
 04151   524   NtContinue  (1244320, 0, ...
 04152   524   NtContinue  (1244320, 0, ...
 04153   524   NtContinue  (1244320, 0, ...
 04154   524   NtContinue  (1244320, 0, ...
 04155   524   NtContinue  (1244320, 0, ...
 04156   524   NtContinue  (1244320, 0, ...
 04157   524   NtContinue  (1244320, 0, ...
 04158   524   NtContinue  (1244320, 0, ...
 04159   524   NtContinue  (1244320, 0, ...
 04160   524   NtContinue  (1244320, 0, ...
 04161   524   NtContinue  (1244320, 0, ...
 04162   524   NtContinue  (1244320, 0, ...
 04163   524   NtContinue  (1244320, 0, ...
 04164   524   NtContinue  (1244320, 0, ...
 04165   524   NtContinue  (1244320, 0, ...
 04166   524   NtContinue  (1244320, 0, ...
 04167   524   NtContinue  (1244320, 0, ...
 04168   524   NtContinue  (1244320, 0, ...
 04169   524   NtContinue  (1244320, 0, ...
 04170   524   NtContinue  (1244320, 0, ...
 04171   524   NtContinue  (1244320, 0, ...
 04172   524   NtContinue  (1244320, 0, ...
 04173   524   NtContinue  (1244320, 0, ...
 04174   524   NtContinue  (1244320, 0, ...
 04175   524   NtContinue  (1244320, 0, ...
 04176   524   NtContinue  (1244320, 0, ...
 04177   524   NtContinue  (1244320, 0, ...
 04178   524   NtContinue  (1244320, 0, ...
 04179   524   NtContinue  (1244320, 0, ...
 04180   524   NtContinue  (1244320, 0, ...
 04181   524   NtContinue  (1244320, 0, ...
 04182   524   NtContinue  (1244320, 0, ...
 04183   524   NtContinue  (1244320, 0, ...
 04184   524   NtContinue  (1244320, 0, ...
 04185   524   NtContinue  (1244320, 0, ...
 04186   524   NtContinue  (1244320, 0, ...
 04187   524   NtContinue  (1244320, 0, ...
 04188   524   NtContinue  (1244320, 0, ...
 04189   524   NtContinue  (1244320, 0, ...
 04190   524   NtContinue  (1244320, 0, ...
 04191   524   NtContinue  (1244320, 0, ...
 04192   524   NtContinue  (1244320, 0, ...
 04193   524   NtContinue  (1244320, 0, ...
 04194   524   NtContinue  (1244320, 0, ...
 04195   524   NtContinue  (1244320, 0, ...
 04196   524   NtContinue  (1244320, 0, ...
 04197   524   NtContinue  (1244320, 0, ...
 04198   524   NtContinue  (1244320, 0, ...
 04199   524   NtContinue  (1244320, 0, ...
 04200   524   NtContinue  (1244320, 0, ...
 04201   524   NtContinue  (1244320, 0, ...
 04202   524   NtContinue  (1244320, 0, ...
 04203   524   NtContinue  (1244320, 0, ...
 04204   524   NtContinue  (1244320, 0, ...
 04205   524   NtContinue  (1244320, 0, ...
 04206   524   NtContinue  (1244320, 0, ...
 04207   524   NtContinue  (1244320, 0, ...
 04208   524   NtContinue  (1244320, 0, ...
 04209   524   NtContinue  (1244320, 0, ...
 04210   524   NtContinue  (1244320, 0, ...
 04211   524   NtContinue  (1244320, 0, ...
 04212   524   NtContinue  (1244320, 0, ...
 04213   524   NtContinue  (1244320, 0, ...
 04214   524   NtContinue  (1244320, 0, ...
 04215   524   NtContinue  (1244320, 0, ...
 04216   524   NtContinue  (1244320, 0, ...
 04217   524   NtContinue  (1244320, 0, ...
 04218   524   NtContinue  (1244320, 0, ...
 04219   524   NtContinue  (1244320, 0, ...
 04220   524   NtContinue  (1244320, 0, ...
 04221   524   NtContinue  (1244320, 0, ...
 04222   524   NtContinue  (1244320, 0, ...
 04223   524   NtContinue  (1244320, 0, ...
 04224   524   NtContinue  (1244320, 0, ...
 04225   524   NtContinue  (1244320, 0, ...
 04226   524   NtContinue  (1244320, 0, ...
 04227   524   NtContinue  (1244320, 0, ...
 04228   524   NtContinue  (1244320, 0, ...
 04229   524   NtContinue  (1244320, 0, ...
 04230   524   NtContinue  (1244320, 0, ...
 04231   524   NtContinue  (1244320, 0, ...
 04232   524   NtContinue  (1244320, 0, ...
 04233   524   NtContinue  (1244320, 0, ...
 04234   524   NtContinue  (1244320, 0, ...
 04235   524   NtContinue  (1244320, 0, ...
 04236   524   NtContinue  (1244320, 0, ...
 04237   524   NtContinue  (1244320, 0, ...
 04238   524   NtContinue  (1244320, 0, ...
 04239   524   NtContinue  (1244320, 0, ...
 04240   524   NtContinue  (1244320, 0, ...
 04241   524   NtContinue  (1244320, 0, ...
 04242   524   NtContinue  (1244320, 0, ...
 04243   524   NtContinue  (1244320, 0, ...
 04244   524   NtContinue  (1244320, 0, ...
 04245   524   NtContinue  (1244320, 0, ...
 04246   524   NtContinue  (1244320, 0, ...
 04247   524   NtContinue  (1244320, 0, ...
 04248   524   NtContinue  (1244320, 0, ...
 04249   524   NtContinue  (1244320, 0, ...
 04250   524   NtContinue  (1244320, 0, ...
 04251   524   NtContinue  (1244320, 0, ...
