Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 26 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 45 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 47 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 12 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   420   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   420   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   420   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   420   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   420   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   420   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   420   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   420   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   420   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   420   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   420   NtClose  (12, ... ) == 0x0
 00014   420   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   420   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   420   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   420   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   420   NtClose  (16, ... ) == 0x0
 00021   420   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   420   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   420   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   420   NtClose  (16, ... ) == 0x0
 00026   420   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   420   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   420   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   420   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   420   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 408, 420, 1482, 0} "h\363\26\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ... {28, 56, reply, 0, 408, 420, 1482, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 408, 420, 1482, 0} "h\363\26\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ) == 0x0
 00032   420   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   420   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   420   NtClose  (16, ... ) == 0x0
 00036   420   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   420   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   420   NtClose  (28, ... ) == 0x0
 00041   420   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   420   NtClose  (28, ... ) == 0x0
 00045   420   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   420   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   420   NtClose  (28, ... ) == 0x0
 00049   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   420   NtClose  (28, ... ) == 0x0
 00052   420   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   420   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 408, 420, 1485, 0} "p\324\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ... {28, 56, reply, 0, 408, 420, 1485, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 408, 420, 1485, 0} "p\324\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ) == 0x0
 00056   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   420   NtClose  (28, ... ) == 0x0
 00062   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   420   NtClose  (28, ... ) == 0x0
 00065   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   420   NtClose  (28, ... ) == 0x0
 00068   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   420   NtClose  (28, ... ) == 0x0
 00071   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   420   NtClose  (28, ... ) == 0x0
 00080   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   420   NtClose  (28, ... ) == 0x0
 00083   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   420   NtClose  (28, ... ) == 0x0
 00086   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   420   NtClose  (28, ... ) == 0x0
 00095   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   420   NtClose  (28, ... ) == 0x0
 00098   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   420   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   420   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   420   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   420   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   420   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   420   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   420   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   420   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   420   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   420   NtClose  (40, ... ) == 0x0
 00115   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   420   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   420   NtClose  (40, ... ) == 0x0
 00119   420   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   420   NtClose  (36, ... ) == 0x0
 00121   420   NtClose  (28, ... ) == 0x0
 00122   420   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   420   NtClose  (32, ... ) == 0x0
 00124   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   420   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   420   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   420   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   420   NtClose  (32, ... ) == 0x0
 00132   420   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   420   NtClose  (28, ... ) == 0x0
 00134   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   420   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   420   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   420   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   420   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   420   NtClose  (28, ... ) == 0x0
 00146   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   420   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   420   NtClose  (28, ... ) == 0x0
 00149   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   420   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   420   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   420   NtClose  (28, ... ) == 0x0
 00153   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   420   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   420   NtClose  (28, ... ) == 0x0
 00156   420   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   420   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   420   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   420   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 408, 420, 1495, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ... {28, 56, reply, 0, 408, 420, 1495, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 408, 420, 1495, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ) == 0x0
 00161   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   420   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   420   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   420   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   420   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   420   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   420   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   420   NtClose  (-2147482020, ... ) == 0x0
 00169   420   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   420   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   420   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   420   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   420   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   420   NtClose  (-2147482020, ... ) == 0x0
 00175   420   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   420   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   420   NtClose  (-2147482020, ... ) == 0x0
 00178   420   NtQueryDefaultLocale  (0, -131036660, ... ) == 0x0
 00179   420   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   420   NtUserCallNoParam  (24, ... ) == 0x0
 00181   420   NtGdiCreateCompatibleDC  (0, ...
 00182   420   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   420   NtGdiCreateCompatibleDC  ... ) == 0x120103c6
 00183   420   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   420   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   420   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0x13050404
 00186   420   NtGdiCreateSolidBrush  (0, 0, ...
 00187   420   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   420   NtGdiCreateSolidBrush  ... ) == 0xe10040a
 00188   420   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   420   NtGdiCreateCompatibleDC  (0, ... ) == 0x70010384
 00190   420   NtGdiSelectBitmap  (1879114628, 319095812, ... ) == 0x185000f
 00191   420   NtUserGetThreadDesktop  (420, 0, ... ) == 0x2c
 00192   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   420   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   420   NtClose  (52, ... ) == 0x0
 00195   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810cc017
 00197   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810cc01c
 00199   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810cc01e
 00201   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810c8002
 00203   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810cc018
 00205   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810cc01a
 00207   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810cc01d
 00209   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810cc026
 00211   420   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   420   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810cc019
 00213   420   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00214   420   NtAllocateVirtualMemory  (-1, 6057984, 0, 4096, 4096, 32, ... 6057984, 4096, ) == 0x0
 00213   420   NtUserRegisterClassExWOW  ... ) == 0x810cc020
 00215   420   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc022
 00216   420   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc023
 00217   420   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc024
 00218   420   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc025
 00219   420   NtCallbackReturn  (0, 0, 0, ...
 00220   420   NtGdiInit  (... ) == 0x1
 00221   420   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   420   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   420   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   420   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   420   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   420   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   420   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   420   NtClose  (52, ... ) == 0x0
 00230   420   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   420   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   420   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   420   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   420   NtClose  (52, ... ) == 0x0
 00236   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   420   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   420   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   420   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   420   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   420   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   420   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   420   NtClose  (52, ... ) == 0x0
 00246   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   420   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   420   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   420   NtClose  (52, ... ) == 0x0
 00250   420   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   420   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   420   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   420   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   420   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   420   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   420   NtClose  (56, ... ) == 0x0
 00258   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   420   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   420   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   420   NtClose  (56, ... ) == 0x0
 00263   420   NtQueryDefaultUILanguage  (1241756, ...
 00264   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   420   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   420   NtClose  (-2147482020, ... ) == 0x0
 00268   420   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   420   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   420   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   420   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   420   NtClose  (-2147482032, ... ) == 0x0
 00273   420   NtClose  (-2147482020, ... ) == 0x0
 00263   420   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   420   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   420   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   420   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   420   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   420   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   420   NtQueryDefaultUILanguage  (2013024600, ...
 00281   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   420   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   420   NtClose  (-2147482020, ... ) == 0x0
 00285   420   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   420   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   420   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   420   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   420   NtClose  (-2147482032, ... ) == 0x0
 00290   420   NtClose  (-2147482020, ... ) == 0x0
 00280   420   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   420   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   420   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   420   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   420   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   420   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 408, 420, 1498, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 408, 420, 1498, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 408, 420, 1498, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   420   NtClose  (56, ... ) == 0x0
 00297   420   NtClose  (60, ... ) == 0x0
 00298   420   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   420   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   420   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   420   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   420   NtClose  (56, ... ) == 0x0
 00314   420   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   420   NtClose  (64, ... ) == 0x0
 00316   420   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   420   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   420   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   420   NtClose  (64, ... ) == 0x0
 00321   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   420   NtClose  (56, ... ) == 0x0
 00323   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   420   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   420   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   420   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   420   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   420   NtQueryDefaultUILanguage  (1239368, ...
 00346   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   420   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   420   NtClose  (-2147482020, ... ) == 0x0
 00350   420   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   420   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   420   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   420   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   420   NtClose  (-2147482032, ... ) == 0x0
 00355   420   NtClose  (-2147482020, ... ) == 0x0
 00345   420   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   420   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   420   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   420   NtClose  (56, ... ) == 0x0
 00361   420   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   420   NtClose  (64, ... ) == 0x0
 00363   420   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   420   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   420   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   420   NtClose  (64, ... ) == 0x0
 00368   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   420   NtClose  (56, ... ) == 0x0
 00370   420   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   420   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   420   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   420   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   420   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   420   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   420   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\2405\37[\2319\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 408, 420, 1499, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2319\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 408, 420, 1499, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\2405\37[\2319\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 408, 420, 1499, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2319\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   420   NtClose  (56, ... ) == 0x0
 00378   420   NtClose  (64, ... ) == 0x0
 00379   420   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   420   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   420   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   420   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   420   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   420   NtUserGetDC  (0, ... ) == 0x1010050
 00385   420   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00386   420   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   420   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   420   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   420   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   420   NtClose  (64, ... ) == 0x0
 00391   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   420   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   420   NtClose  (64, ... ) == 0x0
 00395   420   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   420   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   420   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   420   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   420   NtClose  (56, ... ) == 0x0
 00400   420   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   420   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   420   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   420   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   420   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   420   NtClose  (68, ... ) == 0x0
 00407   420   NtClose  (56, ... ) == 0x0
 00408   420   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   420   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   420   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   420   NtClose  (56, ... ) == 0x0
 00413   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03b
 00415   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03d
 00416   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc03f
 00418   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc041
 00420   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc043
 00422   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc045
 00423   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc047
 00425   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc049
 00427   420   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04b
 00430   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04d
 00432   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04f
 00434   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc051
 00435   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc053
 00437   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc055
 00439   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc057
 00440   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc059
 00442   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05b
 00444   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05d
 00446   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05f
 00448   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc017
 00450   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc019
 00452   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc018
 00454   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01a
 00456   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   420   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ...
 00458   420   NtAllocateVirtualMemory  (-1, 6062080, 0, 4096, 4096, 32, ... 6062080, 4096, ) == 0x0
 00457   420   NtUserRegisterClassExWOW  ... ) == 0x810cc01c
 00459   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00460   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01e
 00461   420   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00462   420   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810cc01b
 00463   420   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00464   420   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810cc068
 00465   420   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00466   420   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc06a
 00467   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00468   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00469   420   NtClose  (56, ... ) == 0x0
 00470   420   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {408, 0}, ... 56, ) == 0x0
 00471   420   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00472   420   NtClose  (56, ... ) == 0x0
 00473   420   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00474   420   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00475   420   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00476   420   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00477   420   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00478   420   NtClose  (56, ... ) == 0x0
 00479   420   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00480   420   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00481   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00482   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00483   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03b
 00484   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03d
 00486   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03f
 00489   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc041
 00492   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc043
 00495   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc045
 00497   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc047
 00500   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   420   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   420   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810cc049
 00503   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04b
 00506   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04d
 00509   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04f
 00512   420   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   420   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810cc051
 00514   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc053
 00517   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc055
 00520   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc057
 00521   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc059
 00524   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05b
 00527   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05d
 00530   420   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   420   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   420   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05f
 00533   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   420   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   420   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   420   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   420   NtTestAlert  (... ) == 0x0
 00554   420   NtContinue  (1244464, 1, ...
 00555   420   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   420   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   420   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   420   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   420   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   420   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   420   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   420   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   420   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   420   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   420   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   420   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   420   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   420   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   420   NtClose  (56, ... ) == 0x0
 00572   420   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   420   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   420   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   420   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   420   NtClose  (56, ... ) == 0x0
 00580   420   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   420   NtClose  (68, ... ) == 0x0
 00582   420   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   420   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   420   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   420   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   420   NtClose  (68, ... ) == 0x0
 00587   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   420   NtReleaseMutant  (16, ...
 00589   420   NtContinue  (-131039096, 0, ...
 00588   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   420   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   420   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   420   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   420   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   420   NtUserCallNoParam  (29, ...
 00595   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   420   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   420   NtClose  (68, ... ) == 0x0
 00599   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   420   NtClose  (56, ... ) == 0x0
 00601   420   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   420   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   420   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   420   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   420   NtClose  (56, ... ) == 0x0
 00607   420   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   420   NtClose  (68, ... ) == 0x0
 00609   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00610   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00611   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   420   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   420   NtClose  (68, ... ) == 0x0
 00615   420   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   420   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   420   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   420   NtClose  (56, ... ) == 0x0
 00619   420   NtClose  (68, ... ) == 0x0
 00620   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   420   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   420   NtClose  (68, ... ) == 0x0
 00624   420   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   420   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   420   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   420   NtClose  (56, ... ) == 0x0
 00628   420   NtClose  (68, ... ) == 0x0
 00629   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   420   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   420   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   420   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   420   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   420   NtUserGetGUIThreadInfo  (420, 1244344, ... ) == 0x1
 00636   420   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   420   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1502, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 408, 420, 1502, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1502, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   420   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1503, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 408, 420, 1503, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1503, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   420   NtUserCallNoParam  (29, ...
 00640   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   420   NtUserCallNoParam  ... ) == 0x0
 00641   420   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   420   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x170a0382
 00643   420   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0x90a040b
 00644   420   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1504, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 408, 420, 1504, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 408, 420, 1504, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   420   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00647   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00648   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00649   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00650   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00651   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00652   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00653   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00654   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00655   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00656   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00657   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00658   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00659   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00660   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00661   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00662   420   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00663   420   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0xc1003ff
 00664   420   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00665   420   NtUserCallNoParam  (29, ...
 00666   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   420   NtUserCallNoParam  ... ) == 0x0
 00667   420   NtUserCallNoParam  (29, ...
 00668   420   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   420   NtUserCallNoParam  ... ) == 0x0
 00594   420   NtUserCallNoParam  ... ) == 0x1
 00669   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   420   NtReleaseMutant  (16, ...
 00671   420   NtContinue  (-131039096, 0, ...
 00670   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   420   NtReleaseMutant  (16, ...
 00674   420   NtContinue  (-131039096, 0, ...
 00673   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   420   NtReleaseMutant  (16, ...
 00677   420   NtContinue  (-131039096, 0, ...
 00676   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   420   NtReleaseMutant  (16, ...
 00680   420   NtContinue  (-131039096, 0, ...
 00679   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   420   NtReleaseMutant  (16, ...
 00683   420   NtContinue  (-131039096, 0, ...
 00682   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   420   NtReleaseMutant  (16, ...
 00686   420   NtContinue  (-131039096, 0, ...
 00685   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   420   NtReleaseMutant  (16, ...
 00689   420   NtContinue  (-131039096, 0, ...
 00688   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   420   NtReleaseMutant  (16, ...
 00692   420   NtContinue  (-131039096, 0, ...
 00691   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   420   NtReleaseMutant  (16, ...
 00695   420   NtContinue  (-131039096, 0, ...
 00694   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   420   NtReleaseMutant  (16, ...
 00698   420   NtContinue  (-131039096, 0, ...
 00697   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   420   NtReleaseMutant  (16, ...
 00701   420   NtContinue  (-131039096, 0, ...
 00700   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   420   NtReleaseMutant  (16, ...
 00704   420   NtContinue  (-131039096, 0, ...
 00703   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   420   NtReleaseMutant  (16, ...
 00707   420   NtContinue  (-131039096, 0, ...
 00706   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   420   NtReleaseMutant  (16, ...
 00710   420   NtContinue  (-131039096, 0, ...
 00709   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   420   NtReleaseMutant  (16, ...
 00713   420   NtContinue  (-131039096, 0, ...
 00712   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   420   NtReleaseMutant  (16, ...
 00716   420   NtContinue  (-131039096, 0, ...
 00715   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   420   NtReleaseMutant  (16, ...
 00719   420   NtContinue  (-131039096, 0, ...
 00718   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   420   NtReleaseMutant  (16, ...
 00722   420   NtContinue  (-131039096, 0, ...
 00721   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   420   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   420   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   420   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   420   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   420   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   420   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   420   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   420   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   420   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   420   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   420   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   420   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   420   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   420   NtClose  (88, ... ) == 0x0
 00741   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   420   NtClose  (88, ... ) == 0x0
 00746   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   420   NtClose  (88, ... ) == 0x0
 00751   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   420   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   420   NtClose  (88, ... ) == 0x0
 00757   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   420   NtClose  (88, ... ) == 0x0
 00762   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   420   NtClose  (88, ... ) == 0x0
 00767   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   420   NtClose  (88, ... ) == 0x0
 00772   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   420   NtClose  (88, ... ) == 0x0
 00777   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   420   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   420   NtClose  (88, ... ) == 0x0
 00783   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\230\1\0\0\244\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   420   NtClose  (88, ... ) == 0x0
 00788   420   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   420   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\230\1\0\0\244\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\230\1\0\0\244\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\230\1\0\0\244\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\230\1\0\0\244\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\230\1\0\0\244\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\230\1\0\0\244\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\230\1\0\0\244\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\230\1\0\0\244\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\230\1\0\0\244\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\230\1\0\0\244\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   420   NtClose  (88, ... ) == 0x0
 00793   420   NtClose  (84, ... ) == 0x0
 00794   420   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   420   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   420   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   420   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   420   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   420   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   420   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   420   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   420   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   420   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   420   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   420   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   420   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   420   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   420   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   420   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   420   NtClose  (96, ... ) == 0x0
 00817   420   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   420   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   420   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   420   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   420   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   420   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   420   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   420   NtClose  (96, ... ) == 0x0
 00831   420   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   420   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   420   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   420   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   420   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   420   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   420   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   420   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   420   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   420   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   420   NtClose  (96, ... ) == 0x0
 00846   420   NtClose  (92, ... ) == 0x0
 00847   420   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   420   NtClose  (72, ... ) == 0x0
 00849   420   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   420   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   420   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   420   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   420   NtClose  (72, ... ) == 0x0
 00854   420   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   420   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   420   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   420   NtAllocateVirtualMemory  (-1, 0, 0, 326, 4096, 64, ... 9502720, 4096, ) == 0x0
 00858   420   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00859   420   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00860   420   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00861   420   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00862   420   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00863   420   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00864   420   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00865   420   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00866   420   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00867   420   NtClose  (92, ... ) == 0x0
 00868   420   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00869   420   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00870   420   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00871   420   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00872   420   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00873   420   NtClose  (92, ... ) == 0x0
 00874   420   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00875   420   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00876   420   NtClose  (92, ... ) == 0x0
 00877   420   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00878   420   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00879   420   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00880   420   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00881   420   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00882   420   NtClose  (92, ... ) == 0x0
 00883   420   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00884   420   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00885   420   NtClose  (92, ... ) == 0x0
 00886   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00887   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00888   420   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00889   420   NtClose  (92, ... ) == 0x0
 00890   420   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00891   420   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00892   420   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00893   420   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00894   420   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00895   420   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00896   420   NtSetInformationFile  (-2147482808, -131038644, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   420   NtSetInformationFile  (-2147482808, -131038276, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00898   420   NtSetInformationFile  (-2147482808, -131038268, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00895   420   NtCreateKey  ... 100, 1, ) == 0x0
 00899   420   NtClose  (96, ... ) == 0x0
 00900   420   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00901   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00902   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00903   420   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00904   420   NtClose  (96, ... ) == 0x0
 00905   420   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00906   420   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00907   420   NtClose  (102, ... ) == 0x0
 00908   420   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00909   420   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00910   420   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00911   420   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00912   420   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00913   420   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00914   420   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00915   420   NtClose  (96, ... ) == 0x0
 00916   420   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00917   420   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00918   420   NtClose  (102, ... ) == 0x0
 00919   420   NtContinue  (1244328, 0, ...
 00920   420   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00921   420   NtContinue  (1244312, 0, ...
 00922   420   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00923   420   NtContinue  (1244312, 0, ...
 00924   420   NtContinue  (1244320, 0, ...
 00925   420   NtContinue  (1244308, 0, ...
 00926   420   NtContinue  (1244320, 0, ...
 00927   420   NtContinue  (1244328, 0, ...
 00928   420   NtContinue  (1244320, 0, ...
 00929   420   NtContinue  (1244320, 0, ...
 00930   420   NtContinue  (1244320, 0, ...
 00931   420   NtContinue  (1244320, 0, ...
 00932   420   NtContinue  (1244320, 0, ...
 00933   420   NtContinue  (1244320, 0, ...
 00934   420   NtContinue  (1244320, 0, ...
 00935   420   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00936   420   NtContinue  (1244328, 0, ...
 00937   420   NtContinue  (1244328, 0, ...
 00938   420   NtContinue  (1244328, 0, ...