 04252   524   NtContinue  (1244320, 0, ...
 04253   524   NtContinue  (1244320, 0, ...
 04254   524   NtContinue  (1244320, 0, ...
 04255   524   NtContinue  (1244320, 0, ...
 04256   524   NtContinue  (1244320, 0, ...
 04257   524   NtContinue  (1244320, 0, ...
 04258   524   NtContinue  (1244320, 0, ...
 04259   524   NtContinue  (1244320, 0, ...
 04260   524   NtContinue  (1244320, 0, ...
 04261   524   NtContinue  (1244320, 0, ...
 04262   524   NtContinue  (1244320, 0, ...
 04263   524   NtContinue  (1244320, 0, ...
 04264   524   NtContinue  (1244320, 0, ...
 04265   524   NtContinue  (1244320, 0, ...
 04266   524   NtContinue  (1244320, 0, ...
 04267   524   NtContinue  (1244320, 0, ...
 04268   524   NtContinue  (1244320, 0, ...
 04269   524   NtContinue  (1244320, 0, ...
 04270   524   NtContinue  (1244320, 0, ...
 04271   524   NtContinue  (1244320, 0, ...
 04272   524   NtContinue  (1244320, 0, ...
 04273   524   NtContinue  (1244320, 0, ...
 04274   524   NtContinue  (1244320, 0, ...
 04275   524   NtContinue  (1244320, 0, ...
 04276   524   NtContinue  (1244320, 0, ...
 04277   524   NtContinue  (1244320, 0, ...
 04278   524   NtContinue  (1244320, 0, ...
 04279   524   NtContinue  (1244320, 0, ...
 04280   524   NtContinue  (1244320, 0, ...
 04281   524   NtContinue  (1244320, 0, ...
 04282   524   NtContinue  (1244320, 0, ...
 04283   524   NtContinue  (1244320, 0, ...
 04284   524   NtContinue  (1244320, 0, ...
 04285   524   NtContinue  (1244320, 0, ...
 04286   524   NtContinue  (1244320, 0, ...
 04287   524   NtContinue  (1244320, 0, ...
 04288   524   NtContinue  (1244320, 0, ...
 04289   524   NtContinue  (1244320, 0, ...
 04290   524   NtContinue  (1244320, 0, ...
 04291   524   NtContinue  (1244320, 0, ...
 04292   524   NtContinue  (1244320, 0, ...
 04293   524   NtContinue  (1244320, 0, ...
 04294   524   NtContinue  (1244320, 0, ...
 04295   524   NtContinue  (1244320, 0, ...
 04296   524   NtContinue  (1244320, 0, ...
 04297   524   NtContinue  (1244320, 0, ...
 04298   524   NtContinue  (1244320, 0, ...
 04299   524   NtContinue  (1244320, 0, ...
 04300   524   NtContinue  (1244320, 0, ...
 04301   524   NtContinue  (1244320, 0, ...
 04302   524   NtContinue  (1244320, 0, ...
 04303   524   NtContinue  (1244320, 0, ...
 04304   524   NtContinue  (1244320, 0, ...
 04305   524   NtContinue  (1244320, 0, ...
 04306   524   NtContinue  (1244320, 0, ...
 04307   524   NtContinue  (1244320, 0, ...
 04308   524   NtContinue  (1244320, 0, ...
 04309   524   NtContinue  (1244320, 0, ...
 04310   524   NtContinue  (1244320, 0, ...
 04311   524   NtContinue  (1244320, 0, ...
 04312   524   NtContinue  (1244320, 0, ...
 04313   524   NtContinue  (1244320, 0, ...
 04314   524   NtContinue  (1244320, 0, ...
 04315   524   NtContinue  (1244320, 0, ...
 04316   524   NtContinue  (1244320, 0, ...
 04317   524   NtContinue  (1244320, 0, ...
 04318   524   NtContinue  (1244320, 0, ...
 04319   524   NtContinue  (1244320, 0, ...
 04320   524   NtContinue  (1244320, 0, ...
 04321   524   NtContinue  (1244320, 0, ...
 04322   524   NtContinue  (1244320, 0, ...
 04323   524   NtContinue  (1244320, 0, ...
 04324   524   NtContinue  (1244320, 0, ...
 04325   524   NtContinue  (1244320, 0, ...
 04326   524   NtContinue  (1244320, 0, ...
 04327   524   NtContinue  (1244320, 0, ...
 04328   524   NtContinue  (1244320, 0, ...
 04329   524   NtContinue  (1244320, 0, ...
 04330   524   NtContinue  (1244320, 0, ...
 04331   524   NtContinue  (1244320, 0, ...
 04332   524   NtContinue  (1244320, 0, ...
 04333   524   NtContinue  (1244320, 0, ...
 04334   524   NtContinue  (1244320, 0, ...
 04335   524   NtContinue  (1244320, 0, ...
 04336   524   NtContinue  (1244320, 0, ...
 04337   524   NtContinue  (1244320, 0, ...
 04338   524   NtContinue  (1244320, 0, ...
 04339   524   NtContinue  (1244320, 0, ...
 04340   524   NtContinue  (1244320, 0, ...
 04341   524   NtContinue  (1244320, 0, ...
 04342   524   NtContinue  (1244320, 0, ...
 04343   524   NtContinue  (1244320, 0, ...
 04344   524   NtContinue  (1244320, 0, ...
 04345   524   NtContinue  (1244320, 0, ...
 04346   524   NtContinue  (1244320, 0, ...
 04347   524   NtContinue  (1244320, 0, ...
 04348   524   NtContinue  (1244320, 0, ...
 04349   524   NtContinue  (1244320, 0, ...
 04350   524   NtContinue  (1244320, 0, ...
 04351   524   NtContinue  (1244320, 0, ...
 04352   524   NtContinue  (1244320, 0, ...