 00939   420   NtContinue  (1244328, 0, ...
 00940   420   NtContinue  (1244328, 0, ...
 00941   420   NtContinue  (1244328, 0, ...
 00942   420   NtContinue  (1244328, 0, ...
 00943   420   NtContinue  (1244328, 0, ...
 00944   420   NtContinue  (1244328, 0, ...
 00945   420   NtContinue  (1244328, 0, ...
 00946   420   NtContinue  (1244328, 0, ...
 00947   420   NtContinue  (1244328, 0, ...
 00948   420   NtContinue  (1244328, 0, ...
 00949   420   NtContinue  (1244328, 0, ...
 00950   420   NtContinue  (1244328, 0, ...
 00951   420   NtContinue  (1244328, 0, ...
 00952   420   NtContinue  (1244328, 0, ...
 00953   420   NtContinue  (1244328, 0, ...
 00954   420   NtContinue  (1244328, 0, ...
 00955   420   NtContinue  (1244328, 0, ...
 00956   420   NtContinue  (1244328, 0, ...
 00957   420   NtContinue  (1244328, 0, ...
 00958   420   NtContinue  (1244328, 0, ...
 00959   420   NtContinue  (1244328, 0, ...
 00960   420   NtContinue  (1244328, 0, ...
 00961   420   NtContinue  (1244328, 0, ...
 00962   420   NtContinue  (1244328, 0, ...
 00963   420   NtContinue  (1244328, 0, ...
 00964   420   NtContinue  (1244328, 0, ...
 00965   420   NtContinue  (1244328, 0, ...
 00966   420   NtContinue  (1244328, 0, ...
 00967   420   NtContinue  (1244328, 0, ...
 00968   420   NtContinue  (1244328, 0, ...
 00969   420   NtContinue  (1244328, 0, ...
 00970   420   NtContinue  (1244328, 0, ...
 00971   420   NtContinue  (1244328, 0, ...
 00972   420   NtContinue  (1244328, 0, ...
 00973   420   NtContinue  (1244328, 0, ...
 00974   420   NtContinue  (1244328, 0, ...
 00975   420   NtContinue  (1244328, 0, ...
 00976   420   NtContinue  (1244328, 0, ...
 00977   420   NtContinue  (1244328, 0, ...
 00978   420   NtContinue  (1244328, 0, ...
 00979   420   NtContinue  (1244328, 0, ...
 00980   420   NtContinue  (1244328, 0, ...
 00981   420   NtContinue  (1244328, 0, ...
 00982   420   NtContinue  (1244328, 0, ...
 00983   420   NtContinue  (1244328, 0, ...
 00984   420   NtContinue  (1244328, 0, ...
 00985   420   NtContinue  (1244328, 0, ...
 00986   420   NtContinue  (1244328, 0, ...
 00987   420   NtContinue  (1244328, 0, ...
 00988   420   NtContinue  (1244328, 0, ...
 00989   420   NtContinue  (1244328, 0, ...
 00990   420   NtContinue  (1244328, 0, ...
 00991   420   NtContinue  (1244328, 0, ...
 00992   420   NtContinue  (1244328, 0, ...
 00993   420   NtContinue  (1244328, 0, ...
 00994   420   NtContinue  (1244328, 0, ...
 00995   420   NtContinue  (1244328, 0, ...
 00996   420   NtContinue  (1244328, 0, ...
 00997   420   NtContinue  (1244328, 0, ...
 00998   420   NtContinue  (1244328, 0, ...
 00999   420   NtContinue  (1244328, 0, ...
 01000   420   NtContinue  (1244328, 0, ...
 01001   420   NtContinue  (1244328, 0, ...
 01002   420   NtContinue  (1244328, 0, ...
 01003   420   NtContinue  (1244328, 0, ...
 01004   420   NtContinue  (1244328, 0, ...
 01005   420   NtContinue  (1244328, 0, ...
 01006   420   NtContinue  (1244328, 0, ...
 01007   420   NtContinue  (1244328, 0, ...
 01008   420   NtContinue  (1244328, 0, ...
 01009   420   NtContinue  (1244328, 0, ...
 01010   420   NtContinue  (1244328, 0, ...
 01011   420   NtContinue  (1244328, 0, ...
 01012   420   NtContinue  (1244328, 0, ...
 01013   420   NtContinue  (1244328, 0, ...
 01014   420   NtContinue  (1244328, 0, ...
 01015   420   NtContinue  (1244328, 0, ...
 01016   420   NtContinue  (1244328, 0, ...
 01017   420   NtContinue  (1244328, 0, ...
 01018   420   NtContinue  (1244328, 0, ...
 01019   420   NtContinue  (1244328, 0, ...
 01020   420   NtContinue  (1244328, 0, ...
 01021   420   NtContinue  (1244328, 0, ...
 01022   420   NtContinue  (1244328, 0, ...
 01023   420   NtContinue  (1244328, 0, ...
 01024   420   NtContinue  (1244328, 0, ...
 01025   420   NtContinue  (1244328, 0, ...
 01026   420   NtContinue  (1244328, 0, ...
 01027   420   NtContinue  (1244328, 0, ...
 01028   420   NtContinue  (1244328, 0, ...
 01029   420   NtContinue  (1244328, 0, ...
 01030   420   NtContinue  (1244328, 0, ...
 01031   420   NtContinue  (1244328, 0, ...
 01032   420   NtContinue  (1244328, 0, ...
 01033   420   NtContinue  (1244328, 0, ...
 01034   420   NtContinue  (1244328, 0, ...
 01035   420   NtContinue  (1244328, 0, ...
 01036   420   NtContinue  (1244328, 0, ...
 01037   420   NtContinue  (1244328, 0, ...
 01038   420   NtContinue  (1244328, 0, ...
 01039   420   NtContinue  (1244328, 0, ...
 01040   420   NtContinue  (1244328, 0, ...
 01041   420   NtContinue  (1244328, 0, ...
 01042   420   NtContinue  (1244328, 0, ...
 01043   420   NtContinue  (1244328, 0, ...
 01044   420   NtContinue  (1244328, 0, ...
 01045   420   NtContinue  (1244328, 0, ...
 01046   420   NtContinue  (1244328, 0, ...
 01047   420   NtContinue  (1244328, 0, ...
 01048   420   NtContinue  (1244328, 0, ...
 01049   420   NtContinue  (1244328, 0, ...
 01050   420   NtContinue  (1244328, 0, ...
 01051   420   NtContinue  (1244328, 0, ...
 01052   420   NtContinue  (1244328, 0, ...
 01053   420   NtContinue  (1244328, 0, ...
 01054   420   NtContinue  (1244328, 0, ...
 01055   420   NtContinue  (1244328, 0, ...
 01056   420   NtContinue  (1244328, 0, ...
 01057   420   NtContinue  (1244328, 0, ...
 01058   420   NtContinue  (1244328, 0, ...
 01059   420   NtContinue  (1244328, 0, ...
 01060   420   NtContinue  (1244328, 0, ...
 01061   420   NtContinue  (1244328, 0, ...
 01062   420   NtContinue  (1244328, 0, ...
 01063   420   NtContinue  (1244328, 0, ...
 01064   420   NtContinue  (1244328, 0, ...
 01065   420   NtContinue  (1244328, 0, ...
 01066   420   NtContinue  (1244328, 0, ...
 01067   420   NtContinue  (1244328, 0, ...
 01068   420   NtContinue  (1244328, 0, ...
 01069   420   NtContinue  (1244328, 0, ...
 01070   420   NtContinue  (1244328, 0, ...
 01071   420   NtContinue  (1244328, 0, ...
 01072   420   NtContinue  (1244328, 0, ...
 01073   420   NtContinue  (1244328, 0, ...
 01074   420   NtContinue  (1244328, 0, ...
 01075   420   NtContinue  (1244328, 0, ...
 01076   420   NtContinue  (1244328, 0, ...
 01077   420   NtContinue  (1244328, 0, ...
 01078   420   NtContinue  (1244328, 0, ...
 01079   420   NtContinue  (1244328, 0, ...
 01080   420   NtContinue  (1244328, 0, ...
 01081   420   NtContinue  (1244328, 0, ...
 01082   420   NtContinue  (1244328, 0, ...
 01083   420   NtContinue  (1244328, 0, ...
 01084   420   NtContinue  (1244328, 0, ...
 01085   420   NtContinue  (1244328, 0, ...
 01086   420   NtContinue  (1244328, 0, ...
 01087   420   NtContinue  (1244328, 0, ...
 01088   420   NtContinue  (1244328, 0, ...
 01089   420   NtContinue  (1244328, 0, ...
 01090   420   NtContinue  (1244328, 0, ...
 01091   420   NtContinue  (1244328, 0, ...
 01092   420   NtContinue  (1244328, 0, ...
 01093   420   NtContinue  (1244328, 0, ...
 01094   420   NtContinue  (1244328, 0, ...
 01095   420   NtContinue  (1244328, 0, ...
 01096   420   NtContinue  (1244328, 0, ...
 01097   420   NtContinue  (1244328, 0, ...
 01098   420   NtContinue  (1244328, 0, ...
 01099   420   NtContinue  (1244328, 0, ...
 01100   420   NtContinue  (1244328, 0, ...
 01101   420   NtContinue  (1244328, 0, ...
 01102   420   NtContinue  (1244328, 0, ...
 01103   420   NtContinue  (1244328, 0, ...
 01104   420   NtContinue  (1244328, 0, ...
 01105   420   NtContinue  (1244328, 0, ...
 01106   420   NtContinue  (1244328, 0, ...
 01107   420   NtContinue  (1244328, 0, ...
 01108   420   NtContinue  (1244328, 0, ...
 01109   420   NtContinue  (1244328, 0, ...
 01110   420   NtContinue  (1244328, 0, ...
 01111   420   NtContinue  (1244328, 0, ...
 01112   420   NtContinue  (1244328, 0, ...
 01113   420   NtContinue  (1244328, 0, ...
 01114   420   NtContinue  (1244328, 0, ...
 01115   420   NtContinue  (1244328, 0, ...
 01116   420   NtContinue  (1244328, 0, ...
 01117   420   NtContinue  (1244328, 0, ...
 01118   420   NtContinue  (1244328, 0, ...
 01119   420   NtContinue  (1244328, 0, ...
 01120   420   NtContinue  (1244328, 0, ...
 01121   420   NtContinue  (1244328, 0, ...
 01122   420   NtContinue  (1244328, 0, ...
 01123   420   NtContinue  (1244328, 0, ...
 01124   420   NtContinue  (1244328, 0, ...
 01125   420   NtContinue  (1244328, 0, ...
 01126   420   NtContinue  (1244328, 0, ...
 01127   420   NtContinue  (1244328, 0, ...
 01128   420   NtContinue  (1244328, 0, ...
 01129   420   NtContinue  (1244328, 0, ...
 01130   420   NtContinue  (1244328, 0, ...
 01131   420   NtContinue  (1244328, 0, ...
 01132   420   NtContinue  (1244328, 0, ...
 01133   420   NtContinue  (1244328, 0, ...
 01134   420   NtContinue  (1244328, 0, ...
 01135   420   NtContinue  (1244328, 0, ...
 01136   420   NtContinue  (1244328, 0, ...
 01137   420   NtContinue  (1244328, 0, ...
 01138   420   NtContinue  (1244328, 0, ...
 01139   420   NtContinue  (1244328, 0, ...
 01140   420   NtContinue  (1244328, 0, ...
 01141   420   NtContinue  (1244328, 0, ...
 01142   420   NtContinue  (1244328, 0, ...
 01143   420   NtContinue  (1244328, 0, ...
 01144   420   NtContinue  (1244328, 0, ...
 01145   420   NtContinue  (1244328, 0, ...
 01146   420   NtContinue  (1244328, 0, ...
 01147   420   NtContinue  (1244328, 0, ...
 01148   420   NtContinue  (1244328, 0, ...
 01149   420   NtContinue  (1244328, 0, ...
 01150   420   NtContinue  (1244328, 0, ...
 01151   420   NtContinue  (1244328, 0, ...
 01152   420   NtContinue  (1244328, 0, ...
 01153   420   NtContinue  (1244328, 0, ...
 01154   420   NtContinue  (1244328, 0, ...
 01155   420   NtContinue  (1244328, 0, ...
 01156   420   NtContinue  (1244328, 0, ...
 01157   420   NtContinue  (1244328, 0, ...
 01158   420   NtContinue  (1244328, 0, ...
 01159   420   NtContinue  (1244328, 0, ...
 01160   420   NtContinue  (1244328, 0, ...
 01161   420   NtContinue  (1244328, 0, ...
 01162   420   NtContinue  (1244328, 0, ...
 01163   420   NtContinue  (1244328, 0, ...
 01164   420   NtContinue  (1244328, 0, ...
 01165   420   NtContinue  (1244328, 0, ...
 01166   420   NtContinue  (1244328, 0, ...
 01167   420   NtContinue  (1244328, 0, ...
 01168   420   NtContinue  (1244328, 0, ...
 01169   420   NtContinue  (1244328, 0, ...
 01170   420   NtContinue  (1244328, 0, ...
 01171   420   NtContinue  (1244328, 0, ...
 01172   420   NtContinue  (1244328, 0, ...
 01173   420   NtContinue  (1244328, 0, ...
 01174   420   NtContinue  (1244328, 0, ...
 01175   420   NtContinue  (1244328, 0, ...
 01176   420   NtContinue  (1244328, 0, ...
 01177   420   NtContinue  (1244328, 0, ...
 01178   420   NtContinue  (1244328, 0, ...
 01179   420   NtContinue  (1244328, 0, ...
 01180   420   NtContinue  (1244328, 0, ...
 01181   420   NtContinue  (1244328, 0, ...
 01182   420   NtContinue  (1244328, 0, ...
 01183   420   NtContinue  (1244328, 0, ...
 01184   420   NtContinue  (1244328, 0, ...
 01185   420   NtContinue  (1244328, 0, ...
 01186   420   NtContinue  (1244328, 0, ...
 01187   420   NtContinue  (1244328, 0, ...
 01188   420   NtContinue  (1244328, 0, ...
 01189   420   NtContinue  (1244328, 0, ...
 01190   420   NtContinue  (1244328, 0, ...
 01191   420   NtContinue  (1244328, 0, ...
 01192   420   NtContinue  (1244328, 0, ...
 01193   420   NtContinue  (1244328, 0, ...
 01194   420   NtContinue  (1244328, 0, ...
 01195   420   NtContinue  (1244328, 0, ...
 01196   420   NtContinue  (1244328, 0, ...
 01197   420   NtContinue  (1244328, 0, ...
 01198   420   NtContinue  (1244328, 0, ...
 01199   420   NtContinue  (1244328, 0, ...
 01200   420   NtContinue  (1244328, 0, ...
 01201   420   NtContinue  (1244328, 0, ...
 01202   420   NtContinue  (1244328, 0, ...
 01203   420   NtContinue  (1244328, 0, ...
 01204   420   NtContinue  (1244328, 0, ...
 01205   420   NtContinue  (1244328, 0, ...
 01206   420   NtContinue  (1244328, 0, ...
 01207   420   NtContinue  (1244328, 0, ...
 01208   420   NtContinue  (1244328, 0, ...
 01209   420   NtContinue  (1244328, 0, ...
 01210   420   NtContinue  (1244328, 0, ...
 01211   420   NtContinue  (1244328, 0, ...
 01212   420   NtContinue  (1244328, 0, ...
 01213   420   NtContinue  (1244328, 0, ...
 01214   420   NtContinue  (1244328, 0, ...
 01215   420   NtContinue  (1244328, 0, ...
 01216   420   NtContinue  (1244328, 0, ...
 01217   420   NtContinue  (1244328, 0, ...
 01218   420   NtContinue  (1244328, 0, ...
 01219   420   NtContinue  (1244328, 0, ...
 01220   420   NtContinue  (1244328, 0, ...
 01221   420   NtContinue  (1244328, 0, ...
 01222   420   NtContinue  (1244328, 0, ...
 01223   420   NtContinue  (1244328, 0, ...
 01224   420   NtContinue  (1244328, 0, ...
 01225   420   NtContinue  (1244328, 0, ...
 01226   420   NtContinue  (1244328, 0, ...
 01227   420   NtContinue  (1244328, 0, ...
 01228   420   NtContinue  (1244328, 0, ...
 01229   420   NtContinue  (1244328, 0, ...
 01230   420   NtContinue  (1244328, 0, ...
 01231   420   NtContinue  (1244328, 0, ...
 01232   420   NtContinue  (1244328, 0, ...
 01233   420   NtContinue  (1244328, 0, ...
 01234   420   NtContinue  (1244328, 0, ...
 01235   420   NtContinue  (1244328, 0, ...
 01236   420   NtContinue  (1244328, 0, ...
 01237   420   NtContinue  (1244328, 0, ...
 01238   420   NtContinue  (1244328, 0, ...
 01239   420   NtContinue  (1244328, 0, ...
 01240   420   NtContinue  (1244328, 0, ...
 01241   420   NtContinue  (1244328, 0, ...
 01242   420   NtContinue  (1244328, 0, ...
 01243   420   NtContinue  (1244328, 0, ...
 01244   420   NtContinue  (1244328, 0, ...
 01245   420   NtContinue  (1244328, 0, ...
 01246   420   NtContinue  (1244328, 0, ...
 01247   420   NtContinue  (1244328, 0, ...
 01248   420   NtContinue  (1244328, 0, ...
 01249   420   NtContinue  (1244328, 0, ...
 01250   420   NtContinue  (1244328, 0, ...
 01251   420   NtContinue  (1244328, 0, ...
 01252   420   NtContinue  (1244328, 0, ...
 01253   420   NtContinue  (1244328, 0, ...
 01254   420   NtContinue  (1244328, 0, ...
 01255   420   NtContinue  (1244328, 0, ...
 01256   420   NtContinue  (1244328, 0, ...
 01257   420   NtContinue  (1244328, 0, ...
 01258   420   NtContinue  (1244328, 0, ...
 01259   420   NtContinue  (1244328, 0, ...
 01260   420   NtContinue  (1244328, 0, ...
 01261   420   NtContinue  (1244328, 0, ...
 01262   420   NtContinue  (1244328, 0, ...
 01263   420   NtContinue  (1244328, 0, ...
 01264   420   NtContinue  (1244328, 0, ...
 01265   420   NtContinue  (1244328, 0, ...
 01266   420   NtContinue  (1244328, 0, ...
 01267   420   NtContinue  (1244328, 0, ...
 01268   420   NtContinue  (1244328, 0, ...
 01269   420   NtContinue  (1244328, 0, ...
 01270   420   NtContinue  (1244328, 0, ...
 01271   420   NtContinue  (1244328, 0, ...
 01272   420   NtContinue  (1244328, 0, ...
 01273   420   NtContinue  (1244328, 0, ...
 01274   420   NtContinue  (1244328, 0, ...
 01275   420   NtContinue  (1244328, 0, ...
 01276   420   NtContinue  (1244328, 0, ...
 01277   420   NtContinue  (1244328, 0, ...
 01278   420   NtContinue  (1244328, 0, ...
 01279   420   NtContinue  (1244328, 0, ...
 01280   420   NtContinue  (1244328, 0, ...
 01281   420   NtContinue  (1244328, 0, ...
 01282   420   NtContinue  (1244328, 0, ...
 01283   420   NtContinue  (1244328, 0, ...
 01284   420   NtContinue  (1244328, 0, ...
 01285   420   NtContinue  (1244328, 0, ...
 01286   420   NtContinue  (1244328, 0, ...
 01287   420   NtContinue  (1244328, 0, ...
 01288   420   NtContinue  (1244328, 0, ...