 04353   524   NtContinue  (1244320, 0, ...
 04354   524   NtContinue  (1244320, 0, ...
 04355   524   NtContinue  (1244320, 0, ...
 04356   524   NtContinue  (1244320, 0, ...
 04357   524   NtContinue  (1244320, 0, ...
 04358   524   NtContinue  (1244320, 0, ...
 04359   524   NtContinue  (1244320, 0, ...
 04360   524   NtContinue  (1244320, 0, ...
 04361   524   NtContinue  (1244320, 0, ...
 04362   524   NtContinue  (1244320, 0, ...
 04363   524   NtContinue  (1244320, 0, ...
 04364   524   NtContinue  (1244320, 0, ...
 04365   524   NtContinue  (1244320, 0, ...
 04366   524   NtContinue  (1244320, 0, ...
 04367   524   NtContinue  (1244320, 0, ...
 04368   524   NtContinue  (1244320, 0, ...
 04369   524   NtContinue  (1244320, 0, ...
 04370   524   NtContinue  (1244320, 0, ...
 04371   524   NtContinue  (1244320, 0, ...
 04372   524   NtContinue  (1244320, 0, ...
 04373   524   NtContinue  (1244320, 0, ...
 04374   524   NtContinue  (1244320, 0, ...
 04375   524   NtContinue  (1244320, 0, ...
 04376   524   NtContinue  (1244320, 0, ...
 04377   524   NtContinue  (1244320, 0, ...
 04378   524   NtContinue  (1244320, 0, ...
 04379   524   NtContinue  (1244320, 0, ...
 04380   524   NtContinue  (1244320, 0, ...
 04381   524   NtContinue  (1244320, 0, ...
 04382   524   NtContinue  (1244320, 0, ...
 04383   524   NtContinue  (1244320, 0, ...
 04384   524   NtContinue  (1244320, 0, ...
 04385   524   NtContinue  (1244320, 0, ...
 04386   524   NtContinue  (1244320, 0, ...
 04387   524   NtContinue  (1244320, 0, ...
 04388   524   NtContinue  (1244320, 0, ...
 04389   524   NtContinue  (1244320, 0, ...
 04390   524   NtContinue  (1244320, 0, ...
 04391   524   NtContinue  (1244320, 0, ...
 04392   524   NtContinue  (1244320, 0, ...
 04393   524   NtContinue  (1244320, 0, ...
 04394   524   NtContinue  (1244320, 0, ...
 04395   524   NtContinue  (1244320, 0, ...
 04396   524   NtContinue  (1244320, 0, ...
 04397   524   NtContinue  (1244320, 0, ...
 04398   524   NtContinue  (1244320, 0, ...
 04399   524   NtContinue  (1244320, 0, ...
 04400   524   NtContinue  (1244320, 0, ...
 04401   524   NtContinue  (1244320, 0, ...
 04402   524   NtContinue  (1244320, 0, ...
 04403   524   NtContinue  (1244320, 0, ...
 04404   524   NtContinue  (1244320, 0, ...
 04405   524   NtContinue  (1244320, 0, ...
 04406   524   NtContinue  (1244320, 0, ...
 04407   524   NtContinue  (1244320, 0, ...
 04408   524   NtContinue  (1244320, 0, ...
 04409   524   NtContinue  (1244320, 0, ...
 04410   524   NtContinue  (1244320, 0, ...
 04411   524   NtContinue  (1244320, 0, ...
 04412   524   NtContinue  (1244320, 0, ...
 04413   524   NtContinue  (1244320, 0, ...
 04414   524   NtContinue  (1244320, 0, ...
 04415   524   NtContinue  (1244320, 0, ...
 04416   524   NtContinue  (1244320, 0, ...
 04417   524   NtContinue  (1244320, 0, ...
 04418   524   NtContinue  (1244320, 0, ...
 04419   524   NtContinue  (1244320, 0, ...
 04420   524   NtContinue  (1244320, 0, ...
 04421   524   NtContinue  (1244320, 0, ...
 04422   524   NtContinue  (1244320, 0, ...
 04423   524   NtContinue  (1244320, 0, ...
 04424   524   NtContinue  (1244320, 0, ...
 04425   524   NtContinue  (1244320, 0, ...
 04426   524   NtContinue  (1244320, 0, ...
 04427   524   NtContinue  (1244320, 0, ...
 04428   524   NtContinue  (1244320, 0, ...
 04429   524   NtContinue  (1244320, 0, ...
 04430   524   NtContinue  (1244320, 0, ...
 04431   524   NtContinue  (1244320, 0, ...
 04432   524   NtContinue  (1244320, 0, ...
 04433   524   NtContinue  (1244320, 0, ...
 04434   524   NtContinue  (1244320, 0, ...
 04435   524   NtContinue  (1244320, 0, ...
 04436   524   NtContinue  (1244320, 0, ...
 04437   524   NtContinue  (1244320, 0, ...
 04438   524   NtContinue  (1244320, 0, ...
 04439   524   NtContinue  (1244320, 0, ...
 04440   524   NtContinue  (1244320, 0, ...
 04441   524   NtContinue  (1244320, 0, ...
 04442   524   NtContinue  (1244320, 0, ...
 04443   524   NtContinue  (1244320, 0, ...
 04444   524   NtContinue  (1244320, 0, ...
 04445   524   NtContinue  (1244320, 0, ...
 04446   524   NtContinue  (1244320, 0, ...
 04447   524   NtContinue  (1244320, 0, ...
 04448   524   NtContinue  (1244320, 0, ...
 04449   524   NtContinue  (1244320, 0, ...
 04450   524   NtContinue  (1244320, 0, ...
 04451   524   NtContinue  (1244320, 0, ...
 04452   524   NtContinue  (1244320, 0, ...
 04453   524   NtContinue  (1244320, 0, ...