 01289   420   NtContinue  (1244328, 0, ...
 01290   420   NtContinue  (1244328, 0, ...
 01291   420   NtContinue  (1244328, 0, ...
 01292   420   NtContinue  (1244328, 0, ...
 01293   420   NtContinue  (1244328, 0, ...
 01294   420   NtContinue  (1244328, 0, ...
 01295   420   NtContinue  (1244328, 0, ...
 01296   420   NtContinue  (1244328, 0, ...
 01297   420   NtContinue  (1244328, 0, ...
 01298   420   NtContinue  (1244328, 0, ...
 01299   420   NtContinue  (1244328, 0, ...
 01300   420   NtContinue  (1244328, 0, ...
 01301   420   NtContinue  (1244328, 0, ...
 01302   420   NtContinue  (1244328, 0, ...
 01303   420   NtContinue  (1244328, 0, ...
 01304   420   NtContinue  (1244328, 0, ...
 01305   420   NtContinue  (1244328, 0, ...
 01306   420   NtContinue  (1244328, 0, ...
 01307   420   NtContinue  (1244328, 0, ...
 01308   420   NtContinue  (1244328, 0, ...
 01309   420   NtContinue  (1244328, 0, ...
 01310   420   NtContinue  (1244328, 0, ...
 01311   420   NtContinue  (1244328, 0, ...
 01312   420   NtContinue  (1244328, 0, ...
 01313   420   NtContinue  (1244328, 0, ...
 01314   420   NtContinue  (1244328, 0, ...
 01315   420   NtContinue  (1244328, 0, ...
 01316   420   NtContinue  (1244328, 0, ...
 01317   420   NtContinue  (1244328, 0, ...
 01318   420   NtContinue  (1244328, 0, ...
 01319   420   NtContinue  (1244328, 0, ...
 01320   420   NtContinue  (1244328, 0, ...
 01321   420   NtContinue  (1244328, 0, ...
 01322   420   NtContinue  (1244328, 0, ...
 01323   420   NtContinue  (1244328, 0, ...
 01324   420   NtContinue  (1244328, 0, ...
 01325   420   NtContinue  (1244328, 0, ...
 01326   420   NtContinue  (1244328, 0, ...
 01327   420   NtContinue  (1244328, 0, ...
 01328   420   NtContinue  (1244328, 0, ...
 01329   420   NtContinue  (1244328, 0, ...
 01330   420   NtContinue  (1244328, 0, ...
 01331   420   NtContinue  (1244328, 0, ...
 01332   420   NtContinue  (1244328, 0, ...
 01333   420   NtContinue  (1244328, 0, ...
 01334   420   NtContinue  (1244328, 0, ...
 01335   420   NtContinue  (1244328, 0, ...
 01336   420   NtContinue  (1244328, 0, ...
 01337   420   NtContinue  (1244328, 0, ...
 01338   420   NtContinue  (1244328, 0, ...
 01339   420   NtContinue  (1244328, 0, ...
 01340   420   NtContinue  (1244328, 0, ...
 01341   420   NtContinue  (1244328, 0, ...
 01342   420   NtContinue  (1244328, 0, ...
 01343   420   NtContinue  (1244328, 0, ...
 01344   420   NtContinue  (1244328, 0, ...
 01345   420   NtContinue  (1244328, 0, ...
 01346   420   NtContinue  (1244328, 0, ...
 01347   420   NtContinue  (1244328, 0, ...
 01348   420   NtContinue  (1244328, 0, ...
 01349   420   NtContinue  (1244328, 0, ...
 01350   420   NtContinue  (1244328, 0, ...
 01351   420   NtContinue  (1244328, 0, ...
 01352   420   NtContinue  (1244328, 0, ...
 01353   420   NtContinue  (1244328, 0, ...
 01354   420   NtContinue  (1244328, 0, ...
 01355   420   NtContinue  (1244328, 0, ...
 01356   420   NtContinue  (1244328, 0, ...
 01357   420   NtContinue  (1244328, 0, ...
 01358   420   NtContinue  (1244328, 0, ...
 01359   420   NtContinue  (1244328, 0, ...
 01360   420   NtContinue  (1244328, 0, ...
 01361   420   NtContinue  (1244328, 0, ...
 01362   420   NtContinue  (1244328, 0, ...
 01363   420   NtContinue  (1244328, 0, ...
 01364   420   NtContinue  (1244328, 0, ...
 01365   420   NtContinue  (1244328, 0, ...
 01366   420   NtContinue  (1244328, 0, ...
 01367   420   NtContinue  (1244328, 0, ...
 01368   420   NtContinue  (1244328, 0, ...
 01369   420   NtContinue  (1244328, 0, ...
 01370   420   NtContinue  (1244328, 0, ...
 01371   420   NtContinue  (1244328, 0, ...
 01372   420   NtContinue  (1244328, 0, ...
 01373   420   NtContinue  (1244328, 0, ...
 01374   420   NtContinue  (1244328, 0, ...
 01375   420   NtContinue  (1244328, 0, ...
 01376   420   NtContinue  (1244328, 0, ...
 01377   420   NtContinue  (1244328, 0, ...
 01378   420   NtContinue  (1244328, 0, ...
 01379   420   NtContinue  (1244328, 0, ...
 01380   420   NtContinue  (1244328, 0, ...
 01381   420   NtContinue  (1244328, 0, ...
 01382   420   NtContinue  (1244328, 0, ...
 01383   420   NtContinue  (1244328, 0, ...
 01384   420   NtContinue  (1244328, 0, ...
 01385   420   NtContinue  (1244328, 0, ...
 01386   420   NtContinue  (1244328, 0, ...
 01387   420   NtContinue  (1244328, 0, ...
 01388   420   NtContinue  (1244328, 0, ...
 01389   420   NtContinue  (1244328, 0, ...
 01390   420   NtContinue  (1244328, 0, ...
 01391   420   NtContinue  (1244328, 0, ...
 01392   420   NtContinue  (1244328, 0, ...
 01393   420   NtContinue  (1244328, 0, ...
 01394   420   NtContinue  (1244328, 0, ...
 01395   420   NtContinue  (1244328, 0, ...
 01396   420   NtContinue  (1244328, 0, ...
 01397   420   NtContinue  (1244328, 0, ...
 01398   420   NtContinue  (1244328, 0, ...
 01399   420   NtContinue  (1244328, 0, ...
 01400   420   NtContinue  (1244328, 0, ...
 01401   420   NtContinue  (1244328, 0, ...
 01402   420   NtContinue  (1244328, 0, ...
 01403   420   NtContinue  (1244328, 0, ...
 01404   420   NtContinue  (1244328, 0, ...
 01405   420   NtContinue  (1244328, 0, ...
 01406   420   NtContinue  (1244328, 0, ...
 01407   420   NtContinue  (1244328, 0, ...
 01408   420   NtContinue  (1244328, 0, ...
 01409   420   NtContinue  (1244328, 0, ...
 01410   420   NtContinue  (1244328, 0, ...
 01411   420   NtContinue  (1244328, 0, ...
 01412   420   NtContinue  (1244328, 0, ...
 01413   420   NtContinue  (1244328, 0, ...
 01414   420   NtContinue  (1244328, 0, ...
 01415   420   NtContinue  (1244328, 0, ...
 01416   420   NtContinue  (1244328, 0, ...
 01417   420   NtContinue  (1244328, 0, ...
 01418   420   NtContinue  (1244328, 0, ...
 01419   420   NtContinue  (1244328, 0, ...
 01420   420   NtContinue  (1244328, 0, ...
 01421   420   NtContinue  (1244328, 0, ...
 01422   420   NtContinue  (1244328, 0, ...
 01423   420   NtContinue  (1244328, 0, ...
 01424   420   NtContinue  (1244328, 0, ...
 01425   420   NtContinue  (1244328, 0, ...
 01426   420   NtContinue  (1244328, 0, ...
 01427   420   NtContinue  (1244328, 0, ...
 01428   420   NtContinue  (1244328, 0, ...
 01429   420   NtContinue  (1244328, 0, ...
 01430   420   NtContinue  (1244328, 0, ...
 01431   420   NtContinue  (1244328, 0, ...
 01432   420   NtContinue  (1244328, 0, ...
 01433   420   NtContinue  (1244328, 0, ...
 01434   420   NtContinue  (1244328, 0, ...
 01435   420   NtContinue  (1244328, 0, ...
 01436   420   NtContinue  (1244328, 0, ...
 01437   420   NtContinue  (1244328, 0, ...
 01438   420   NtContinue  (1244328, 0, ...
 01439   420   NtContinue  (1244328, 0, ...
 01440   420   NtContinue  (1244328, 0, ...
 01441   420   NtContinue  (1244328, 0, ...
 01442   420   NtContinue  (1244328, 0, ...
 01443   420   NtContinue  (1244328, 0, ...
 01444   420   NtContinue  (1244328, 0, ...
 01445   420   NtContinue  (1244328, 0, ...
 01446   420   NtContinue  (1244328, 0, ...
 01447   420   NtContinue  (1244328, 0, ...
 01448   420   NtContinue  (1244328, 0, ...
 01449   420   NtContinue  (1244328, 0, ...
 01450   420   NtContinue  (1244328, 0, ...
 01451   420   NtContinue  (1244328, 0, ...
 01452   420   NtContinue  (1244328, 0, ...
 01453   420   NtContinue  (1244328, 0, ...
 01454   420   NtContinue  (1244328, 0, ...
 01455   420   NtContinue  (1244328, 0, ...
 01456   420   NtContinue  (1244328, 0, ...
 01457   420   NtContinue  (1244328, 0, ...
 01458   420   NtContinue  (1244328, 0, ...
 01459   420   NtContinue  (1244328, 0, ...
 01460   420   NtContinue  (1244328, 0, ...
 01461   420   NtContinue  (1244328, 0, ...
 01462   420   NtContinue  (1244328, 0, ...
 01463   420   NtContinue  (1244328, 0, ...
 01464   420   NtContinue  (1244328, 0, ...
 01465   420   NtContinue  (1244328, 0, ...
 01466   420   NtContinue  (1244328, 0, ...
 01467   420   NtContinue  (1244328, 0, ...
 01468   420   NtContinue  (1244328, 0, ...
 01469   420   NtContinue  (1244328, 0, ...
 01470   420   NtContinue  (1244328, 0, ...
 01471   420   NtContinue  (1244328, 0, ...
 01472   420   NtContinue  (1244328, 0, ...
 01473   420   NtContinue  (1244328, 0, ...
 01474   420   NtContinue  (1244328, 0, ...
 01475   420   NtContinue  (1244328, 0, ...
 01476   420   NtContinue  (1244328, 0, ...
 01477   420   NtContinue  (1244328, 0, ...
 01478   420   NtContinue  (1244328, 0, ...
 01479   420   NtContinue  (1244328, 0, ...
 01480   420   NtContinue  (1244328, 0, ...
 01481   420   NtContinue  (1244328, 0, ...
 01482   420   NtContinue  (1244328, 0, ...
 01483   420   NtContinue  (1244328, 0, ...
 01484   420   NtContinue  (1244328, 0, ...
 01485   420   NtContinue  (1244328, 0, ...
 01486   420   NtContinue  (1244328, 0, ...
 01487   420   NtContinue  (1244328, 0, ...
 01488   420   NtContinue  (1244328, 0, ...
 01489   420   NtContinue  (1244328, 0, ...
 01490   420   NtContinue  (1244328, 0, ...
 01491   420   NtContinue  (1244328, 0, ...
 01492   420   NtContinue  (1244328, 0, ...
 01493   420   NtContinue  (1244328, 0, ...
 01494   420   NtContinue  (1244328, 0, ...
 01495   420   NtContinue  (1244328, 0, ...
 01496   420   NtContinue  (1244328, 0, ...
 01497   420   NtContinue  (1244328, 0, ...
 01498   420   NtContinue  (1244328, 0, ...
 01499   420   NtContinue  (1244328, 0, ...
 01500   420   NtContinue  (1244328, 0, ...
 01501   420   NtContinue  (1244328, 0, ...
 01502   420   NtContinue  (1244328, 0, ...
 01503   420   NtContinue  (1244328, 0, ...
 01504   420   NtContinue  (1244328, 0, ...
 01505   420   NtContinue  (1244328, 0, ...
 01506   420   NtContinue  (1244328, 0, ...
 01507   420   NtContinue  (1244328, 0, ...
 01508   420   NtContinue  (1244328, 0, ...
 01509   420   NtContinue  (1244328, 0, ...
 01510   420   NtContinue  (1244328, 0, ...
 01511   420   NtContinue  (1244328, 0, ...
 01512   420   NtContinue  (1244328, 0, ...
 01513   420   NtContinue  (1244328, 0, ...
 01514   420   NtContinue  (1244328, 0, ...
 01515   420   NtContinue  (1244328, 0, ...
 01516   420   NtContinue  (1244328, 0, ...
 01517   420   NtContinue  (1244328, 0, ...
 01518   420   NtContinue  (1244328, 0, ...
 01519   420   NtContinue  (1244328, 0, ...
 01520   420   NtContinue  (1244328, 0, ...
 01521   420   NtContinue  (1244328, 0, ...
 01522   420   NtContinue  (1244328, 0, ...
 01523   420   NtContinue  (1244328, 0, ...
 01524   420   NtContinue  (1244328, 0, ...
 01525   420   NtContinue  (1244328, 0, ...
 01526   420   NtContinue  (1244328, 0, ...
 01527   420   NtContinue  (1244328, 0, ...
 01528   420   NtContinue  (1244328, 0, ...
 01529   420   NtContinue  (1244328, 0, ...
 01530   420   NtContinue  (1244328, 0, ...
 01531   420   NtContinue  (1244328, 0, ...
 01532   420   NtContinue  (1244328, 0, ...
 01533   420   NtContinue  (1244328, 0, ...
 01534   420   NtContinue  (1244328, 0, ...
 01535   420   NtContinue  (1244328, 0, ...
 01536   420   NtContinue  (1244328, 0, ...
 01537   420   NtContinue  (1244328, 0, ...
 01538   420   NtContinue  (1244328, 0, ...
 01539   420   NtContinue  (1244328, 0, ...
 01540   420   NtContinue  (1244328, 0, ...
 01541   420   NtContinue  (1244328, 0, ...
 01542   420   NtContinue  (1244328, 0, ...
 01543   420   NtContinue  (1244328, 0, ...
 01544   420   NtContinue  (1244328, 0, ...
 01545   420   NtContinue  (1244328, 0, ...
 01546   420   NtContinue  (1244328, 0, ...
 01547   420   NtContinue  (1244328, 0, ...
 01548   420   NtContinue  (1244328, 0, ...
 01549   420   NtContinue  (1244328, 0, ...
 01550   420   NtContinue  (1244328, 0, ...
 01551   420   NtContinue  (1244328, 0, ...
 01552   420   NtContinue  (1244328, 0, ...
 01553   420   NtContinue  (1244328, 0, ...
 01554   420   NtContinue  (1244328, 0, ...
 01555   420   NtContinue  (1244328, 0, ...
 01556   420   NtContinue  (1244328, 0, ...
 01557   420   NtContinue  (1244328, 0, ...
 01558   420   NtContinue  (1244328, 0, ...
 01559   420   NtContinue  (1244328, 0, ...
 01560   420   NtContinue  (1244328, 0, ...
 01561   420   NtContinue  (1244328, 0, ...
 01562   420   NtContinue  (1244328, 0, ...
 01563   420   NtContinue  (1244328, 0, ...
 01564   420   NtContinue  (1244328, 0, ...
 01565   420   NtContinue  (1244328, 0, ...
 01566   420   NtContinue  (1244328, 0, ...
 01567   420   NtContinue  (1244328, 0, ...
 01568   420   NtContinue  (1244328, 0, ...
 01569   420   NtContinue  (1244328, 0, ...
 01570   420   NtContinue  (1244328, 0, ...
 01571   420   NtContinue  (1244328, 0, ...
 01572   420   NtContinue  (1244328, 0, ...
 01573   420   NtContinue  (1244328, 0, ...
 01574   420   NtContinue  (1244328, 0, ...
 01575   420   NtContinue  (1244328, 0, ...
 01576   420   NtContinue  (1244328, 0, ...
 01577   420   NtContinue  (1244328, 0, ...
 01578   420   NtContinue  (1244328, 0, ...
 01579   420   NtContinue  (1244328, 0, ...
 01580   420   NtContinue  (1244328, 0, ...
 01581   420   NtContinue  (1244328, 0, ...
 01582   420   NtContinue  (1244328, 0, ...
 01583   420   NtContinue  (1244328, 0, ...
 01584   420   NtContinue  (1244328, 0, ...
 01585   420   NtContinue  (1244328, 0, ...
 01586   420   NtContinue  (1244328, 0, ...
 01587   420   NtContinue  (1244328, 0, ...
 01588   420   NtContinue  (1244328, 0, ...
 01589   420   NtContinue  (1244328, 0, ...
 01590   420   NtContinue  (1244328, 0, ...
 01591   420   NtContinue  (1244328, 0, ...
 01592   420   NtContinue  (1244328, 0, ...
 01593   420   NtContinue  (1244328, 0, ...
 01594   420   NtContinue  (1244328, 0, ...
 01595   420   NtContinue  (1244328, 0, ...
 01596   420   NtContinue  (1244328, 0, ...
 01597   420   NtContinue  (1244328, 0, ...
 01598   420   NtContinue  (1244328, 0, ...
 01599   420   NtContinue  (1244328, 0, ...
 01600   420   NtContinue  (1244328, 0, ...
 01601   420   NtContinue  (1244328, 0, ...
 01602   420   NtContinue  (1244328, 0, ...
 01603   420   NtContinue  (1244328, 0, ...
 01604   420   NtContinue  (1244328, 0, ...
 01605   420   NtContinue  (1244328, 0, ...
 01606   420   NtContinue  (1244328, 0, ...
 01607   420   NtContinue  (1244328, 0, ...
 01608   420   NtContinue  (1244328, 0, ...
 01609   420   NtContinue  (1244328, 0, ...
 01610   420   NtContinue  (1244328, 0, ...
 01611   420   NtContinue  (1244328, 0, ...
 01612   420   NtContinue  (1244328, 0, ...
 01613   420   NtContinue  (1244328, 0, ...
 01614   420   NtContinue  (1244328, 0, ...
 01615   420   NtContinue  (1244328, 0, ...
 01616   420   NtContinue  (1244328, 0, ...
 01617   420   NtContinue  (1244328, 0, ...
 01618   420   NtContinue  (1244328, 0, ...
 01619   420   NtContinue  (1244328, 0, ...
 01620   420   NtContinue  (1244328, 0, ...
 01621   420   NtContinue  (1244328, 0, ...
 01622   420   NtContinue  (1244328, 0, ...
 01623   420   NtContinue  (1244328, 0, ...
 01624   420   NtContinue  (1244328, 0, ...
 01625   420   NtContinue  (1244328, 0, ...
 01626   420   NtContinue  (1244328, 0, ...
 01627   420   NtContinue  (1244328, 0, ...
 01628   420   NtContinue  (1244328, 0, ...
 01629   420   NtContinue  (1244328, 0, ...
 01630   420   NtContinue  (1244328, 0, ...
 01631   420   NtContinue  (1244328, 0, ...
 01632   420   NtContinue  (1244328, 0, ...
 01633   420   NtContinue  (1244328, 0, ...
 01634   420   NtContinue  (1244328, 0, ...
 01635   420   NtContinue  (1244328, 0, ...
 01636   420   NtContinue  (1244328, 0, ...
 01637   420   NtContinue  (1244328, 0, ...
 01638   420   NtContinue  (1244328, 0, ...
 01639   420   NtContinue  (1244328, 0, ...
 01640   420   NtContinue  (1244328, 0, ...
 01641   420   NtContinue  (1244328, 0, ...
 01642   420   NtContinue  (1244328, 0, ...
 01643   420   NtContinue  (1244328, 0, ...
 01644   420   NtContinue  (1244328, 0, ...
 01645   420   NtContinue  (1244328, 0, ...
 01646   420   NtContinue  (1244328, 0, ...
 01647   420   NtContinue  (1244328, 0, ...
 01648   420   NtContinue  (1244328, 0, ...
 01649   420   NtContinue  (1244328, 0, ...
 01650   420   NtContinue  (1244328, 0, ...
 01651   420   NtContinue  (1244328, 0, ...
 01652   420   NtContinue  (1244328, 0, ...
 01653   420   NtContinue  (1244328, 0, ...
 01654   420   NtContinue  (1244328, 0, ...
 01655   420   NtContinue  (1244328, 0, ...
 01656   420   NtContinue  (1244328, 0, ...
 01657   420   NtContinue  (1244328, 0, ...
 01658   420   NtContinue  (1244328, 0, ...
 01659   420   NtContinue  (1244328, 0, ...
 01660   420   NtContinue  (1244328, 0, ...
 01661   420   NtContinue  (1244328, 0, ...
 01662   420   NtContinue  (1244328, 0, ...
 01663   420   NtContinue  (1244328, 0, ...
 01664   420   NtContinue  (1244328, 0, ...
 01665   420   NtContinue  (1244328, 0, ...
 01666   420   NtContinue  (1244328, 0, ...
 01667   420   NtContinue  (1244328, 0, ...
 01668   420   NtContinue  (1244328, 0, ...
 01669   420   NtContinue  (1244328, 0, ...
 01670   420   NtContinue  (1244328, 0, ...
 01671   420   NtContinue  (1244328, 0, ...
 01672   420   NtContinue  (1244328, 0, ...
 01673   420   NtContinue  (1244328, 0, ...
 01674   420   NtContinue  (1244328, 0, ...
 01675   420   NtContinue  (1244328, 0, ...
 01676   420   NtContinue  (1244328, 0, ...
 01677   420   NtContinue  (1244328, 0, ...
 01678   420   NtContinue  (1244328, 0, ...
 01679   420   NtContinue  (1244328, 0, ...
 01680   420   NtContinue  (1244328, 0, ...
 01681   420   NtContinue  (1244328, 0, ...
 01682   420   NtContinue  (1244328, 0, ...
 01683   420   NtContinue  (1244328, 0, ...
 01684   420   NtContinue  (1244328, 0, ...
 01685   420   NtContinue  (1244328, 0, ...
 01686   420   NtContinue  (1244328, 0, ...
 01687   420   NtContinue  (1244328, 0, ...
 01688   420   NtContinue  (1244328, 0, ...
 01689   420   NtContinue  (1244328, 0, ...
 01690   420   NtContinue  (1244328, 0, ...
 01691   420   NtContinue  (1244328, 0, ...
 01692   420   NtContinue  (1244328, 0, ...
 01693   420   NtContinue  (1244328, 0, ...
 01694   420   NtContinue  (1244328, 0, ...
 01695   420   NtContinue  (1244328, 0, ...
 01696   420   NtContinue  (1244328, 0, ...
 01697   420   NtContinue  (1244328, 0, ...
 01698   420   NtContinue  (1244328, 0, ...
 01699   420   NtContinue  (1244328, 0, ...
 01700   420   NtContinue  (1244328, 0, ...
 01701   420   NtContinue  (1244328, 0, ...
 01702   420   NtContinue  (1244328, 0, ...
 01703   420   NtContinue  (1244328, 0, ...
 01704   420   NtContinue  (1244328, 0, ...
 01705   420   NtContinue  (1244328, 0, ...
 01706   420   NtContinue  (1244328, 0, ...
 01707   420   NtContinue  (1244328, 0, ...
 01708   420   NtContinue  (1244328, 0, ...
 01709   420   NtContinue  (1244328, 0, ...
 01710   420   NtContinue  (1244328, 0, ...
 01711   420   NtContinue  (1244328, 0, ...
 01712   420   NtContinue  (1244328, 0, ...
 01713   420   NtContinue  (1244328, 0, ...
 01714   420   NtContinue  (1244328, 0, ...
 01715   420   NtContinue  (1244328, 0, ...
 01716   420   NtContinue  (1244328, 0, ...
 01717   420   NtContinue  (1244328, 0, ...
 01718   420   NtContinue  (1244328, 0, ...
 01719   420   NtContinue  (1244328, 0, ...
 01720   420   NtContinue  (1244328, 0, ...
 01721   420   NtContinue  (1244328, 0, ...
 01722   420   NtContinue  (1244328, 0, ...
 01723   420   NtContinue  (1244328, 0, ...
 01724   420   NtContinue  (1244328, 0, ...
 01725   420   NtContinue  (1244328, 0, ...
 01726   420   NtContinue  (1244328, 0, ...
 01727   420   NtContinue  (1244328, 0, ...
 01728   420   NtContinue  (1244328, 0, ...
 01729   420   NtContinue  (1244328, 0, ...
 01730   420   NtContinue  (1244328, 0, ...
 01731   420   NtContinue  (1244328, 0, ...
 01732   420   NtContinue  (1244328, 0, ...
 01733   420   NtContinue  (1244328, 0, ...
 01734   420   NtContinue  (1244328, 0, ...
 01735   420   NtContinue  (1244328, 0, ...
 01736   420   NtContinue  (1244328, 0, ...
 01737   420   NtContinue  (1244328, 0, ...
 01738   420   NtContinue  (1244328, 0, ...
 01739   420   NtContinue  (1244328, 0, ...
 01740   420   NtContinue  (1244328, 0, ...
 01741   420   NtContinue  (1244328, 0, ...
 01742   420   NtContinue  (1244328, 0, ...
 01743   420   NtContinue  (1244328, 0, ...
 01744   420   NtContinue  (1244328, 0, ...
 01745   420   NtContinue  (1244328, 0, ...
 01746   420   NtContinue  (1244328, 0, ...
 01747   420   NtContinue  (1244328, 0, ...
 01748   420   NtContinue  (1244328, 0, ...
 01749   420   NtContinue  (1244328, 0, ...
 01750   420   NtContinue  (1244328, 0, ...
 01751   420   NtContinue  (1244328, 0, ...
 01752   420   NtContinue  (1244328, 0, ...
 01753   420   NtContinue  (1244328, 0, ...
 01754   420   NtContinue  (1244328, 0, ...
 01755   420   NtContinue  (1244328, 0, ...
 01756   420   NtContinue  (1244328, 0, ...
 01757   420   NtContinue  (1244328, 0, ...
 01758   420   NtContinue  (1244328, 0, ...
 01759   420   NtContinue  (1244328, 0, ...
 01760   420   NtContinue  (1244328, 0, ...
 01761   420   NtContinue  (1244328, 0, ...
 01762   420   NtContinue  (1244328, 0, ...
 01763   420   NtContinue  (1244328, 0, ...
 01764   420   NtContinue  (1244328, 0, ...
 01765   420   NtContinue  (1244328, 0, ...
 01766   420   NtContinue  (1244328, 0, ...
 01767   420   NtContinue  (1244328, 0, ...
 01768   420   NtContinue  (1244328, 0, ...
 01769   420   NtContinue  (1244328, 0, ...
 01770   420   NtContinue  (1244328, 0, ...
 01771   420   NtContinue  (1244328, 0, ...
 01772   420   NtContinue  (1244328, 0, ...
 01773   420   NtContinue  (1244328, 0, ...
 01774   420   NtContinue  (1244328, 0, ...
 01775   420   NtContinue  (1244328, 0, ...
 01776   420   NtContinue  (1244328, 0, ...
 01777   420   NtContinue  (1244328, 0, ...
 01778   420   NtContinue  (1244328, 0, ...
 01779   420   NtContinue  (1244328, 0, ...
 01780   420   NtContinue  (1244328, 0, ...
 01781   420   NtContinue  (1244328, 0, ...
 01782   420   NtContinue  (1244328, 0, ...
 01783   420   NtContinue  (1244328, 0, ...
 01784   420   NtContinue  (1244328, 0, ...
 01785   420   NtContinue  (1244328, 0, ...
 01786   420   NtContinue  (1244328, 0, ...
 01787   420   NtContinue  (1244328, 0, ...
 01788   420   NtContinue  (1244328, 0, ...
 01789   420   NtContinue  (1244328, 0, ...
 01790   420   NtContinue  (1244328, 0, ...
 01791   420   NtContinue  (1244328, 0, ...
 01792   420   NtContinue  (1244328, 0, ...
 01793   420   NtContinue  (1244328, 0, ...
 01794   420   NtContinue  (1244328, 0, ...
 01795   420   NtContinue  (1244328, 0, ...
 01796   420   NtContinue  (1244328, 0, ...
 01797   420   NtContinue  (1244328, 0, ...
 01798   420   NtContinue  (1244328, 0, ...
 01799   420   NtContinue  (1244328, 0, ...
 01800   420   NtContinue  (1244328, 0, ...
 01801   420   NtContinue  (1244328, 0, ...
 01802   420   NtContinue  (1244328, 0, ...
 01803   420   NtContinue  (1244328, 0, ...
 01804   420   NtContinue  (1244328, 0, ...
 01805   420   NtContinue  (1244328, 0, ...
 01806   420   NtContinue  (1244328, 0, ...
 01807   420   NtContinue  (1244328, 0, ...
 01808   420   NtContinue  (1244328, 0, ...
 01809   420   NtContinue  (1244328, 0, ...
 01810   420   NtContinue  (1244328, 0, ...
 01811   420   NtContinue  (1244328, 0, ...
 01812   420   NtContinue  (1244328, 0, ...
 01813   420   NtContinue  (1244328, 0, ...
 01814   420   NtContinue  (1244328, 0, ...
 01815   420   NtContinue  (1244328, 0, ...
 01816   420   NtContinue  (1244328, 0, ...
 01817   420   NtContinue  (1244328, 0, ...
 01818   420   NtContinue  (1244328, 0, ...
 01819   420   NtContinue  (1244328, 0, ...
 01820   420   NtContinue  (1244328, 0, ...
 01821   420   NtContinue  (1244328, 0, ...
 01822   420   NtContinue  (1244328, 0, ...
 01823   420   NtContinue  (1244328, 0, ...
 01824   420   NtContinue  (1244328, 0, ...
 01825   420   NtContinue  (1244328, 0, ...
 01826   420   NtContinue  (1244328, 0, ...
 01827   420   NtContinue  (1244328, 0, ...
 01828   420   NtContinue  (1244328, 0, ...
 01829   420   NtContinue  (1244328, 0, ...
 01830   420   NtContinue  (1244328, 0, ...
 01831   420   NtContinue  (1244328, 0, ...
 01832   420   NtContinue  (1244328, 0, ...
 01833   420   NtContinue  (1244328, 0, ...
 01834   420   NtContinue  (1244328, 0, ...
 01835   420   NtContinue  (1244328, 0, ...
 01836   420   NtContinue  (1244328, 0, ...
 01837   420   NtContinue  (1244328, 0, ...
 01838   420   NtContinue  (1244328, 0, ...
 01839   420   NtContinue  (1244328, 0, ...
 01840   420   NtContinue  (1244328, 0, ...
 01841   420   NtContinue  (1244328, 0, ...
 01842   420   NtContinue  (1244328, 0, ...
 01843   420   NtContinue  (1244328, 0, ...
 01844   420   NtContinue  (1244328, 0, ...
 01845   420   NtContinue  (1244328, 0, ...
 01846   420   NtContinue  (1244328, 0, ...
 01847   420   NtContinue  (1244328, 0, ...
 01848   420   NtContinue  (1244328, 0, ...
 01849   420   NtContinue  (1244328, 0, ...
 01850   420   NtContinue  (1244328, 0, ...
 01851   420   NtContinue  (1244328, 0, ...
 01852   420   NtContinue  (1244328, 0, ...
 01853   420   NtContinue  (1244328, 0, ...
 01854   420   NtContinue  (1244328, 0, ...
 01855   420   NtContinue  (1244328, 0, ...
 01856   420   NtContinue  (1244328, 0, ...
 01857   420   NtContinue  (1244328, 0, ...
 01858   420   NtContinue  (1244328, 0, ...
 01859   420   NtContinue  (1244328, 0, ...
 01860   420   NtContinue  (1244328, 0, ...
 01861   420   NtContinue  (1244328, 0, ...
 01862   420   NtContinue  (1244328, 0, ...
 01863   420   NtContinue  (1244328, 0, ...
 01864   420   NtContinue  (1244328, 0, ...
 01865   420   NtContinue  (1244328, 0, ...
 01866   420   NtContinue  (1244328, 0, ...
 01867   420   NtContinue  (1244328, 0, ...
 01868   420   NtContinue  (1244328, 0, ...
 01869   420   NtContinue  (1244328, 0, ...
 01870   420   NtContinue  (1244328, 0, ...
 01871   420   NtContinue  (1244328, 0, ...
 01872   420   NtContinue  (1244328, 0, ...
 01873   420   NtContinue  (1244328, 0, ...
 01874   420   NtContinue  (1244328, 0, ...
 01875   420   NtContinue  (1244328, 0, ...
 01876   420   NtContinue  (1244328, 0, ...
 01877   420   NtContinue  (1244328, 0, ...
 01878   420   NtContinue  (1244328, 0, ...
 01879   420   NtContinue  (1244328, 0, ...
 01880   420   NtContinue  (1244328, 0, ...
 01881   420   NtContinue  (1244328, 0, ...
 01882   420   NtContinue  (1244328, 0, ...
 01883   420   NtContinue  (1244328, 0, ...
 01884   420   NtContinue  (1244328, 0, ...
 01885   420   NtContinue  (1244328, 0, ...
 01886   420   NtContinue  (1244328, 0, ...
 01887   420   NtContinue  (1244328, 0, ...
 01888   420   NtContinue  (1244328, 0, ...
 01889   420   NtContinue  (1244328, 0, ...
 01890   420   NtContinue  (1244328, 0, ...
 01891   420   NtContinue  (1244328, 0, ...
 01892   420   NtContinue  (1244328, 0, ...
 01893   420   NtContinue  (1244328, 0, ...
 01894   420   NtContinue  (1244328, 0, ...
 01895   420   NtContinue  (1244328, 0, ...
 01896   420   NtContinue  (1244328, 0, ...
 01897   420   NtContinue  (1244328, 0, ...
 01898   420   NtContinue  (1244328, 0, ...
 01899   420   NtContinue  (1244328, 0, ...
 01900   420   NtContinue  (1244328, 0, ...
 01901   420   NtContinue  (1244328, 0, ...
 01902   420   NtContinue  (1244328, 0, ...
 01903   420   NtContinue  (1244328, 0, ...
 01904   420   NtContinue  (1244328, 0, ...
 01905   420   NtContinue  (1244328, 0, ...
 01906   420   NtContinue  (1244328, 0, ...
 01907   420   NtContinue  (1244328, 0, ...
 01908   420   NtContinue  (1244328, 0, ...
 01909   420   NtContinue  (1244328, 0, ...
 01910   420   NtContinue  (1244328, 0, ...
 01911   420   NtContinue  (1244328, 0, ...
 01912   420   NtContinue  (1244328, 0, ...
 01913   420   NtContinue  (1244328, 0, ...
 01914   420   NtContinue  (1244328, 0, ...
 01915   420   NtContinue  (1244328, 0, ...
 01916   420   NtContinue  (1244328, 0, ...
 01917   420   NtContinue  (1244328, 0, ...
 01918   420   NtContinue  (1244328, 0, ...
 01919   420   NtContinue  (1244328, 0, ...
 01920   420   NtContinue  (1244328, 0, ...
 01921   420   NtContinue  (1244328, 0, ...
 01922   420   NtContinue  (1244328, 0, ...
 01923   420   NtContinue  (1244328, 0, ...
 01924   420   NtContinue  (1244328, 0, ...
 01925   420   NtContinue  (1244328, 0, ...
 01926   420   NtContinue  (1244328, 0, ...
 01927   420   NtContinue  (1244328, 0, ...
 01928   420   NtContinue  (1244328, 0, ...
 01929   420   NtContinue  (1244328, 0, ...
 01930   420   NtContinue  (1244328, 0, ...
 01931   420   NtContinue  (1244328, 0, ...
 01932   420   NtContinue  (1244328, 0, ...
 01933   420   NtContinue  (1244328, 0, ...
 01934   420   NtContinue  (1244328, 0, ...
 01935   420   NtContinue  (1244328, 0, ...
 01936   420   NtContinue  (1244328, 0, ...
 01937   420   NtContinue  (1244328, 0, ...
 01938   420   NtContinue  (1244328, 0, ...
 01939   420   NtContinue  (1244328, 0, ...
 01940   420   NtContinue  (1244328, 0, ...
 01941   420   NtContinue  (1244328, 0, ...
 01942   420   NtContinue  (1244328, 0, ...
 01943   420   NtContinue  (1244328, 0, ...
 01944   420   NtContinue  (1244328, 0, ...
 01945   420   NtContinue  (1244328, 0, ...
 01946   420   NtContinue  (1244328, 0, ...
 01947   420   NtContinue  (1244328, 0, ...
 01948   420   NtContinue  (1244328, 0, ...
 01949   420   NtContinue  (1244328, 0, ...
 01950   420   NtContinue  (1244328, 0, ...
 01951   420   NtContinue  (1244328, 0, ...
 01952   420   NtContinue  (1244328, 0, ...
 01953   420   NtContinue  (1244328, 0, ...
 01954   420   NtContinue  (1244328, 0, ...
 01955   420   NtContinue  (1244328, 0, ...
 01956   420   NtContinue  (1244328, 0, ...
 01957   420   NtContinue  (1244328, 0, ...
 01958   420   NtContinue  (1244328, 0, ...
 01959   420   NtContinue  (1244328, 0, ...
 01960   420   NtContinue  (1244328, 0, ...
 01961   420   NtContinue  (1244328, 0, ...
 01962   420   NtContinue  (1244328, 0, ...
 01963   420   NtContinue  (1244328, 0, ...
 01964   420   NtContinue  (1244328, 0, ...
 01965   420   NtContinue  (1244328, 0, ...
 01966   420   NtContinue  (1244328, 0, ...
 01967   420   NtContinue  (1244328, 0, ...
 01968   420   NtContinue  (1244328, 0, ...
 01969   420   NtContinue  (1244328, 0, ...
 01970   420   NtContinue  (1244328, 0, ...
 01971   420   NtContinue  (1244328, 0, ...
 01972   420   NtContinue  (1244328, 0, ...
 01973   420   NtContinue  (1244328, 0, ...
 01974   420   NtContinue  (1244328, 0, ...
 01975   420   NtContinue  (1244328, 0, ...
 01976   420   NtContinue  (1244328, 0, ...
 01977   420   NtContinue  (1244328, 0, ...
 01978   420   NtContinue  (1244328, 0, ...
 01979   420   NtContinue  (1244328, 0, ...
 01980   420   NtContinue  (1244328, 0, ...
 01981   420   NtContinue  (1244328, 0, ...
 01982   420   NtContinue  (1244328, 0, ...
 01983   420   NtContinue  (1244328, 0, ...
 01984   420   NtContinue  (1244328, 0, ...
 01985   420   NtContinue  (1244328, 0, ...
 01986   420   NtContinue  (1244328, 0, ...
 01987   420   NtContinue  (1244328, 0, ...
 01988   420   NtContinue  (1244328, 0, ...