 04454   524   NtContinue  (1244320, 0, ...
 04455   524   NtContinue  (1244320, 0, ...
 04456   524   NtContinue  (1244320, 0, ...
 04457   524   NtContinue  (1244320, 0, ...
 04458   524   NtContinue  (1244320, 0, ...
 04459   524   NtContinue  (1244320, 0, ...
 04460   524   NtContinue  (1244320, 0, ...
 04461   524   NtContinue  (1244320, 0, ...
 04462   524   NtContinue  (1244320, 0, ...
 04463   524   NtContinue  (1244320, 0, ...
 04464   524   NtContinue  (1244320, 0, ...
 04465   524   NtContinue  (1244320, 0, ...
 04466   524   NtContinue  (1244320, 0, ...
 04467   524   NtContinue  (1244320, 0, ...
 04468   524   NtContinue  (1244320, 0, ...
 04469   524   NtContinue  (1244320, 0, ...
 04470   524   NtContinue  (1244320, 0, ...
 04471   524   NtContinue  (1244320, 0, ...
 04472   524   NtContinue  (1244320, 0, ...
 04473   524   NtContinue  (1244320, 0, ...
 04474   524   NtContinue  (1244320, 0, ...
 04475   524   NtContinue  (1244320, 0, ...
 04476   524   NtContinue  (1244320, 0, ...
 04477   524   NtContinue  (1244320, 0, ...
 04478   524   NtContinue  (1244320, 0, ...
 04479   524   NtContinue  (1244320, 0, ...
 04480   524   NtContinue  (1244320, 0, ...
 04481   524   NtContinue  (1244320, 0, ...
 04482   524   NtContinue  (1244320, 0, ...
 04483   524   NtContinue  (1244320, 0, ...
 04484   524   NtContinue  (1244320, 0, ...
 04485   524   NtContinue  (1244320, 0, ...
 04486   524   NtContinue  (1244320, 0, ...
 04487   524   NtContinue  (1244320, 0, ...
 04488   524   NtContinue  (1244320, 0, ...
 04489   524   NtContinue  (1244320, 0, ...
 04490   524   NtContinue  (1244320, 0, ...
 04491   524   NtContinue  (1244320, 0, ...
 04492   524   NtContinue  (1244320, 0, ...
 04493   524   NtContinue  (1244320, 0, ...
 04494   524   NtContinue  (1244320, 0, ...
 04495   524   NtContinue  (1244320, 0, ...
 04496   524   NtContinue  (1244320, 0, ...
 04497   524   NtContinue  (1244320, 0, ...
 04498   524   NtContinue  (1244320, 0, ...
 04499   524   NtContinue  (1244320, 0, ...
 04500   524   NtContinue  (1244320, 0, ...
 04501   524   NtContinue  (1244320, 0, ...
 04502   524   NtContinue  (1244320, 0, ...
 04503   524   NtContinue  (1244320, 0, ...
 04504   524   NtContinue  (1244320, 0, ...
 04505   524   NtContinue  (1244320, 0, ...
 04506   524   NtContinue  (1244320, 0, ...
 04507   524   NtContinue  (1244320, 0, ...
 04508   524   NtContinue  (1244320, 0, ...
 04509   524   NtContinue  (1244320, 0, ...
 04510   524   NtContinue  (1244320, 0, ...
 04511   524   NtContinue  (1244320, 0, ...
 04512   524   NtContinue  (1244320, 0, ...
 04513   524   NtContinue  (1244320, 0, ...
 04514   524   NtContinue  (1244320, 0, ...
 04515   524   NtContinue  (1244320, 0, ...
 04516   524   NtContinue  (1244320, 0, ...
 04517   524   NtContinue  (1244320, 0, ...
 04518   524   NtContinue  (1244320, 0, ...
 04519   524   NtContinue  (1244320, 0, ...
 04520   524   NtContinue  (1244320, 0, ...
 04521   524   NtContinue  (1244320, 0, ...
 04522   524   NtContinue  (1244320, 0, ...
 04523   524   NtContinue  (1244320, 0, ...
 04524   524   NtContinue  (1244320, 0, ...
 04525   524   NtContinue  (1244320, 0, ...
 04526   524   NtContinue  (1244320, 0, ...
 04527   524   NtContinue  (1244320, 0, ...
 04528   524   NtContinue  (1244320, 0, ...
 04529   524   NtContinue  (1244320, 0, ...
 04530   524   NtContinue  (1244320, 0, ...
 04531   524   NtContinue  (1244320, 0, ...
 04532   524   NtContinue  (1244320, 0, ...
 04533   524   NtContinue  (1244320, 0, ...
 04534   524   NtContinue  (1244320, 0, ...
 04535   524   NtContinue  (1244320, 0, ...
 04536   524   NtContinue  (1244320, 0, ...
 04537   524   NtContinue  (1244320, 0, ...
 04538   524   NtContinue  (1244320, 0, ...
 04539   524   NtContinue  (1244320, 0, ...
 04540   524   NtContinue  (1244320, 0, ...
 04541   524   NtContinue  (1244320, 0, ...
 04542   524   NtContinue  (1244320, 0, ...
 04543   524   NtContinue  (1244320, 0, ...
 04544   524   NtContinue  (1244320, 0, ...
 04545   524   NtContinue  (1244320, 0, ...
 04546   524   NtContinue  (1244320, 0, ...
 04547   524   NtContinue  (1244320, 0, ...
 04548   524   NtContinue  (1244320, 0, ...
 04549   524   NtContinue  (1244320, 0, ...
 04550   524   NtContinue  (1244320, 0, ...
 04551   524   NtContinue  (1244320, 0, ...
 04552   524   NtContinue  (1244320, 0, ...
 04553   524   NtContinue  (1244320, 0, ...
 04554   524   NtContinue  (1244320, 0, ...