 01989   420   NtContinue  (1244328, 0, ...
 01990   420   NtContinue  (1244328, 0, ...
 01991   420   NtContinue  (1244328, 0, ...
 01992   420   NtContinue  (1244328, 0, ...
 01993   420   NtContinue  (1244328, 0, ...
 01994   420   NtContinue  (1244328, 0, ...
 01995   420   NtContinue  (1244328, 0, ...
 01996   420   NtContinue  (1244328, 0, ...
 01997   420   NtContinue  (1244328, 0, ...
 01998   420   NtContinue  (1244328, 0, ...
 01999   420   NtContinue  (1244328, 0, ...
 02000   420   NtContinue  (1244328, 0, ...
 02001   420   NtContinue  (1244328, 0, ...
 02002   420   NtContinue  (1244328, 0, ...
 02003   420   NtContinue  (1244328, 0, ...
 02004   420   NtContinue  (1244328, 0, ...
 02005   420   NtContinue  (1244328, 0, ...
 02006   420   NtContinue  (1244328, 0, ...
 02007   420   NtContinue  (1244328, 0, ...
 02008   420   NtContinue  (1244328, 0, ...
 02009   420   NtContinue  (1244328, 0, ...
 02010   420   NtContinue  (1244328, 0, ...
 02011   420   NtContinue  (1244328, 0, ...
 02012   420   NtContinue  (1244328, 0, ...
 02013   420   NtContinue  (1244328, 0, ...
 02014   420   NtContinue  (1244328, 0, ...
 02015   420   NtContinue  (1244328, 0, ...
 02016   420   NtContinue  (1244328, 0, ...
 02017   420   NtContinue  (1244328, 0, ...
 02018   420   NtContinue  (1244328, 0, ...
 02019   420   NtContinue  (1244328, 0, ...
 02020   420   NtContinue  (1244328, 0, ...
 02021   420   NtContinue  (1244328, 0, ...
 02022   420   NtContinue  (1244328, 0, ...
 02023   420   NtContinue  (1244328, 0, ...
 02024   420   NtContinue  (1244328, 0, ...
 02025   420   NtContinue  (1244328, 0, ...
 02026   420   NtContinue  (1244328, 0, ...
 02027   420   NtContinue  (1244328, 0, ...
 02028   420   NtContinue  (1244328, 0, ...
 02029   420   NtContinue  (1244328, 0, ...
 02030   420   NtContinue  (1244328, 0, ...
 02031   420   NtContinue  (1244328, 0, ...
 02032   420   NtContinue  (1244328, 0, ...
 02033   420   NtContinue  (1244328, 0, ...
 02034   420   NtContinue  (1244328, 0, ...
 02035   420   NtContinue  (1244328, 0, ...
 02036   420   NtContinue  (1244328, 0, ...
 02037   420   NtContinue  (1244328, 0, ...
 02038   420   NtContinue  (1244328, 0, ...
 02039   420   NtContinue  (1244328, 0, ...
 02040   420   NtContinue  (1244328, 0, ...
 02041   420   NtContinue  (1244328, 0, ...
 02042   420   NtContinue  (1244328, 0, ...
 02043   420   NtContinue  (1244328, 0, ...
 02044   420   NtContinue  (1244328, 0, ...
 02045   420   NtContinue  (1244328, 0, ...
 02046   420   NtContinue  (1244328, 0, ...
 02047   420   NtContinue  (1244328, 0, ...
 02048   420   NtContinue  (1244328, 0, ...
 02049   420   NtContinue  (1244328, 0, ...
 02050   420   NtContinue  (1244328, 0, ...
 02051   420   NtContinue  (1244328, 0, ...
 02052   420   NtContinue  (1244328, 0, ...
 02053   420   NtContinue  (1244328, 0, ...
 02054   420   NtContinue  (1244328, 0, ...
 02055   420   NtContinue  (1244328, 0, ...
 02056   420   NtContinue  (1244328, 0, ...
 02057   420   NtContinue  (1244328, 0, ...
 02058   420   NtContinue  (1244328, 0, ...
 02059   420   NtContinue  (1244328, 0, ...
 02060   420   NtContinue  (1244328, 0, ...
 02061   420   NtContinue  (1244328, 0, ...
 02062   420   NtContinue  (1244328, 0, ...
 02063   420   NtContinue  (1244328, 0, ...
 02064   420   NtContinue  (1244328, 0, ...
 02065   420   NtContinue  (1244328, 0, ...
 02066   420   NtContinue  (1244328, 0, ...
 02067   420   NtContinue  (1244328, 0, ...
 02068   420   NtContinue  (1244328, 0, ...
 02069   420   NtContinue  (1244328, 0, ...
 02070   420   NtContinue  (1244328, 0, ...
 02071   420   NtContinue  (1244328, 0, ...
 02072   420   NtContinue  (1244328, 0, ...
 02073   420   NtContinue  (1244328, 0, ...
 02074   420   NtContinue  (1244328, 0, ...
 02075   420   NtContinue  (1244328, 0, ...
 02076   420   NtContinue  (1244328, 0, ...
 02077   420   NtContinue  (1244328, 0, ...
 02078   420   NtContinue  (1244328, 0, ...
 02079   420   NtContinue  (1244328, 0, ...
 02080   420   NtContinue  (1244328, 0, ...
 02081   420   NtContinue  (1244328, 0, ...
 02082   420   NtContinue  (1244328, 0, ...
 02083   420   NtContinue  (1244328, 0, ...
 02084   420   NtContinue  (1244328, 0, ...
 02085   420   NtContinue  (1244328, 0, ...
 02086   420   NtContinue  (1244328, 0, ...
 02087   420   NtContinue  (1244328, 0, ...
 02088   420   NtContinue  (1244328, 0, ...
 02089   420   NtContinue  (1244328, 0, ...
 02090   420   NtContinue  (1244328, 0, ...
 02091   420   NtContinue  (1244328, 0, ...
 02092   420   NtContinue  (1244328, 0, ...
 02093   420   NtContinue  (1244328, 0, ...
 02094   420   NtContinue  (1244328, 0, ...
 02095   420   NtContinue  (1244328, 0, ...
 02096   420   NtContinue  (1244328, 0, ...
 02097   420   NtContinue  (1244328, 0, ...
 02098   420   NtContinue  (1244328, 0, ...
 02099   420   NtContinue  (1244328, 0, ...
 02100   420   NtContinue  (1244328, 0, ...
 02101   420   NtContinue  (1244328, 0, ...
 02102   420   NtContinue  (1244328, 0, ...
 02103   420   NtContinue  (1244328, 0, ...
 02104   420   NtContinue  (1244328, 0, ...
 02105   420   NtContinue  (1244328, 0, ...
 02106   420   NtContinue  (1244328, 0, ...
 02107   420   NtContinue  (1244328, 0, ...
 02108   420   NtContinue  (1244328, 0, ...
 02109   420   NtContinue  (1244328, 0, ...
 02110   420   NtContinue  (1244328, 0, ...
 02111   420   NtContinue  (1244328, 0, ...
 02112   420   NtContinue  (1244328, 0, ...
 02113   420   NtContinue  (1244328, 0, ...
 02114   420   NtContinue  (1244328, 0, ...
 02115   420   NtContinue  (1244328, 0, ...
 02116   420   NtContinue  (1244328, 0, ...
 02117   420   NtContinue  (1244328, 0, ...
 02118   420   NtContinue  (1244328, 0, ...
 02119   420   NtContinue  (1244328, 0, ...
 02120   420   NtContinue  (1244328, 0, ...
 02121   420   NtContinue  (1244328, 0, ...
 02122   420   NtContinue  (1244328, 0, ...
 02123   420   NtContinue  (1244328, 0, ...
 02124   420   NtContinue  (1244328, 0, ...
 02125   420   NtContinue  (1244328, 0, ...
 02126   420   NtContinue  (1244328, 0, ...
 02127   420   NtContinue  (1244328, 0, ...
 02128   420   NtContinue  (1244328, 0, ...
 02129   420   NtContinue  (1244328, 0, ...
 02130   420   NtContinue  (1244328, 0, ...
 02131   420   NtContinue  (1244328, 0, ...
 02132   420   NtContinue  (1244328, 0, ...
 02133   420   NtContinue  (1244328, 0, ...
 02134   420   NtContinue  (1244328, 0, ...
 02135   420   NtContinue  (1244328, 0, ...
 02136   420   NtContinue  (1244328, 0, ...
 02137   420   NtContinue  (1244328, 0, ...
 02138   420   NtContinue  (1244328, 0, ...
 02139   420   NtContinue  (1244328, 0, ...
 02140   420   NtContinue  (1244328, 0, ...
 02141   420   NtContinue  (1244328, 0, ...
 02142   420   NtContinue  (1244328, 0, ...
 02143   420   NtContinue  (1244328, 0, ...
 02144   420   NtContinue  (1244328, 0, ...
 02145   420   NtContinue  (1244328, 0, ...
 02146   420   NtContinue  (1244328, 0, ...
 02147   420   NtContinue  (1244328, 0, ...
 02148   420   NtContinue  (1244328, 0, ...
 02149   420   NtContinue  (1244328, 0, ...
 02150   420   NtContinue  (1244328, 0, ...
 02151   420   NtContinue  (1244328, 0, ...
 02152   420   NtContinue  (1244328, 0, ...
 02153   420   NtContinue  (1244328, 0, ...
 02154   420   NtContinue  (1244328, 0, ...
 02155   420   NtContinue  (1244328, 0, ...
 02156   420   NtContinue  (1244328, 0, ...
 02157   420   NtContinue  (1244328, 0, ...
 02158   420   NtContinue  (1244328, 0, ...
 02159   420   NtContinue  (1244328, 0, ...
 02160   420   NtContinue  (1244328, 0, ...
 02161   420   NtContinue  (1244328, 0, ...
 02162   420   NtContinue  (1244328, 0, ...
 02163   420   NtContinue  (1244328, 0, ...
 02164   420   NtContinue  (1244328, 0, ...
 02165   420   NtContinue  (1244328, 0, ...
 02166   420   NtContinue  (1244328, 0, ...
 02167   420   NtContinue  (1244328, 0, ...
 02168   420   NtContinue  (1244328, 0, ...
 02169   420   NtContinue  (1244328, 0, ...
 02170   420   NtContinue  (1244328, 0, ...
 02171   420   NtContinue  (1244328, 0, ...
 02172   420   NtContinue  (1244328, 0, ...
 02173   420   NtContinue  (1244328, 0, ...
 02174   420   NtContinue  (1244328, 0, ...
 02175   420   NtContinue  (1244328, 0, ...
 02176   420   NtContinue  (1244328, 0, ...
 02177   420   NtContinue  (1244328, 0, ...
 02178   420   NtContinue  (1244328, 0, ...
 02179   420   NtContinue  (1244328, 0, ...
 02180   420   NtContinue  (1244328, 0, ...
 02181   420   NtContinue  (1244328, 0, ...
 02182   420   NtContinue  (1244328, 0, ...
 02183   420   NtContinue  (1244328, 0, ...
 02184   420   NtContinue  (1244328, 0, ...
 02185   420   NtContinue  (1244328, 0, ...
 02186   420   NtContinue  (1244328, 0, ...
 02187   420   NtContinue  (1244328, 0, ...
 02188   420   NtContinue  (1244328, 0, ...
 02189   420   NtContinue  (1244328, 0, ...
 02190   420   NtContinue  (1244328, 0, ...
 02191   420   NtContinue  (1244328, 0, ...
 02192   420   NtContinue  (1244328, 0, ...
 02193   420   NtContinue  (1244328, 0, ...
 02194   420   NtContinue  (1244328, 0, ...
 02195   420   NtContinue  (1244328, 0, ...
 02196   420   NtContinue  (1244328, 0, ...
 02197   420   NtContinue  (1244328, 0, ...
 02198   420   NtContinue  (1244328, 0, ...
 02199   420   NtContinue  (1244328, 0, ...
 02200   420   NtContinue  (1244328, 0, ...
 02201   420   NtContinue  (1244328, 0, ...
 02202   420   NtContinue  (1244328, 0, ...
 02203   420   NtContinue  (1244328, 0, ...
 02204   420   NtContinue  (1244328, 0, ...
 02205   420   NtContinue  (1244328, 0, ...
 02206   420   NtContinue  (1244328, 0, ...
 02207   420   NtContinue  (1244328, 0, ...
 02208   420   NtContinue  (1244328, 0, ...
 02209   420   NtContinue  (1244328, 0, ...
 02210   420   NtContinue  (1244328, 0, ...
 02211   420   NtContinue  (1244328, 0, ...
 02212   420   NtContinue  (1244328, 0, ...
 02213   420   NtContinue  (1244328, 0, ...
 02214   420   NtContinue  (1244328, 0, ...
 02215   420   NtContinue  (1244328, 0, ...
 02216   420   NtContinue  (1244328, 0, ...
 02217   420   NtContinue  (1244328, 0, ...
 02218   420   NtContinue  (1244328, 0, ...
 02219   420   NtContinue  (1244328, 0, ...
 02220   420   NtContinue  (1244328, 0, ...
 02221   420   NtContinue  (1244328, 0, ...
 02222   420   NtContinue  (1244328, 0, ...
 02223   420   NtContinue  (1244328, 0, ...
 02224   420   NtContinue  (1244328, 0, ...
 02225   420   NtContinue  (1244328, 0, ...
 02226   420   NtContinue  (1244328, 0, ...
 02227   420   NtContinue  (1244328, 0, ...
 02228   420   NtContinue  (1244328, 0, ...
 02229   420   NtContinue  (1244328, 0, ...
 02230   420   NtContinue  (1244328, 0, ...
 02231   420   NtContinue  (1244328, 0, ...
 02232   420   NtContinue  (1244328, 0, ...
 02233   420   NtContinue  (1244328, 0, ...
 02234   420   NtContinue  (1244328, 0, ...
 02235   420   NtContinue  (1244328, 0, ...
 02236   420   NtContinue  (1244328, 0, ...
 02237   420   NtContinue  (1244328, 0, ...
 02238   420   NtContinue  (1244328, 0, ...
 02239   420   NtContinue  (1244328, 0, ...
 02240   420   NtContinue  (1244328, 0, ...
 02241   420   NtContinue  (1244328, 0, ...
 02242   420   NtContinue  (1244328, 0, ...
 02243   420   NtContinue  (1244328, 0, ...
 02244   420   NtContinue  (1244328, 0, ...
 02245   420   NtContinue  (1244328, 0, ...
 02246   420   NtContinue  (1244328, 0, ...
 02247   420   NtContinue  (1244328, 0, ...
 02248   420   NtContinue  (1244328, 0, ...
 02249   420   NtContinue  (1244328, 0, ...
 02250   420   NtContinue  (1244328, 0, ...
 02251   420   NtContinue  (1244328, 0, ...
 02252   420   NtContinue  (1244328, 0, ...
 02253   420   NtContinue  (1244328, 0, ...
 02254   420   NtContinue  (1244328, 0, ...
 02255   420   NtContinue  (1244328, 0, ...
 02256   420   NtContinue  (1244328, 0, ...
 02257   420   NtContinue  (1244328, 0, ...
 02258   420   NtContinue  (1244328, 0, ...
 02259   420   NtContinue  (1244328, 0, ...
 02260   420   NtContinue  (1244328, 0, ...
 02261   420   NtContinue  (1244328, 0, ...
 02262   420   NtContinue  (1244328, 0, ...
 02263   420   NtContinue  (1244328, 0, ...
 02264   420   NtContinue  (1244328, 0, ...
 02265   420   NtContinue  (1244328, 0, ...
 02266   420   NtContinue  (1244328, 0, ...
 02267   420   NtContinue  (1244328, 0, ...
 02268   420   NtContinue  (1244328, 0, ...
 02269   420   NtContinue  (1244328, 0, ...
 02270   420   NtContinue  (1244328, 0, ...
 02271   420   NtContinue  (1244328, 0, ...
 02272   420   NtContinue  (1244328, 0, ...
 02273   420   NtContinue  (1244328, 0, ...
 02274   420   NtContinue  (1244328, 0, ...
 02275   420   NtContinue  (1244328, 0, ...
 02276   420   NtContinue  (1244328, 0, ...
 02277   420   NtContinue  (1244328, 0, ...
 02278   420   NtContinue  (1244328, 0, ...
 02279   420   NtContinue  (1244328, 0, ...
 02280   420   NtContinue  (1244328, 0, ...
 02281   420   NtContinue  (1244328, 0, ...
 02282   420   NtContinue  (1244328, 0, ...
 02283   420   NtContinue  (1244328, 0, ...
 02284   420   NtContinue  (1244328, 0, ...
 02285   420   NtContinue  (1244328, 0, ...
 02286   420   NtContinue  (1244328, 0, ...
 02287   420   NtContinue  (1244328, 0, ...
 02288   420   NtContinue  (1244328, 0, ...
 02289   420   NtContinue  (1244328, 0, ...
 02290   420   NtContinue  (1244328, 0, ...
 02291   420   NtContinue  (1244328, 0, ...
 02292   420   NtContinue  (1244328, 0, ...
 02293   420   NtContinue  (1244328, 0, ...
 02294   420   NtContinue  (1244328, 0, ...
 02295   420   NtContinue  (1244328, 0, ...
 02296   420   NtContinue  (1244328, 0, ...
 02297   420   NtContinue  (1244328, 0, ...
 02298   420   NtContinue  (1244328, 0, ...
 02299   420   NtContinue  (1244328, 0, ...
 02300   420   NtContinue  (1244328, 0, ...
 02301   420   NtContinue  (1244328, 0, ...
 02302   420   NtContinue  (1244328, 0, ...
 02303   420   NtContinue  (1244328, 0, ...
 02304   420   NtContinue  (1244328, 0, ...
 02305   420   NtContinue  (1244328, 0, ...
 02306   420   NtContinue  (1244328, 0, ...
 02307   420   NtContinue  (1244328, 0, ...
 02308   420   NtContinue  (1244328, 0, ...
 02309   420   NtContinue  (1244328, 0, ...
 02310   420   NtContinue  (1244328, 0, ...
 02311   420   NtContinue  (1244328, 0, ...
 02312   420   NtContinue  (1244328, 0, ...
 02313   420   NtContinue  (1244328, 0, ...
 02314   420   NtContinue  (1244328, 0, ...
 02315   420   NtContinue  (1244328, 0, ...
 02316   420   NtContinue  (1244328, 0, ...
 02317   420   NtContinue  (1244328, 0, ...
 02318   420   NtContinue  (1244328, 0, ...
 02319   420   NtContinue  (1244328, 0, ...
 02320   420   NtContinue  (1244328, 0, ...
 02321   420   NtContinue  (1244328, 0, ...
 02322   420   NtContinue  (1244328, 0, ...
 02323   420   NtContinue  (1244328, 0, ...
 02324   420   NtContinue  (1244328, 0, ...
 02325   420   NtContinue  (1244328, 0, ...
 02326   420   NtContinue  (1244328, 0, ...
 02327   420   NtContinue  (1244328, 0, ...
 02328   420   NtContinue  (1244328, 0, ...
 02329   420   NtContinue  (1244328, 0, ...
 02330   420   NtContinue  (1244328, 0, ...
 02331   420   NtContinue  (1244328, 0, ...
 02332   420   NtContinue  (1244328, 0, ...
 02333   420   NtContinue  (1244328, 0, ...
 02334   420   NtContinue  (1244328, 0, ...
 02335   420   NtContinue  (1244328, 0, ...
 02336   420   NtContinue  (1244328, 0, ...
 02337   420   NtContinue  (1244328, 0, ...
 02338   420   NtContinue  (1244328, 0, ...