 04555   524   NtContinue  (1244320, 0, ...
 04556   524   NtContinue  (1244320, 0, ...
 04557   524   NtContinue  (1244320, 0, ...
 04558   524   NtContinue  (1244320, 0, ...
 04559   524   NtContinue  (1244320, 0, ...
 04560   524   NtContinue  (1244320, 0, ...
 04561   524   NtContinue  (1244320, 0, ...
 04562   524   NtContinue  (1244320, 0, ...
 04563   524   NtContinue  (1244320, 0, ...
 04564   524   NtContinue  (1244320, 0, ...
 04565   524   NtContinue  (1244320, 0, ...
 04566   524   NtContinue  (1244320, 0, ...
 04567   524   NtContinue  (1244320, 0, ...
 04568   524   NtContinue  (1244320, 0, ...
 04569   524   NtContinue  (1244320, 0, ...
 04570   524   NtContinue  (1244320, 0, ...
 04571   524   NtContinue  (1244320, 0, ...
 04572   524   NtContinue  (1244320, 0, ...
 04573   524   NtContinue  (1244320, 0, ...
 04574   524   NtContinue  (1244320, 0, ...
 04575   524   NtContinue  (1244320, 0, ...
 04576   524   NtContinue  (1244320, 0, ...
 04577   524   NtContinue  (1244320, 0, ...
 04578   524   NtContinue  (1244320, 0, ...
 04579   524   NtContinue  (1244320, 0, ...
 04580   524   NtContinue  (1244320, 0, ...
 04581   524   NtContinue  (1244320, 0, ...
 04582   524   NtContinue  (1244320, 0, ...
 04583   524   NtContinue  (1244320, 0, ...
 04584   524   NtContinue  (1244320, 0, ...
 04585   524   NtContinue  (1244320, 0, ...
 04586   524   NtContinue  (1244320, 0, ...
 04587   524   NtContinue  (1244320, 0, ...
 04588   524   NtContinue  (1244320, 0, ...
 04589   524   NtContinue  (1244320, 0, ...
 04590   524   NtContinue  (1244320, 0, ...
 04591   524   NtContinue  (1244320, 0, ...
 04592   524   NtContinue  (1244320, 0, ...
 04593   524   NtContinue  (1244320, 0, ...
 04594   524   NtContinue  (1244320, 0, ...
 04595   524   NtContinue  (1244320, 0, ...
 04596   524   NtContinue  (1244320, 0, ...
 04597   524   NtContinue  (1244320, 0, ...
 04598   524   NtContinue  (1244320, 0, ...
 04599   524   NtContinue  (1244320, 0, ...
 04600   524   NtContinue  (1244320, 0, ...
 04601   524   NtContinue  (1244320, 0, ...
 04602   524   NtContinue  (1244320, 0, ...
 04603   524   NtContinue  (1244320, 0, ...
 04604   524   NtContinue  (1244320, 0, ...
 04605   524   NtContinue  (1244320, 0, ...
 04606   524   NtContinue  (1244320, 0, ...
 04607   524   NtContinue  (1244320, 0, ...
 04608   524   NtContinue  (1244320, 0, ...
 04609   524   NtContinue  (1244320, 0, ...
 04610   524   NtContinue  (1244320, 0, ...
 04611   524   NtContinue  (1244320, 0, ...
 04612   524   NtContinue  (1244320, 0, ...
 04613   524   NtContinue  (1244320, 0, ...
 04614   524   NtContinue  (1244320, 0, ...
 04615   524   NtContinue  (1244320, 0, ...
 04616   524   NtContinue  (1244320, 0, ...
 04617   524   NtContinue  (1244320, 0, ...
 04618   524   NtContinue  (1244320, 0, ...
 04619   524   NtContinue  (1244320, 0, ...
 04620   524   NtContinue  (1244320, 0, ...
 04621   524   NtContinue  (1244320, 0, ...
 04622   524   NtContinue  (1244320, 0, ...
 04623   524   NtContinue  (1244320, 0, ...
 04624   524   NtContinue  (1244320, 0, ...
 04625   524   NtContinue  (1244320, 0, ...
 04626   524   NtContinue  (1244320, 0, ...
 04627   524   NtContinue  (1244320, 0, ...
 04628   524   NtContinue  (1244320, 0, ...
 04629   524   NtContinue  (1244320, 0, ...
 04630   524   NtContinue  (1244320, 0, ...
 04631   524   NtContinue  (1244320, 0, ...
 04632   524   NtContinue  (1244320, 0, ...
 04633   524   NtContinue  (1244320, 0, ...
 04634   524   NtContinue  (1244320, 0, ...
 04635   524   NtContinue  (1244320, 0, ...
 04636   524   NtContinue  (1244320, 0, ...
 04637   524   NtContinue  (1244320, 0, ...
 04638   524   NtContinue  (1244320, 0, ...
 04639   524   NtContinue  (1244320, 0, ...
 04640   524   NtContinue  (1244320, 0, ...
 04641   524   NtContinue  (1244320, 0, ...
 04642   524   NtContinue  (1244320, 0, ...
 04643   524   NtContinue  (1244320, 0, ...
 04644   524   NtContinue  (1244320, 0, ...
 04645   524   NtContinue  (1244320, 0, ...
 04646   524   NtContinue  (1244320, 0, ...
 04647   524   NtContinue  (1244320, 0, ...
 04648   524   NtContinue  (1244320, 0, ...
 04649   524   NtContinue  (1244320, 0, ...
 04650   524   NtContinue  (1244320, 0, ...
 04651   524   NtContinue  (1244320, 0, ...
 04652   524   NtContinue  (1244320, 0, ...
 04653   524   NtContinue  (1244320, 0, ...
 04654   524   NtContinue  (1244320, 0, ...
 04655   524   NtContinue  (1244320, 0, ...