 02339   420   NtContinue  (1244328, 0, ...
 02340   420   NtContinue  (1244328, 0, ...
 02341   420   NtContinue  (1244328, 0, ...
 02342   420   NtContinue  (1244328, 0, ...
 02343   420   NtContinue  (1244328, 0, ...
 02344   420   NtContinue  (1244328, 0, ...
 02345   420   NtContinue  (1244328, 0, ...
 02346   420   NtContinue  (1244328, 0, ...
 02347   420   NtContinue  (1244328, 0, ...
 02348   420   NtContinue  (1244328, 0, ...
 02349   420   NtContinue  (1244328, 0, ...
 02350   420   NtContinue  (1244328, 0, ...
 02351   420   NtContinue  (1244328, 0, ...
 02352   420   NtContinue  (1244328, 0, ...
 02353   420   NtContinue  (1244328, 0, ...
 02354   420   NtContinue  (1244328, 0, ...
 02355   420   NtContinue  (1244328, 0, ...
 02356   420   NtContinue  (1244328, 0, ...
 02357   420   NtContinue  (1244328, 0, ...
 02358   420   NtContinue  (1244328, 0, ...
 02359   420   NtContinue  (1244328, 0, ...
 02360   420   NtContinue  (1244328, 0, ...
 02361   420   NtContinue  (1244328, 0, ...
 02362   420   NtContinue  (1244328, 0, ...
 02363   420   NtContinue  (1244328, 0, ...
 02364   420   NtContinue  (1244328, 0, ...
 02365   420   NtContinue  (1244328, 0, ...
 02366   420   NtContinue  (1244328, 0, ...
 02367   420   NtContinue  (1244328, 0, ...
 02368   420   NtContinue  (1244328, 0, ...
 02369   420   NtContinue  (1244328, 0, ...
 02370   420   NtContinue  (1244328, 0, ...
 02371   420   NtContinue  (1244328, 0, ...
 02372   420   NtContinue  (1244328, 0, ...
 02373   420   NtContinue  (1244328, 0, ...
 02374   420   NtContinue  (1244328, 0, ...
 02375   420   NtContinue  (1244328, 0, ...
 02376   420   NtContinue  (1244328, 0, ...
 02377   420   NtContinue  (1244328, 0, ...
 02378   420   NtContinue  (1244328, 0, ...
 02379   420   NtContinue  (1244328, 0, ...
 02380   420   NtContinue  (1244328, 0, ...
 02381   420   NtContinue  (1244328, 0, ...
 02382   420   NtContinue  (1244328, 0, ...
 02383   420   NtContinue  (1244328, 0, ...
 02384   420   NtContinue  (1244328, 0, ...
 02385   420   NtContinue  (1244328, 0, ...
 02386   420   NtContinue  (1244328, 0, ...
 02387   420   NtContinue  (1244328, 0, ...
 02388   420   NtContinue  (1244328, 0, ...
 02389   420   NtContinue  (1244328, 0, ...
 02390   420   NtContinue  (1244328, 0, ...
 02391   420   NtContinue  (1244328, 0, ...
 02392   420   NtContinue  (1244328, 0, ...
 02393   420   NtContinue  (1244328, 0, ...
 02394   420   NtContinue  (1244328, 0, ...
 02395   420   NtContinue  (1244328, 0, ...
 02396   420   NtContinue  (1244328, 0, ...
 02397   420   NtContinue  (1244328, 0, ...
 02398   420   NtContinue  (1244328, 0, ...
 02399   420   NtContinue  (1244328, 0, ...
 02400   420   NtContinue  (1244328, 0, ...
 02401   420   NtContinue  (1244328, 0, ...
 02402   420   NtContinue  (1244328, 0, ...
 02403   420   NtContinue  (1244328, 0, ...
 02404   420   NtContinue  (1244328, 0, ...
 02405   420   NtContinue  (1244328, 0, ...
 02406   420   NtContinue  (1244328, 0, ...
 02407   420   NtContinue  (1244328, 0, ...
 02408   420   NtContinue  (1244328, 0, ...
 02409   420   NtContinue  (1244328, 0, ...
 02410   420   NtContinue  (1244328, 0, ...
 02411   420   NtContinue  (1244328, 0, ...
 02412   420   NtContinue  (1244328, 0, ...
 02413   420   NtContinue  (1244328, 0, ...
 02414   420   NtContinue  (1244328, 0, ...
 02415   420   NtContinue  (1244328, 0, ...
 02416   420   NtContinue  (1244328, 0, ...
 02417   420   NtContinue  (1244328, 0, ...
 02418   420   NtContinue  (1244328, 0, ...
 02419   420   NtContinue  (1244328, 0, ...
 02420   420   NtContinue  (1244328, 0, ...
 02421   420   NtContinue  (1244328, 0, ...
 02422   420   NtContinue  (1244328, 0, ...
 02423   420   NtContinue  (1244328, 0, ...
 02424   420   NtContinue  (1244328, 0, ...
 02425   420   NtContinue  (1244328, 0, ...
 02426   420   NtContinue  (1244328, 0, ...
 02427   420   NtContinue  (1244328, 0, ...
 02428   420   NtContinue  (1244328, 0, ...
 02429   420   NtContinue  (1244328, 0, ...
 02430   420   NtContinue  (1244328, 0, ...
 02431   420   NtContinue  (1244328, 0, ...
 02432   420   NtContinue  (1244328, 0, ...
 02433   420   NtContinue  (1244328, 0, ...
 02434   420   NtContinue  (1244328, 0, ...
 02435   420   NtContinue  (1244328, 0, ...
 02436   420   NtContinue  (1244328, 0, ...
 02437   420   NtContinue  (1244328, 0, ...
 02438   420   NtContinue  (1244328, 0, ...
 02439   420   NtContinue  (1244328, 0, ...
 02440   420   NtContinue  (1244328, 0, ...
 02441   420   NtContinue  (1244328, 0, ...
 02442   420   NtContinue  (1244328, 0, ...
 02443   420   NtContinue  (1244328, 0, ...
 02444   420   NtContinue  (1244328, 0, ...
 02445   420   NtContinue  (1244328, 0, ...
 02446   420   NtContinue  (1244328, 0, ...
 02447   420   NtContinue  (1244328, 0, ...
 02448   420   NtContinue  (1244328, 0, ...
 02449   420   NtContinue  (1244328, 0, ...
 02450   420   NtContinue  (1244328, 0, ...
 02451   420   NtContinue  (1244328, 0, ...
 02452   420   NtContinue  (1244328, 0, ...
 02453   420   NtContinue  (1244328, 0, ...
 02454   420   NtContinue  (1244328, 0, ...
 02455   420   NtContinue  (1244328, 0, ...
 02456   420   NtContinue  (1244328, 0, ...
 02457   420   NtContinue  (1244328, 0, ...
 02458   420   NtContinue  (1244328, 0, ...
 02459   420   NtContinue  (1244328, 0, ...
 02460   420   NtContinue  (1244328, 0, ...
 02461   420   NtContinue  (1244328, 0, ...
 02462   420   NtContinue  (1244328, 0, ...
 02463   420   NtContinue  (1244328, 0, ...
 02464   420   NtContinue  (1244328, 0, ...
 02465   420   NtContinue  (1244328, 0, ...
 02466   420   NtContinue  (1244328, 0, ...
 02467   420   NtContinue  (1244328, 0, ...
 02468   420   NtContinue  (1244328, 0, ...
 02469   420   NtContinue  (1244328, 0, ...
 02470   420   NtContinue  (1244328, 0, ...
 02471   420   NtContinue  (1244328, 0, ...
 02472   420   NtContinue  (1244328, 0, ...
 02473   420   NtContinue  (1244328, 0, ...
 02474   420   NtContinue  (1244328, 0, ...
 02475   420   NtContinue  (1244328, 0, ...
 02476   420   NtContinue  (1244328, 0, ...
 02477   420   NtContinue  (1244328, 0, ...
 02478   420   NtContinue  (1244328, 0, ...
 02479   420   NtContinue  (1244328, 0, ...
 02480   420   NtContinue  (1244328, 0, ...
 02481   420   NtContinue  (1244328, 0, ...
 02482   420   NtContinue  (1244328, 0, ...
 02483   420   NtContinue  (1244328, 0, ...
 02484   420   NtContinue  (1244328, 0, ...
 02485   420   NtContinue  (1244328, 0, ...
 02486   420   NtContinue  (1244328, 0, ...
 02487   420   NtContinue  (1244328, 0, ...
 02488   420   NtContinue  (1244328, 0, ...
 02489   420   NtContinue  (1244328, 0, ...
 02490   420   NtContinue  (1244328, 0, ...
 02491   420   NtContinue  (1244328, 0, ...
 02492   420   NtContinue  (1244328, 0, ...
 02493   420   NtContinue  (1244328, 0, ...
 02494   420   NtContinue  (1244328, 0, ...
 02495   420   NtContinue  (1244328, 0, ...
 02496   420   NtContinue  (1244328, 0, ...
 02497   420   NtContinue  (1244328, 0, ...
 02498   420   NtContinue  (1244328, 0, ...
 02499   420   NtContinue  (1244328, 0, ...
 02500   420   NtContinue  (1244328, 0, ...
 02501   420   NtContinue  (1244328, 0, ...
 02502   420   NtContinue  (1244328, 0, ...
 02503   420   NtContinue  (1244328, 0, ...
 02504   420   NtContinue  (1244328, 0, ...
 02505   420   NtContinue  (1244328, 0, ...
 02506   420   NtContinue  (1244328, 0, ...
 02507   420   NtContinue  (1244328, 0, ...
 02508   420   NtContinue  (1244328, 0, ...
 02509   420   NtContinue  (1244328, 0, ...
 02510   420   NtContinue  (1244328, 0, ...
 02511   420   NtContinue  (1244328, 0, ...
 02512   420   NtContinue  (1244328, 0, ...
 02513   420   NtContinue  (1244328, 0, ...
 02514   420   NtContinue  (1244328, 0, ...
 02515   420   NtContinue  (1244328, 0, ...
 02516   420   NtContinue  (1244328, 0, ...
 02517   420   NtContinue  (1244328, 0, ...
 02518   420   NtContinue  (1244328, 0, ...
 02519   420   NtContinue  (1244328, 0, ...
 02520   420   NtContinue  (1244328, 0, ...
 02521   420   NtContinue  (1244328, 0, ...
 02522   420   NtContinue  (1244328, 0, ...
 02523   420   NtContinue  (1244328, 0, ...
 02524   420   NtContinue  (1244328, 0, ...
 02525   420   NtContinue  (1244328, 0, ...
 02526   420   NtContinue  (1244328, 0, ...
 02527   420   NtContinue  (1244328, 0, ...
 02528   420   NtContinue  (1244328, 0, ...
 02529   420   NtContinue  (1244328, 0, ...
 02530   420   NtContinue  (1244328, 0, ...
 02531   420   NtContinue  (1244328, 0, ...
 02532   420   NtContinue  (1244328, 0, ...
 02533   420   NtContinue  (1244328, 0, ...
 02534   420   NtContinue  (1244328, 0, ...
 02535   420   NtContinue  (1244328, 0, ...
 02536   420   NtContinue  (1244328, 0, ...
 02537   420   NtContinue  (1244328, 0, ...
 02538   420   NtContinue  (1244328, 0, ...
 02539   420   NtContinue  (1244328, 0, ...
 02540   420   NtContinue  (1244328, 0, ...
 02541   420   NtContinue  (1244328, 0, ...
 02542   420   NtContinue  (1244328, 0, ...
 02543   420   NtContinue  (1244328, 0, ...
 02544   420   NtContinue  (1244328, 0, ...
 02545   420   NtContinue  (1244328, 0, ...
 02546   420   NtContinue  (1244328, 0, ...
 02547   420   NtContinue  (1244328, 0, ...
 02548   420   NtContinue  (1244328, 0, ...
 02549   420   NtContinue  (1244328, 0, ...
 02550   420   NtContinue  (1244328, 0, ...
 02551   420   NtContinue  (1244328, 0, ...
 02552   420   NtContinue  (1244328, 0, ...
 02553   420   NtContinue  (1244328, 0, ...
 02554   420   NtContinue  (1244328, 0, ...
 02555   420   NtContinue  (1244328, 0, ...
 02556   420   NtContinue  (1244328, 0, ...
 02557   420   NtContinue  (1244328, 0, ...
 02558   420   NtContinue  (1244328, 0, ...
 02559   420   NtContinue  (1244328, 0, ...
 02560   420   NtContinue  (1244328, 0, ...
 02561   420   NtContinue  (1244328, 0, ...
 02562   420   NtContinue  (1244328, 0, ...
 02563   420   NtContinue  (1244328, 0, ...
 02564   420   NtContinue  (1244328, 0, ...
 02565   420   NtContinue  (1244328, 0, ...
 02566   420   NtContinue  (1244328, 0, ...
 02567   420   NtContinue  (1244328, 0, ...
 02568   420   NtContinue  (1244328, 0, ...
 02569   420   NtContinue  (1244328, 0, ...
 02570   420   NtContinue  (1244328, 0, ...
 02571   420   NtContinue  (1244328, 0, ...
 02572   420   NtContinue  (1244328, 0, ...
 02573   420   NtContinue  (1244328, 0, ...
 02574   420   NtContinue  (1244328, 0, ...
 02575   420   NtContinue  (1244328, 0, ...
 02576   420   NtContinue  (1244328, 0, ...
 02577   420   NtContinue  (1244328, 0, ...
 02578   420   NtContinue  (1244328, 0, ...
 02579   420   NtContinue  (1244328, 0, ...
 02580   420   NtContinue  (1244328, 0, ...
 02581   420   NtContinue  (1244328, 0, ...
 02582   420   NtContinue  (1244328, 0, ...
 02583   420   NtContinue  (1244328, 0, ...
 02584   420   NtContinue  (1244328, 0, ...
 02585   420   NtContinue  (1244328, 0, ...
 02586   420   NtContinue  (1244328, 0, ...
 02587   420   NtContinue  (1244328, 0, ...
 02588   420   NtContinue  (1244328, 0, ...
 02589   420   NtContinue  (1244328, 0, ...
 02590   420   NtContinue  (1244328, 0, ...
 02591   420   NtContinue  (1244328, 0, ...
 02592   420   NtContinue  (1244328, 0, ...
 02593   420   NtContinue  (1244328, 0, ...
 02594   420   NtContinue  (1244328, 0, ...
 02595   420   NtContinue  (1244328, 0, ...
 02596   420   NtContinue  (1244328, 0, ...
 02597   420   NtContinue  (1244328, 0, ...
 02598   420   NtContinue  (1244328, 0, ...
 02599   420   NtContinue  (1244328, 0, ...
 02600   420   NtContinue  (1244328, 0, ...
 02601   420   NtContinue  (1244328, 0, ...
 02602   420   NtContinue  (1244328, 0, ...
 02603   420   NtContinue  (1244328, 0, ...
 02604   420   NtContinue  (1244328, 0, ...
 02605   420   NtContinue  (1244328, 0, ...
 02606   420   NtContinue  (1244328, 0, ...
 02607   420   NtContinue  (1244328, 0, ...
 02608   420   NtContinue  (1244328, 0, ...
 02609   420   NtContinue  (1244328, 0, ...
 02610   420   NtContinue  (1244328, 0, ...
 02611   420   NtContinue  (1244328, 0, ...
 02612   420   NtContinue  (1244328, 0, ...
 02613   420   NtContinue  (1244328, 0, ...
 02614   420   NtContinue  (1244328, 0, ...
 02615   420   NtContinue  (1244328, 0, ...
 02616   420   NtContinue  (1244328, 0, ...
 02617   420   NtContinue  (1244328, 0, ...
 02618   420   NtContinue  (1244328, 0, ...
 02619   420   NtContinue  (1244328, 0, ...
 02620   420   NtContinue  (1244328, 0, ...
 02621   420   NtContinue  (1244328, 0, ...
 02622   420   NtContinue  (1244328, 0, ...
 02623   420   NtContinue  (1244328, 0, ...
 02624   420   NtContinue  (1244328, 0, ...
 02625   420   NtContinue  (1244328, 0, ...
 02626   420   NtContinue  (1244328, 0, ...
 02627   420   NtContinue  (1244328, 0, ...
 02628   420   NtContinue  (1244328, 0, ...
 02629   420   NtContinue  (1244328, 0, ...
 02630   420   NtContinue  (1244328, 0, ...
 02631   420   NtContinue  (1244328, 0, ...
 02632   420   NtContinue  (1244328, 0, ...
 02633   420   NtContinue  (1244328, 0, ...
 02634   420   NtContinue  (1244328, 0, ...
 02635   420   NtContinue  (1244328, 0, ...
 02636   420   NtContinue  (1244328, 0, ...
 02637   420   NtContinue  (1244328, 0, ...
 02638   420   NtContinue  (1244328, 0, ...
 02639   420   NtContinue  (1244328, 0, ...
 02640   420   NtContinue  (1244328, 0, ...
 02641   420   NtContinue  (1244328, 0, ...
 02642   420   NtContinue  (1244328, 0, ...
 02643   420   NtContinue  (1244328, 0, ...
 02644   420   NtContinue  (1244328, 0, ...
 02645   420   NtContinue  (1244328, 0, ...
 02646   420   NtContinue  (1244328, 0, ...
 02647   420   NtContinue  (1244328, 0, ...
 02648   420   NtContinue  (1244328, 0, ...
 02649   420   NtContinue  (1244328, 0, ...
 02650   420   NtContinue  (1244328, 0, ...
 02651   420   NtContinue  (1244328, 0, ...
 02652   420   NtContinue  (1244328, 0, ...
 02653   420   NtContinue  (1244328, 0, ...
 02654   420   NtContinue  (1244328, 0, ...
 02655   420   NtContinue  (1244328, 0, ...
 02656   420   NtContinue  (1244328, 0, ...
 02657   420   NtContinue  (1244328, 0, ...
 02658   420   NtContinue  (1244328, 0, ...
 02659   420   NtContinue  (1244328, 0, ...
 02660   420   NtContinue  (1244328, 0, ...
 02661   420   NtContinue  (1244328, 0, ...
 02662   420   NtContinue  (1244328, 0, ...
 02663   420   NtContinue  (1244328, 0, ...
 02664   420   NtContinue  (1244328, 0, ...
 02665   420   NtContinue  (1244328, 0, ...
 02666   420   NtContinue  (1244328, 0, ...
 02667   420   NtContinue  (1244328, 0, ...
 02668   420   NtContinue  (1244328, 0, ...
 02669   420   NtContinue  (1244328, 0, ...
 02670   420   NtContinue  (1244328, 0, ...
 02671   420   NtContinue  (1244328, 0, ...
 02672   420   NtContinue  (1244328, 0, ...
 02673   420   NtContinue  (1244328, 0, ...
 02674   420   NtContinue  (1244328, 0, ...
 02675   420   NtContinue  (1244328, 0, ...
 02676   420   NtContinue  (1244328, 0, ...
 02677   420   NtContinue  (1244328, 0, ...
 02678   420   NtContinue  (1244328, 0, ...
 02679   420   NtContinue  (1244328, 0, ...
 02680   420   NtContinue  (1244328, 0, ...
 02681   420   NtContinue  (1244328, 0, ...
 02682   420   NtContinue  (1244328, 0, ...
 02683   420   NtContinue  (1244328, 0, ...
 02684   420   NtContinue  (1244328, 0, ...
 02685   420   NtContinue  (1244328, 0, ...
 02686   420   NtContinue  (1244328, 0, ...
 02687   420   NtContinue  (1244328, 0, ...
 02688   420   NtContinue  (1244328, 0, ...
 02689   420   NtContinue  (1244328, 0, ...
 02690   420   NtContinue  (1244328, 0, ...
 02691   420   NtContinue  (1244328, 0, ...
 02692   420   NtContinue  (1244328, 0, ...
 02693   420   NtContinue  (1244328, 0, ...
 02694   420   NtContinue  (1244328, 0, ...
 02695   420   NtContinue  (1244328, 0, ...
 02696   420   NtContinue  (1244328, 0, ...
 02697   420   NtContinue  (1244328, 0, ...
 02698   420   NtContinue  (1244328, 0, ...
 02699   420   NtContinue  (1244328, 0, ...
 02700   420   NtContinue  (1244328, 0, ...
 02701   420   NtContinue  (1244328, 0, ...
 02702   420   NtContinue  (1244328, 0, ...
 02703   420   NtContinue  (1244328, 0, ...
 02704   420   NtContinue  (1244328, 0, ...
 02705   420   NtContinue  (1244328, 0, ...
 02706   420   NtContinue  (1244328, 0, ...
 02707   420   NtContinue  (1244328, 0, ...
 02708   420   NtContinue  (1244328, 0, ...
 02709   420   NtContinue  (1244328, 0, ...
 02710   420   NtContinue  (1244328, 0, ...
 02711   420   NtContinue  (1244328, 0, ...
 02712   420   NtContinue  (1244328, 0, ...
 02713   420   NtContinue  (1244328, 0, ...
 02714   420   NtContinue  (1244328, 0, ...
 02715   420   NtContinue  (1244328, 0, ...
 02716   420   NtContinue  (1244328, 0, ...
 02717   420   NtContinue  (1244328, 0, ...
 02718   420   NtContinue  (1244328, 0, ...
 02719   420   NtContinue  (1244328, 0, ...
 02720   420   NtContinue  (1244328, 0, ...
 02721   420   NtContinue  (1244328, 0, ...
 02722   420   NtContinue  (1244328, 0, ...
 02723   420   NtContinue  (1244328, 0, ...
 02724   420   NtContinue  (1244328, 0, ...
 02725   420   NtContinue  (1244328, 0, ...
 02726   420   NtContinue  (1244328, 0, ...
 02727   420   NtContinue  (1244328, 0, ...
 02728   420   NtContinue  (1244328, 0, ...
 02729   420   NtContinue  (1244328, 0, ...
 02730   420   NtContinue  (1244328, 0, ...
 02731   420   NtContinue  (1244328, 0, ...
 02732   420   NtContinue  (1244328, 0, ...
 02733   420   NtContinue  (1244328, 0, ...
 02734   420   NtContinue  (1244328, 0, ...
 02735   420   NtContinue  (1244328, 0, ...
 02736   420   NtContinue  (1244328, 0, ...
 02737   420   NtContinue  (1244328, 0, ...
 02738   420   NtContinue  (1244328, 0, ...
 02739   420   NtContinue  (1244328, 0, ...
 02740   420   NtContinue  (1244328, 0, ...
 02741   420   NtContinue  (1244328, 0, ...
 02742   420   NtContinue  (1244328, 0, ...
 02743   420   NtContinue  (1244328, 0, ...
 02744   420   NtContinue  (1244328, 0, ...
 02745   420   NtContinue  (1244328, 0, ...
 02746   420   NtContinue  (1244328, 0, ...
 02747   420   NtContinue  (1244328, 0, ...
 02748   420   NtContinue  (1244328, 0, ...
 02749   420   NtContinue  (1244328, 0, ...
 02750   420   NtContinue  (1244328, 0, ...
 02751   420   NtContinue  (1244328, 0, ...
 02752   420   NtContinue  (1244328, 0, ...
 02753   420   NtContinue  (1244328, 0, ...
 02754   420   NtContinue  (1244328, 0, ...
 02755   420   NtContinue  (1244328, 0, ...
 02756   420   NtContinue  (1244328, 0, ...
 02757   420   NtContinue  (1244328, 0, ...
 02758   420   NtContinue  (1244328, 0, ...
 02759   420   NtContinue  (1244328, 0, ...
 02760   420   NtContinue  (1244328, 0, ...
 02761   420   NtContinue  (1244328, 0, ...
 02762   420   NtContinue  (1244328, 0, ...
 02763   420   NtContinue  (1244328, 0, ...
 02764   420   NtContinue  (1244328, 0, ...
 02765   420   NtContinue  (1244328, 0, ...
 02766   420   NtContinue  (1244328, 0, ...
 02767   420   NtContinue  (1244328, 0, ...
 02768   420   NtContinue  (1244328, 0, ...
 02769   420   NtContinue  (1244328, 0, ...
 02770   420   NtContinue  (1244328, 0, ...
 02771   420   NtContinue  (1244328, 0, ...
 02772   420   NtContinue  (1244328, 0, ...
 02773   420   NtContinue  (1244328, 0, ...
 02774   420   NtContinue  (1244328, 0, ...
 02775   420   NtContinue  (1244328, 0, ...
 02776   420   NtContinue  (1244328, 0, ...
 02777   420   NtContinue  (1244328, 0, ...
 02778   420   NtContinue  (1244328, 0, ...
 02779   420   NtContinue  (1244328, 0, ...
 02780   420   NtContinue  (1244328, 0, ...
 02781   420   NtContinue  (1244328, 0, ...
 02782   420   NtContinue  (1244328, 0, ...
 02783   420   NtContinue  (1244328, 0, ...
 02784   420   NtContinue  (1244328, 0, ...
 02785   420   NtContinue  (1244328, 0, ...
 02786   420   NtContinue  (1244328, 0, ...
 02787   420   NtContinue  (1244328, 0, ...
 02788   420   NtContinue  (1244328, 0, ...
 02789   420   NtContinue  (1244328, 0, ...
 02790   420   NtContinue  (1244328, 0, ...
 02791   420   NtContinue  (1244328, 0, ...
 02792   420   NtContinue  (1244328, 0, ...
 02793   420   NtContinue  (1244328, 0, ...
 02794   420   NtContinue  (1244328, 0, ...
 02795   420   NtContinue  (1244328, 0, ...
 02796   420   NtContinue  (1244328, 0, ...
 02797   420   NtContinue  (1244328, 0, ...
 02798   420   NtContinue  (1244328, 0, ...
 02799   420   NtContinue  (1244328, 0, ...
 02800   420   NtContinue  (1244328, 0, ...
 02801   420   NtContinue  (1244328, 0, ...
 02802   420   NtContinue  (1244328, 0, ...
 02803   420   NtContinue  (1244328, 0, ...
 02804   420   NtContinue  (1244328, 0, ...
 02805   420   NtContinue  (1244328, 0, ...
 02806   420   NtContinue  (1244328, 0, ...
 02807   420   NtContinue  (1244328, 0, ...
 02808   420   NtContinue  (1244328, 0, ...
 02809   420   NtContinue  (1244328, 0, ...
 02810   420   NtContinue  (1244328, 0, ...
 02811   420   NtContinue  (1244328, 0, ...
 02812   420   NtContinue  (1244328, 0, ...
 02813   420   NtContinue  (1244328, 0, ...
 02814   420   NtContinue  (1244328, 0, ...
 02815   420   NtContinue  (1244328, 0, ...
 02816   420   NtContinue  (1244328, 0, ...
 02817   420   NtContinue  (1244328, 0, ...
 02818   420   NtContinue  (1244328, 0, ...
 02819   420   NtContinue  (1244328, 0, ...
 02820   420   NtContinue  (1244328, 0, ...
 02821   420   NtContinue  (1244328, 0, ...
 02822   420   NtContinue  (1244328, 0, ...
 02823   420   NtContinue  (1244328, 0, ...
 02824   420   NtContinue  (1244328, 0, ...
 02825   420   NtContinue  (1244328, 0, ...
 02826   420   NtContinue  (1244328, 0, ...
 02827   420   NtContinue  (1244328, 0, ...
 02828   420   NtContinue  (1244328, 0, ...
 02829   420   NtContinue  (1244328, 0, ...
 02830   420   NtContinue  (1244328, 0, ...
 02831   420   NtContinue  (1244328, 0, ...
 02832   420   NtContinue  (1244328, 0, ...
 02833   420   NtContinue  (1244328, 0, ...
 02834   420   NtContinue  (1244328, 0, ...
 02835   420   NtContinue  (1244328, 0, ...
 02836   420   NtContinue  (1244328, 0, ...
 02837   420   NtContinue  (1244328, 0, ...
 02838   420   NtContinue  (1244328, 0, ...
 02839   420   NtContinue  (1244328, 0, ...
 02840   420   NtContinue  (1244328, 0, ...
 02841   420   NtContinue  (1244328, 0, ...
 02842   420   NtContinue  (1244328, 0, ...
 02843   420   NtContinue  (1244328, 0, ...
 02844   420   NtContinue  (1244328, 0, ...
 02845   420   NtContinue  (1244328, 0, ...
 02846   420   NtContinue  (1244328, 0, ...
 02847   420   NtContinue  (1244328, 0, ...
 02848   420   NtContinue  (1244328, 0, ...
 02849   420   NtContinue  (1244328, 0, ...
 02850   420   NtContinue  (1244328, 0, ...
 02851   420   NtContinue  (1244328, 0, ...
 02852   420   NtContinue  (1244328, 0, ...
 02853   420   NtContinue  (1244328, 0, ...
 02854   420   NtContinue  (1244328, 0, ...
 02855   420   NtContinue  (1244328, 0, ...
 02856   420   NtContinue  (1244328, 0, ...
 02857   420   NtContinue  (1244328, 0, ...
 02858   420   NtContinue  (1244328, 0, ...
 02859   420   NtContinue  (1244328, 0, ...
 02860   420   NtContinue  (1244328, 0, ...
 02861   420   NtContinue  (1244328, 0, ...
 02862   420   NtContinue  (1244328, 0, ...
 02863   420   NtContinue  (1244328, 0, ...
 02864   420   NtContinue  (1244328, 0, ...
 02865   420   NtContinue  (1244328, 0, ...
 02866   420   NtContinue  (1244328, 0, ...
 02867   420   NtContinue  (1244328, 0, ...
 02868   420   NtContinue  (1244328, 0, ...
 02869   420   NtContinue  (1244328, 0, ...
 02870   420   NtContinue  (1244328, 0, ...
 02871   420   NtContinue  (1244328, 0, ...
 02872   420   NtContinue  (1244328, 0, ...
 02873   420   NtContinue  (1244328, 0, ...
 02874   420   NtContinue  (1244328, 0, ...
 02875   420   NtContinue  (1244328, 0, ...
 02876   420   NtContinue  (1244328, 0, ...
 02877   420   NtContinue  (1244328, 0, ...
 02878   420   NtContinue  (1244328, 0, ...
 02879   420   NtContinue  (1244328, 0, ...
 02880   420   NtContinue  (1244328, 0, ...
 02881   420   NtContinue  (1244328, 0, ...
 02882   420   NtContinue  (1244328, 0, ...
 02883   420   NtContinue  (1244328, 0, ...
 02884   420   NtContinue  (1244328, 0, ...
 02885   420   NtContinue  (1244328, 0, ...
 02886   420   NtContinue  (1244328, 0, ...
 02887   420   NtContinue  (1244328, 0, ...
 02888   420   NtContinue  (1244328, 0, ...
 02889   420   NtContinue  (1244328, 0, ...
 02890   420   NtContinue  (1244328, 0, ...
 02891   420   NtContinue  (1244328, 0, ...
 02892   420   NtContinue  (1244328, 0, ...
 02893   420   NtContinue  (1244328, 0, ...
 02894   420   NtContinue  (1244328, 0, ...
 02895   420   NtContinue  (1244328, 0, ...
 02896   420   NtContinue  (1244328, 0, ...
 02897   420   NtContinue  (1244328, 0, ...
 02898   420   NtContinue  (1244328, 0, ...
 02899   420   NtContinue  (1244328, 0, ...
 02900   420   NtContinue  (1244328, 0, ...
 02901   420   NtContinue  (1244328, 0, ...
 02902   420   NtContinue  (1244328, 0, ...
 02903   420   NtContinue  (1244328, 0, ...
 02904   420   NtContinue  (1244328, 0, ...
 02905   420   NtContinue  (1244328, 0, ...
 02906   420   NtContinue  (1244328, 0, ...
 02907   420   NtContinue  (1244328, 0, ...
 02908   420   NtContinue  (1244328, 0, ...
 02909   420   NtContinue  (1244328, 0, ...
 02910   420   NtContinue  (1244328, 0, ...
 02911   420   NtContinue  (1244328, 0, ...
 02912   420   NtContinue  (1244328, 0, ...
 02913   420   NtContinue  (1244328, 0, ...
 02914   420   NtContinue  (1244328, 0, ...
 02915   420   NtContinue  (1244328, 0, ...
 02916   420   NtContinue  (1244328, 0, ...
 02917   420   NtContinue  (1244328, 0, ...
 02918   420   NtContinue  (1244328, 0, ...
 02919   420   NtContinue  (1244328, 0, ...
 02920   420   NtContinue  (1244328, 0, ...
 02921   420   NtContinue  (1244328, 0, ...
 02922   420   NtContinue  (1244328, 0, ...
 02923   420   NtContinue  (1244328, 0, ...
 02924   420   NtContinue  (1244328, 0, ...
 02925   420   NtContinue  (1244328, 0, ...
 02926   420   NtContinue  (1244328, 0, ...
 02927   420   NtContinue  (1244328, 0, ...
 02928   420   NtContinue  (1244328, 0, ...
 02929   420   NtContinue  (1244328, 0, ...
 02930   420   NtContinue  (1244328, 0, ...
 02931   420   NtContinue  (1244328, 0, ...
 02932   420   NtContinue  (1244328, 0, ...
 02933   420   NtContinue  (1244328, 0, ...
 02934   420   NtContinue  (1244328, 0, ...
 02935   420   NtContinue  (1244328, 0, ...
 02936   420   NtContinue  (1244328, 0, ...
 02937   420   NtContinue  (1244328, 0, ...
 02938   420   NtContinue  (1244328, 0, ...
 02939   420   NtContinue  (1244328, 0, ...
 02940   420   NtContinue  (1244328, 0, ...
 02941   420   NtContinue  (1244328, 0, ...
 02942   420   NtContinue  (1244328, 0, ...
 02943   420   NtContinue  (1244328, 0, ...
 02944   420   NtContinue  (1244328, 0, ...
 02945   420   NtContinue  (1244328, 0, ...
 02946   420   NtContinue  (1244328, 0, ...
 02947   420   NtContinue  (1244328, 0, ...
 02948   420   NtContinue  (1244328, 0, ...
 02949   420   NtContinue  (1244328, 0, ...
 02950   420   NtContinue  (1244328, 0, ...
 02951   420   NtContinue  (1244328, 0, ...
 02952   420   NtContinue  (1244328, 0, ...
 02953   420   NtContinue  (1244328, 0, ...
 02954   420   NtContinue  (1244328, 0, ...
 02955   420   NtContinue  (1244328, 0, ...
 02956   420   NtContinue  (1244328, 0, ...
 02957   420   NtContinue  (1244328, 0, ...
 02958   420   NtContinue  (1244328, 0, ...
 02959   420   NtContinue  (1244328, 0, ...
 02960   420   NtContinue  (1244328, 0, ...
 02961   420   NtContinue  (1244328, 0, ...
 02962   420   NtContinue  (1244328, 0, ...
 02963   420   NtContinue  (1244328, 0, ...
 02964   420   NtContinue  (1244328, 0, ...
 02965   420   NtContinue  (1244328, 0, ...
 02966   420   NtContinue  (1244328, 0, ...
 02967   420   NtContinue  (1244328, 0, ...
 02968   420   NtContinue  (1244328, 0, ...
 02969   420   NtContinue  (1244328, 0, ...
 02970   420   NtContinue  (1244328, 0, ...
 02971   420   NtContinue  (1244328, 0, ...
 02972   420   NtContinue  (1244328, 0, ...
 02973   420   NtContinue  (1244328, 0, ...
 02974   420   NtContinue  (1244328, 0, ...
 02975   420   NtContinue  (1244328, 0, ...
 02976   420   NtContinue  (1244328, 0, ...
 02977   420   NtContinue  (1244328, 0, ...
 02978   420   NtContinue  (1244328, 0, ...
 02979   420   NtContinue  (1244328, 0, ...
 02980   420   NtContinue  (1244328, 0, ...
 02981   420   NtContinue  (1244328, 0, ...
 02982   420   NtContinue  (1244328, 0, ...
 02983   420   NtContinue  (1244328, 0, ...
 02984   420   NtContinue  (1244328, 0, ...
 02985   420   NtContinue  (1244328, 0, ...
 02986   420   NtContinue  (1244328, 0, ...
 02987   420   NtContinue  (1244328, 0, ...
 02988   420   NtContinue  (1244328, 0, ...
 02989   420   NtContinue  (1244328, 0, ...
 02990   420   NtContinue  (1244328, 0, ...
 02991   420   NtContinue  (1244328, 0, ...
 02992   420   NtContinue  (1244328, 0, ...
 02993   420   NtContinue  (1244328, 0, ...
 02994   420   NtContinue  (1244328, 0, ...
 02995   420   NtContinue  (1244328, 0, ...
 02996   420   NtContinue  (1244328, 0, ...
 02997   420   NtContinue  (1244328, 0, ...
 02998   420   NtContinue  (1244328, 0, ...
 02999   420   NtContinue  (1244328, 0, ...
 03000   420   NtContinue  (1244328, 0, ...
 03001   420   NtContinue  (1244328, 0, ...
 03002   420   NtContinue  (1244328, 0, ...
 03003   420   NtContinue  (1244328, 0, ...
 03004   420   NtContinue  (1244328, 0, ...
 03005   420   NtContinue  (1244328, 0, ...
 03006   420   NtContinue  (1244328, 0, ...
 03007   420   NtContinue  (1244328, 0, ...
 03008   420   NtContinue  (1244328, 0, ...
 03009   420   NtContinue  (1244328, 0, ...
 03010   420   NtContinue  (1244328, 0, ...
 03011   420   NtContinue  (1244328, 0, ...
 03012   420   NtContinue  (1244328, 0, ...
 03013   420   NtContinue  (1244328, 0, ...
 03014   420   NtContinue  (1244328, 0, ...
 03015   420   NtContinue  (1244328, 0, ...
 03016   420   NtContinue  (1244328, 0, ...
 03017   420   NtContinue  (1244328, 0, ...
 03018   420   NtContinue  (1244328, 0, ...
 03019   420   NtContinue  (1244328, 0, ...
 03020   420   NtContinue  (1244328, 0, ...
 03021   420   NtContinue  (1244328, 0, ...
 03022   420   NtContinue  (1244328, 0, ...
 03023   420   NtContinue  (1244328, 0, ...
 03024   420   NtContinue  (1244328, 0, ...
 03025   420   NtContinue  (1244328, 0, ...
 03026   420   NtContinue  (1244328, 0, ...
 03027   420   NtContinue  (1244328, 0, ...
 03028   420   NtContinue  (1244328, 0, ...
 03029   420   NtContinue  (1244328, 0, ...
 03030   420   NtContinue  (1244328, 0, ...
 03031   420   NtContinue  (1244328, 0, ...
 03032   420   NtContinue  (1244328, 0, ...
 03033   420   NtContinue  (1244328, 0, ...
 03034   420   NtContinue  (1244328, 0, ...
 03035   420   NtContinue  (1244328, 0, ...
 03036   420   NtContinue  (1244328, 0, ...
 03037   420   NtContinue  (1244328, 0, ...
 03038   420   NtContinue  (1244328, 0, ...
 03039   420   NtContinue  (1244328, 0, ...
 03040   420   NtContinue  (1244328, 0, ...
 03041   420   NtContinue  (1244328, 0, ...
 03042   420   NtContinue  (1244328, 0, ...
 03043   420   NtContinue  (1244328, 0, ...
 03044   420   NtContinue  (1244328, 0, ...
 03045   420   NtContinue  (1244328, 0, ...
 03046   420   NtContinue  (1244328, 0, ...
 03047   420   NtContinue  (1244328, 0, ...
 03048   420   NtContinue  (1244328, 0, ...
 03049   420   NtContinue  (1244328, 0, ...
 03050   420   NtContinue  (1244328, 0, ...
 03051   420   NtContinue  (1244328, 0, ...
 03052   420   NtContinue  (1244328, 0, ...
 03053   420   NtContinue  (1244328, 0, ...
 03054   420   NtContinue  (1244328, 0, ...
 03055   420   NtContinue  (1244328, 0, ...
 03056   420   NtContinue  (1244328, 0, ...
 03057   420   NtContinue  (1244328, 0, ...
 03058   420   NtContinue  (1244328, 0, ...
 03059   420   NtContinue  (1244328, 0, ...
 03060   420   NtContinue  (1244328, 0, ...
 03061   420   NtContinue  (1244328, 0, ...
 03062   420   NtContinue  (1244328, 0, ...
 03063   420   NtContinue  (1244328, 0, ...
 03064   420   NtContinue  (1244328, 0, ...
 03065   420   NtContinue  (1244328, 0, ...
 03066   420   NtContinue  (1244328, 0, ...
 03067   420   NtContinue  (1244328, 0, ...
 03068   420   NtContinue  (1244328, 0, ...
 03069   420   NtContinue  (1244328, 0, ...
 03070   420   NtContinue  (1244328, 0, ...
 03071   420   NtContinue  (1244328, 0, ...
 03072   420   NtContinue  (1244328, 0, ...
 03073   420   NtContinue  (1244328, 0, ...
 03074   420   NtContinue  (1244328, 0, ...
 03075   420   NtContinue  (1244328, 0, ...
 03076   420   NtContinue  (1244328, 0, ...
 03077   420   NtContinue  (1244328, 0, ...
 03078   420   NtContinue  (1244328, 0, ...
 03079   420   NtContinue  (1244328, 0, ...
 03080   420   NtContinue  (1244328, 0, ...
 03081   420   NtContinue  (1244328, 0, ...
 03082   420   NtContinue  (1244328, 0, ...
 03083   420   NtContinue  (1244328, 0, ...
 03084   420   NtContinue  (1244328, 0, ...
 03085   420   NtContinue  (1244328, 0, ...
 03086   420   NtContinue  (1244328, 0, ...
 03087   420   NtContinue  (1244328, 0, ...
 03088   420   NtContinue  (1244328, 0, ...
 03089   420   NtContinue  (1244328, 0, ...
 03090   420   NtContinue  (1244328, 0, ...
 03091   420   NtContinue  (1244328, 0, ...
 03092   420   NtContinue  (1244328, 0, ...
 03093   420   NtContinue  (1244328, 0, ...
 03094   420   NtContinue  (1244328, 0, ...
 03095   420   NtContinue  (1244328, 0, ...
 03096   420   NtContinue  (1244328, 0, ...
 03097   420   NtContinue  (1244328, 0, ...
 03098   420   NtContinue  (1244328, 0, ...
 03099   420   NtContinue  (1244328, 0, ...
 03100   420   NtContinue  (1244328, 0, ...
 03101   420   NtContinue  (1244328, 0, ...
 03102   420   NtContinue  (1244328, 0, ...
 03103   420   NtContinue  (1244328, 0, ...
 03104   420   NtContinue  (1244328, 0, ...
 03105   420   NtContinue  (1244328, 0, ...
 03106   420   NtContinue  (1244328, 0, ...
 03107   420   NtContinue  (1244328, 0, ...
 03108   420   NtContinue  (1244328, 0, ...
 03109   420   NtContinue  (1244328, 0, ...
 03110   420   NtContinue  (1244328, 0, ...
 03111   420   NtContinue  (1244328, 0, ...
 03112   420   NtContinue  (1244328, 0, ...
 03113   420   NtContinue  (1244328, 0, ...
 03114   420   NtContinue  (1244328, 0, ...
 03115   420   NtContinue  (1244328, 0, ...
 03116   420   NtContinue  (1244328, 0, ...
 03117   420   NtContinue  (1244328, 0, ...
 03118   420   NtContinue  (1244328, 0, ...
 03119   420   NtContinue  (1244328, 0, ...
 03120   420   NtContinue  (1244328, 0, ...
 03121   420   NtContinue  (1244328, 0, ...
 03122   420   NtContinue  (1244328, 0, ...
 03123   420   NtContinue  (1244328, 0, ...
 03124   420   NtContinue  (1244328, 0, ...
 03125   420   NtContinue  (1244328, 0, ...
 03126   420   NtContinue  (1244328, 0, ...
 03127   420   NtContinue  (1244328, 0, ...
 03128   420   NtContinue  (1244328, 0, ...
 03129   420   NtContinue  (1244328, 0, ...
 03130   420   NtContinue  (1244328, 0, ...
 03131   420   NtContinue  (1244328, 0, ...
 03132   420   NtContinue  (1244328, 0, ...
 03133   420   NtContinue  (1244328, 0, ...
 03134   420   NtContinue  (1244328, 0, ...
 03135   420   NtContinue  (1244328, 0, ...
 03136   420   NtContinue  (1244328, 0, ...
 03137   420   NtContinue  (1244328, 0, ...
 03138   420   NtContinue  (1244328, 0, ...
 03139   420   NtContinue  (1244328, 0, ...
 03140   420   NtContinue  (1244328, 0, ...
 03141   420   NtContinue  (1244328, 0, ...
 03142   420   NtContinue  (1244328, 0, ...
 03143   420   NtContinue  (1244328, 0, ...
 03144   420   NtContinue  (1244328, 0, ...
 03145   420   NtContinue  (1244328, 0, ...
 03146   420   NtContinue  (1244328, 0, ...
 03147   420   NtContinue  (1244328, 0, ...
 03148   420   NtContinue  (1244328, 0, ...
 03149   420   NtContinue  (1244328, 0, ...
 03150   420   NtContinue  (1244328, 0, ...
 03151   420   NtContinue  (1244328, 0, ...
 03152   420   NtContinue  (1244328, 0, ...
 03153   420   NtContinue  (1244328, 0, ...
 03154   420   NtContinue  (1244328, 0, ...
 03155   420   NtContinue  (1244328, 0, ...
 03156   420   NtContinue  (1244328, 0, ...
 03157   420   NtContinue  (1244328, 0, ...
 03158   420   NtContinue  (1244328, 0, ...
 03159   420   NtContinue  (1244328, 0, ...
 03160   420   NtContinue  (1244328, 0, ...
 03161   420   NtContinue  (1244328, 0, ...
 03162   420   NtContinue  (1244328, 0, ...
 03163   420   NtContinue  (1244328, 0, ...
 03164   420   NtContinue  (1244328, 0, ...
 03165   420   NtContinue  (1244328, 0, ...
 03166   420   NtContinue  (1244328, 0, ...
 03167   420   NtContinue  (1244328, 0, ...
 03168   420   NtContinue  (1244328, 0, ...
 03169   420   NtContinue  (1244328, 0, ...
 03170   420   NtContinue  (1244328, 0, ...
 03171   420   NtContinue  (1244328, 0, ...
 03172   420   NtContinue  (1244328, 0, ...
 03173   420   NtContinue  (1244328, 0, ...
 03174   420   NtContinue  (1244328, 0, ...
 03175   420   NtContinue  (1244328, 0, ...
 03176   420   NtContinue  (1244328, 0, ...
 03177   420   NtContinue  (1244328, 0, ...
 03178   420   NtContinue  (1244328, 0, ...
 03179   420   NtContinue  (1244328, 0, ...
 03180   420   NtContinue  (1244328, 0, ...
 03181   420   NtContinue  (1244328, 0, ...
 03182   420   NtContinue  (1244328, 0, ...
 03183   420   NtContinue  (1244328, 0, ...
 03184   420   NtContinue  (1244328, 0, ...
 03185   420   NtContinue  (1244328, 0, ...
 03186   420   NtContinue  (1244328, 0, ...
 03187   420   NtContinue  (1244328, 0, ...
 03188   420   NtContinue  (1244328, 0, ...
 03189   420   NtContinue  (1244328, 0, ...
 03190   420   NtContinue  (1244328, 0, ...
 03191   420   NtContinue  (1244328, 0, ...
 03192   420   NtContinue  (1244328, 0, ...
 03193   420   NtContinue  (1244328, 0, ...
 03194   420   NtContinue  (1244328, 0, ...
 03195   420   NtContinue  (1244328, 0, ...
 03196   420   NtContinue  (1244328, 0, ...
 03197   420   NtContinue  (1244328, 0, ...
 03198   420   NtContinue  (1244328, 0, ...
 03199   420   NtContinue  (1244328, 0, ...
 03200   420   NtContinue  (1244328, 0, ...
 03201   420   NtContinue  (1244328, 0, ...
 03202   420   NtContinue  (1244328, 0, ...
 03203   420   NtContinue  (1244328, 0, ...
 03204   420   NtContinue  (1244328, 0, ...
 03205   420   NtContinue  (1244328, 0, ...
 03206   420   NtContinue  (1244328, 0, ...
 03207   420   NtContinue  (1244328, 0, ...
 03208   420   NtContinue  (1244328, 0, ...
 03209   420   NtContinue  (1244328, 0, ...
 03210   420   NtContinue  (1244328, 0, ...
 03211   420   NtContinue  (1244328, 0, ...
 03212   420   NtContinue  (1244328, 0, ...
 03213   420   NtContinue  (1244328, 0, ...
 03214   420   NtContinue  (1244328, 0, ...
 03215   420   NtContinue  (1244328, 0, ...
 03216   420   NtContinue  (1244328, 0, ...
 03217   420   NtContinue  (1244328, 0, ...
 03218   420   NtContinue  (1244328, 0, ...
 03219   420   NtContinue  (1244328, 0, ...
 03220   420   NtContinue  (1244328, 0, ...
 03221   420   NtContinue  (1244328, 0, ...
 03222   420   NtContinue  (1244328, 0, ...
 03223   420   NtContinue  (1244328, 0, ...
 03224   420   NtContinue  (1244328, 0, ...
 03225   420   NtContinue  (1244328, 0, ...
 03226   420   NtContinue  (1244328, 0, ...
 03227   420   NtContinue  (1244328, 0, ...
 03228   420   NtContinue  (1244328, 0, ...
 03229   420   NtContinue  (1244328, 0, ...
 03230   420   NtContinue  (1244328, 0, ...
 03231   420   NtContinue  (1244328, 0, ...
 03232   420   NtContinue  (1244328, 0, ...
 03233   420   NtContinue  (1244328, 0, ...
 03234   420   NtContinue  (1244328, 0, ...
 03235   420   NtContinue  (1244328, 0, ...
 03236   420   NtContinue  (1244328, 0, ...
 03237   420   NtContinue  (1244328, 0, ...
 03238   420   NtContinue  (1244328, 0, ...
 03239   420   NtContinue  (1244328, 0, ...
 03240   420   NtContinue  (1244328, 0, ...
 03241   420   NtContinue  (1244328, 0, ...
 03242   420   NtContinue  (1244328, 0, ...
 03243   420   NtContinue  (1244328, 0, ...
 03244   420   NtContinue  (1244328, 0, ...
 03245   420   NtContinue  (1244328, 0, ...
 03246   420   NtContinue  (1244328, 0, ...
 03247   420   NtContinue  (1244328, 0, ...
 03248   420   NtContinue  (1244328, 0, ...
 03249   420   NtContinue  (1244328, 0, ...
 03250   420   NtContinue  (1244328, 0, ...
 03251   420   NtContinue  (1244328, 0, ...
 03252   420   NtContinue  (1244328, 0, ...
 03253   420   NtContinue  (1244328, 0, ...
 03254   420   NtContinue  (1244328, 0, ...
 03255   420   NtContinue  (1244328, 0, ...
 03256   420   NtContinue  (1244328, 0, ...
 03257   420   NtContinue  (1244328, 0, ...
 03258   420   NtContinue  (1244328, 0, ...
 03259   420   NtContinue  (1244328, 0, ...
 03260   420   NtContinue  (1244328, 0, ...
 03261   420   NtContinue  (1244328, 0, ...
 03262   420   NtContinue  (1244328, 0, ...
 03263   420   NtContinue  (1244328, 0, ...
 03264   420   NtContinue  (1244328, 0, ...
 03265   420   NtContinue  (1244328, 0, ...
 03266   420   NtContinue  (1244328, 0, ...
 03267   420   NtContinue  (1244328, 0, ...
 03268   420   NtContinue  (1244328, 0, ...
 03269   420   NtContinue  (1244328, 0, ...
 03270   420   NtContinue  (1244328, 0, ...
 03271   420   NtContinue  (1244328, 0, ...
 03272   420   NtContinue  (1244328, 0, ...
 03273   420   NtContinue  (1244328, 0, ...
 03274   420   NtContinue  (1244328, 0, ...
 03275   420   NtContinue  (1244328, 0, ...
 03276   420   NtContinue  (1244328, 0, ...
 03277   420   NtContinue  (1244328, 0, ...
 03278   420   NtContinue  (1244328, 0, ...
 03279   420   NtContinue  (1244328, 0, ...
 03280   420   NtContinue  (1244328, 0, ...
 03281   420   NtContinue  (1244328, 0, ...
 03282   420   NtContinue  (1244328, 0, ...
 03283   420   NtContinue  (1244328, 0, ...
 03284   420   NtContinue  (1244328, 0, ...
 03285   420   NtContinue  (1244328, 0, ...
 03286   420   NtContinue  (1244328, 0, ...
 03287   420   NtContinue  (1244328, 0, ...
 03288   420   NtContinue  (1244328, 0, ...
 03289   420   NtContinue  (1244328, 0, ...
 03290   420   NtContinue  (1244328, 0, ...
 03291   420   NtContinue  (1244328, 0, ...
 03292   420   NtContinue  (1244328, 0, ...
 03293   420   NtContinue  (1244328, 0, ...
 03294   420   NtContinue  (1244328, 0, ...
 03295   420   NtContinue  (1244328, 0, ...
 03296   420   NtContinue  (1244328, 0, ...
 03297   420   NtContinue  (1244328, 0, ...
 03298   420   NtContinue  (1244328, 0, ...
 03299   420   NtContinue  (1244328, 0, ...
 03300   420   NtContinue  (1244328, 0, ...
 03301   420   NtContinue  (1244328, 0, ...
 03302   420   NtContinue  (1244328, 0, ...
 03303   420   NtContinue  (1244328, 0, ...
 03304   420   NtContinue  (1244328, 0, ...
 03305   420   NtContinue  (1244328, 0, ...
 03306   420   NtContinue  (1244328, 0, ...
 03307   420   NtContinue  (1244328, 0, ...
 03308   420   NtContinue  (1244328, 0, ...
 03309   420   NtContinue  (1244328, 0, ...
 03310   420   NtContinue  (1244328, 0, ...
 03311   420   NtContinue  (1244328, 0, ...
 03312   420   NtContinue  (1244328, 0, ...
 03313   420   NtContinue  (1244328, 0, ...
 03314   420   NtContinue  (1244328, 0, ...
 03315   420   NtContinue  (1244328, 0, ...
 03316   420   NtContinue  (1244328, 0, ...
 03317   420   NtContinue  (1244328, 0, ...
 03318   420   NtContinue  (1244328, 0, ...
 03319   420   NtContinue  (1244328, 0, ...
 03320   420   NtContinue  (1244328, 0, ...
 03321   420   NtContinue  (1244328, 0, ...
 03322   420   NtContinue  (1244328, 0, ...
 03323   420   NtContinue  (1244328, 0, ...
 03324   420   NtContinue  (1244328, 0, ...
 03325   420   NtContinue  (1244328, 0, ...
 03326   420   NtContinue  (1244328, 0, ...
 03327   420   NtContinue  (1244328, 0, ...
 03328   420   NtContinue  (1244328, 0, ...
 03329   420   NtContinue  (1244328, 0, ...
 03330   420   NtContinue  (1244328, 0, ...
 03331   420   NtContinue  (1244328, 0, ...
 03332   420   NtContinue  (1244328, 0, ...
 03333   420   NtContinue  (1244328, 0, ...
 03334   420   NtContinue  (1244328, 0, ...
 03335   420   NtContinue  (1244328, 0, ...
 03336   420   NtContinue  (1244328, 0, ...
 03337   420   NtContinue  (1244328, 0, ...
 03338   420   NtContinue  (1244328, 0, ...
 03339   420   NtContinue  (1244328, 0, ...
 03340   420   NtContinue  (1244328, 0, ...
 03341   420   NtContinue  (1244328, 0, ...
 03342   420   NtContinue  (1244328, 0, ...
 03343   420   NtContinue  (1244328, 0, ...
 03344   420   NtContinue  (1244328, 0, ...
 03345   420   NtContinue  (1244328, 0, ...
 03346   420   NtContinue  (1244328, 0, ...
 03347   420   NtContinue  (1244328, 0, ...
 03348   420   NtContinue  (1244328, 0, ...
 03349   420   NtContinue  (1244328, 0, ...
 03350   420   NtContinue  (1244328, 0, ...
 03351   420   NtContinue  (1244328, 0, ...
 03352   420   NtContinue  (1244328, 0, ...
 03353   420   NtContinue  (1244328, 0, ...
 03354   420   NtContinue  (1244328, 0, ...
 03355   420   NtContinue  (1244328, 0, ...
 03356   420   NtContinue  (1244328, 0, ...
 03357   420   NtContinue  (1244328, 0, ...
 03358   420   NtContinue  (1244328, 0, ...
 03359   420   NtContinue  (1244328, 0, ...
 03360   420   NtContinue  (1244328, 0, ...
 03361   420   NtContinue  (1244328, 0, ...
 03362   420   NtContinue  (1244328, 0, ...
 03363   420   NtContinue  (1244328, 0, ...
 03364   420   NtContinue  (1244328, 0, ...
 03365   420   NtContinue  (1244328, 0, ...
 03366   420   NtContinue  (1244328, 0, ...
 03367   420   NtContinue  (1244328, 0, ...
 03368   420   NtContinue  (1244328, 0, ...
 03369   420   NtContinue  (1244328, 0, ...
 03370   420   NtContinue  (1244328, 0, ...
 03371   420   NtContinue  (1244328, 0, ...
 03372   420   NtContinue  (1244328, 0, ...
 03373   420   NtContinue  (1244328, 0, ...
 03374   420   NtContinue  (1244328, 0, ...
 03375   420   NtContinue  (1244328, 0, ...
 03376   420   NtContinue  (1244328, 0, ...
 03377   420   NtContinue  (1244328, 0, ...
 03378   420   NtContinue  (1244328, 0, ...
 03379   420   NtContinue  (1244328, 0, ...
 03380   420   NtContinue  (1244328, 0, ...
 03381   420   NtContinue  (1244328, 0, ...
 03382   420   NtContinue  (1244328, 0, ...
 03383   420   NtContinue  (1244328, 0, ...
 03384   420   NtContinue  (1244328, 0, ...
 03385   420   NtContinue  (1244328, 0, ...
 03386   420   NtContinue  (1244328, 0, ...
 03387   420   NtContinue  (1244328, 0, ...
 03388   420