 04656   524   NtContinue  (1244320, 0, ...
 04657   524   NtContinue  (1244320, 0, ...
 04658   524   NtContinue  (1244320, 0, ...
 04659   524   NtContinue  (1244320, 0, ...
 04660   524   NtContinue  (1244320, 0, ...
 04661   524   NtContinue  (1244320, 0, ...
 04662   524   NtContinue  (1244320, 0, ...
 04663   524   NtContinue  (1244320, 0, ...
 04664   524   NtContinue  (1244320, 0, ...
 04665   524   NtContinue  (1244320, 0, ...
 04666   524   NtContinue  (1244320, 0, ...
 04667   524   NtContinue  (1244320, 0, ...
 04668   524   NtContinue  (1244320, 0, ...
 04669   524   NtContinue  (1244320, 0, ...
 04670   524   NtContinue  (1244320, 0, ...
 04671   524   NtContinue  (1244320, 0, ...
 04672   524   NtContinue  (1244320, 0, ...
 04673   524   NtContinue  (1244320, 0, ...
 04674   524   NtContinue  (1244320, 0, ...
 04675   524   NtContinue  (1244320, 0, ...
 04676   524   NtContinue  (1244320, 0, ...
 04677   524   NtContinue  (1244320, 0, ...
 04678   524   NtContinue  (1244320, 0, ...
 04679   524   NtContinue  (1244320, 0, ...
 04680   524   NtContinue  (1244320, 0, ...
 04681   524   NtContinue  (1244320, 0, ...
 04682   524   NtContinue  (1244320, 0, ...
 04683   524   NtContinue  (1244320, 0, ...
 04684   524   NtContinue  (1244320, 0, ...
 04685   524   NtContinue  (1244320, 0, ...
 04686   524   NtContinue  (1244320, 0, ...
 04687   524   NtContinue  (1244320, 0, ...
 04688   524   NtContinue  (1244320, 0, ...
 04689   524   NtContinue  (1244320, 0, ...
 04690   524   NtContinue  (1244320, 0, ...
 04691   524   NtContinue  (1244320, 0, ...
 04692   524   NtContinue  (1244320, 0, ...
 04693   524   NtContinue  (1244320, 0, ...
 04694   524   NtContinue  (1244320, 0, ...
 04695   524   NtContinue  (1244320, 0, ...
 04696   524   NtContinue  (1244320, 0, ...
 04697   524   NtContinue  (1244320, 0, ...
 04698   524   NtContinue  (1244320, 0, ...
 04699   524   NtContinue  (1244320, 0, ...
 04700   524   NtContinue  (1244320, 0, ...
 04701   524   NtContinue  (1244320, 0, ...
 04702   524   NtContinue  (1244320, 0, ...
 04703   524   NtContinue  (1244320, 0, ...
 04704   524   NtContinue  (1244320, 0, ...
 04705   524   NtContinue  (1244320, 0, ...
 04706   524   NtContinue  (1244320, 0, ...
 04707   524   NtContinue  (1244320, 0, ...
 04708   524   NtContinue  (1244320, 0, ...
 04709   524   NtContinue  (1244320, 0, ...
 04710   524   NtContinue  (1244320, 0, ...
 04711   524   NtContinue  (1244320, 0, ...
 04712   524   NtContinue  (1244320, 0, ...
 04713   524   NtContinue  (1244320, 0, ...
 04714   524   NtContinue  (1244320, 0, ...
 04715   524   NtContinue  (1244320, 0, ...
 04716   524   NtContinue  (1244320, 0, ...
 04717   524   NtContinue  (1244320, 0, ...
 04718   524   NtContinue  (1244320, 0, ...
 04719   524   NtContinue  (1244320, 0, ...
 04720   524   NtContinue  (1244320, 0, ...
 04721   524   NtContinue  (1244320, 0, ...
 04722   524   NtContinue  (1244320, 0, ...
 04723   524   NtContinue  (1244320, 0, ...
 04724   524   NtContinue  (1244320, 0, ...
 04725   524   NtContinue  (1244320, 0, ...
 04726   524   NtContinue  (1244320, 0, ...
 04727   524   NtContinue  (1244320, 0, ...
 04728   524   NtContinue  (1244320, 0, ...
 04729   524   NtContinue  (1244316, 0, ...
 04730   524   NtContinue  (1244316, 0, ...
 04731   524   NtContinue  (1244316, 0, ...
 04732   524   NtContinue  (1244316, 0, ...
 04733   524   NtContinue  (1244316, 0, ...
 04734   524   NtContinue  (1244316, 0, ...
 04735   524   NtContinue  (1244316, 0, ...
 04736   524   NtContinue  (1244316, 0, ...
 04737   524   NtContinue  (1244316, 0, ...
 04738   524   NtContinue  (1244316, 0, ...
 04739   524   NtContinue  (1244316, 0, ...
 04740   524   NtContinue  (1244316, 0, ...
 04741   524   NtContinue  (1244316, 0, ...
 04742   524   NtContinue  (1244316, 0, ...
 04743   524   NtContinue  (1244316, 0, ...
 04744   524   NtContinue  (1244316, 0, ...
 04745   524   NtContinue  (1244316, 0, ...
 04746   524   NtContinue  (1244316, 0, ...
 04747   524   NtContinue  (1244316, 0, ...
 04748   524   NtContinue  (1244316, 0, ...
 04749   524   NtContinue  (1244316, 0, ...
 04750   524   NtContinue  (1244316, 0, ...
 04751   524   NtContinue  (1244316, 0, ...
 04752   524   NtContinue  (1244316, 0, ...
 04753   524   NtContinue  (1244316, 0, ...
 04754   524   NtContinue  (1244316, 0, ...
 04755   524   NtContinue  (1244316, 0, ...
 04756   524   NtContinue  (1244316, 0, ...
 04757   524   NtContinue  (1244316, 0, ...
 04758   524   NtContinue  (1244316, 0, ...
 04759   524   NtContinue  (1244316, 0, ...
 04760   524   NtContinue  (1244316, 0, ...
 04761   524   NtContinue  (1244320, 0, ...
 04762   524   NtContinue  (1244316, 0, ...
 04763   524   NtContinue  (1244316, 0, ...
 04764   524   NtContinue  (1244316, 0, ...
 04765   524   NtContinue  (1244316, 0, ...
 04766   524   NtContinue  (1244320, 0, ...
 04767   524   NtContinue  (1244316, 0, ...
 04768   524   NtContinue  (1244316, 0, ...
 04769   524   NtContinue  (1244316, 0, ...
 04770   524   NtContinue  (1244320, 0, ...
 04771   524   NtContinue  (1244316, 0, ...
 04772   524   NtContinue  (1244316, 0, ...
 04773   524   NtContinue  (1244320, 0, ...
 04774   524   NtContinue  (1244316, 0, ...
 04775   524   NtContinue  (1244316, 0, ...
 04776   524   NtContinue  (1244316, 0, ...
 04777   524   NtContinue  (1244316, 0, ...
 04778   524   NtContinue  (1244316, 0, ...
 04779   524   NtContinue  (1244316, 0, ...
 04780   524   NtContinue  (1244320, 0, ...
 04781   524   NtContinue  (1244316, 0, ...
 04782   524   NtContinue  (1244316, 0, ...
 04783   524   NtContinue  (1244316, 0, ...
 04784   524   NtContinue  (1244316, 0, ...
 04785   524   NtContinue  (1244316, 0, ...
 04786   524   NtContinue  (1244316, 0, ...
 04787   524   NtContinue  (1244320, 0, ...
 04788   524   NtContinue  (1244316, 0, ...
 04789   524   NtContinue  (1244316, 0, ...
 04790   524   NtContinue  (1244316, 0, ...
 04791   524   NtContinue  (1244316, 0, ...
 04792   524   NtContinue  (1244316, 0, ...
 04793   524   NtContinue  (1244316, 0, ...
 04794   524   NtContinue  (1244316, 0, ...
 04795   524   NtContinue  (1244316, 0, ...
 04796   524   NtContinue  (1244316, 0, ...
 04797   524   NtContinue  (1244316, 0, ...
 04798   524   NtContinue  (1244316, 0, ...
 04799   524   NtContinue  (1244316, 0, ...
 04800   524   NtContinue  (1244316, 0, ...
 04801   524   NtContinue  (1244316, 0, ...
 04802   524   NtContinue  (1244316, 0, ...
 04803   524   NtContinue  (1244316, 0, ...
 04804   524   NtContinue  (1244316, 0, ...
 04805   524   NtContinue  (1244316, 0, ...
 04806   524   NtContinue  (1244316, 0, ...
 04807   524   NtContinue  (1244316, 0, ...
 04808   524   NtContinue  (1244316, 0, ...
 04809   524   NtContinue  (1244316, 0, ...
 04810   524   NtContinue  (1244316, 0, ...
 04811   524   NtContinue  (1244316, 0, ...
 04812   524   NtContinue  (1244316, 0, ...
 04813   524   NtContinue  (1244316, 0, ...
 04814   524   NtContinue  (1244316, 0, ...
 04815   524   NtContinue  (1244316, 0, ...
 04816   524   NtContinue  (1244316, 0, ...
 04817   524   NtContinue  (1244316, 0, ...
 04818   524   NtContinue  (1244316, 0, ...
 04819   524   NtContinue  (1244316, 0, ...
 04820   524   NtContinue  (1244316, 0, ...
 04821   524   NtContinue  (1244316, 0, ...
 04822   524   NtContinue  (1244316, 0, ...
 04823   524   NtContinue  (1244316, 0, ...
 04824   524   NtContinue  (1244316, 0, ...
 04825   524   NtContinue  (1244316, 0, ...
 04826   524   NtContinue  (1244316, 0, ...
 04827   524   NtContinue  (1244316, 0, ...
 04828   524   NtContinue  (1244316, 0, ...
 04829   524   NtContinue  (1244316, 0, ...
 04830   524   NtContinue  (1244316, 0, ...
 04831   524   NtContinue  (1244316, 0, ...
 04832   524   NtContinue  (1244316, 0, ...
 04833   524   NtContinue  (1244316, 0, ...
 04834   524   NtContinue  (1244316, 0, ...
 04835   524   NtContinue  (1244320, 0, ...
 04836   524   NtContinue  (1244316, 0, ...
 04837   524   NtContinue  (1244320, 0, ...
 04838   524   NtContinue  (1244316, 0, ...
 04839   524   NtContinue  (1244316, 0, ...
 04840   524   NtContinue  (1244316, 0, ...
 04841   524   NtContinue  (1244316, 0, ...
 04842   524   NtContinue  (1244316, 0, ...
 04843   524   NtContinue  (1244316, 0, ...
 04844   524   NtContinue  (1244316, 0, ...
 04845   524   NtContinue  (1244316, 0, ...
 04846   524   NtContinue  (1244316, 0, ...
 04847   524   NtContinue  (1244316, 0, ...
 04848   524   NtContinue  (1244316, 0, ...
 04849   524   NtContinue  (1244316, 0, ...
 04850   524   NtContinue  (1244316, 0, ...
 04851   524   NtContinue  (1244316, 0, ...
 04852   524   NtContinue  (1244316, 0, ...
 04853   524   NtContinue  (1244316, 0, ...
 04854   524   NtContinue  (1244316, 0, ...
 04855   524   NtContinue  (1244316, 0, ...
 04856   524   NtContinue  (1244316, 0, ...
 04857   524   NtContinue  (1244316, 0, ...
 04858   524   NtContinue  (1244316, 0, ...
 04859   524   NtContinue  (1244316, 0, ...
 04860   524   NtContinue  (1244316, 0, ...
 04861   524   NtContinue  (1244320, 0, ...
 04862   524   NtContinue  (1244316, 0, ...
 04863   524   NtContinue  (1244316, 0, ...
 04864   524   NtContinue  (1244316, 0, ...
 04865   524   NtContinue  (1244316, 0, ...
 04866   524   NtContinue  (1244316, 0, ...
 04867   524   NtContinue  (1244316, 0, ...
 04868   524   NtContinue  (1244316, 0, ...
 04869   524   NtContinue  (1244316, 0, ...
 04870   524   NtContinue  (1244316, 0, ...
 04871   524   NtContinue  (1244316, 0, ...
 04872   524   NtContinue  (1244320, 0, ...
 04873   524   NtContinue  (1244316, 0, ...
 04874   524   NtContinue  (1244316, 0, ...
 04875   524   NtContinue  (1244320, 0, ...
 04876   524   NtContinue  (1244316, 0, ...
 04877   524   NtContinue  (1244316, 0, ...
 04878   524   NtContinue  (1244316, 0, ...
 04879   524   NtContinue  (1244316, 0, ...
 04880   524   NtContinue  (1244316, 0, ...
 04881   524   NtContinue  (1244316, 0, ...
 04882   524   NtContinue  (1244316, 0, ...
 04883   524   NtContinue  (1244316, 0, ...
 04884   524   NtContinue  (1244316, 0, ...
 04885   524   NtContinue  (1244316, 0, ...
 04886   524   NtContinue  (1244316, 0, ...
 04887   524   NtContinue  (1244316, 0, ...
 04888   524   NtContinue  (1244316, 0, ...
 04889   524   NtContinue  (1244316, 0, ...
 04890   524   NtContinue  (1244316, 0, ...
 04891   524   NtContinue  (1244316, 0, ...
 04892   524   NtContinue  (1244316, 0, ...
 04893   524   NtContinue  (1244316, 0, ...
 04894   524   NtContinue  (1244316, 0, ...
 04895   524   NtContinue  (1244316, 0, ...
 04896   524   NtContinue  (1244316, 0, ...
 04897   524   NtContinue  (1244316, 0, ...
 04898   524   NtContinue  (1244316, 0, ...
 04899   524   NtContinue  (1244316, 0, ...
 04900   524   NtContinue  (1244316, 0, ...
 04901   524   NtContinue  (1244316, 0, ...
 04902   524   NtContinue  (1244316, 0, ...
 04903   524   NtContinue  (1244320, 0, ...
 04904   524   NtContinue  (1244316, 0, ...
 04905   524   NtContinue  (1244316, 0, ...
 04906   524   NtContinue  (1244320, 0, ...
 04907   524   NtContinue  (1244316, 0, ...
 04908   524   NtContinue  (1244316, 0, ...
 04909   524   NtContinue  (1244316, 0, ...
 04910   524   NtContinue  (1244316, 0, ...
 04911   524   NtContinue  (1244316, 0, ...
 04912   524   NtContinue  (1244316, 0, ...
 04913   524   NtContinue  (1244316, 0, ...
 04914   524   NtContinue  (1244316, 0, ...
 04915   524   NtContinue  (1244316, 0, ...
 04916   524   NtContinue  (1244316, 0, ...
 04917   524   NtContinue  (1244316, 0, ...
 04918   524   NtContinue  (1244316, 0, ...
 04919   524   NtContinue  (1244316, 0, ...
 04920   524   NtContinue  (1244316, 0, ...
 04921   524   NtContinue  (1244316, 0, ...
 04922   524   NtContinue  (1244316, 0, ...
 04923   524   NtContinue  (1244316, 0, ...
 04924   524   NtContinue  (1244316, 0, ...
 04925   524   NtContinue  (1244316, 0, ...
 04926   524   NtContinue  (1244316, 0, ...
 04927   524   NtContinue  (1244316, 0, ...
 04928   524   NtContinue  (1244316, 0, ...
 04929   524   NtContinue  (1244316, 0, ...
 04930   524   NtContinue  (1244316, 0, ...
 04931   524   NtContinue  (1244316, 0, ...
 04932   524   NtContinue  (1244316, 0, ...
 04933   524   NtContinue  (1244316, 0, ...
 04934   524   NtContinue  (1244316, 0, ...
 04935   524   NtContinue  (1244316, 0, ...
 04936   524   NtContinue  (1244316, 0, ...
 04937   524   NtContinue  (1244316, 0, ...
 04938   524   NtContinue  (1244316, 0, ...
 04939   524   NtContinue  (1244316, 0, ...
 04940   524   NtContinue  (1244316, 0, ...
 04941   524   NtContinue  (1244316, 0, ...
 04942   524   NtContinue  (1244320, 0, ...
 04943   524   NtContinue  (1244316, 0, ...
 04944   524   NtContinue  (1244316, 0, ...
 04945   524   NtContinue  (1244304, 0, ...
 04946   524   NtContinue  (1244284, 0, ...
 04947   524   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04948   524   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   524   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04950   524   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04951   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04952   524   NtReleaseMutant  (16, ...
 04953   524   NtContinue  (-136150904, 0, ...
 04952   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04954   524   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04955   524   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04956   524   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04957   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04958   524   NtReleaseMutant  (16, ...
 04959   524   NtContinue  (-136150904, 0, ...
 04958   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04960   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04961   524   NtReleaseMutant  (16, ...
 04962   524   NtContinue  (-136150904, 0, ...
 04961   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04963   524   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04964   524   NtReleaseMutant  (16, ...
 04965   524   NtContinue  (-136150904, 0, ...
 04964   524   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED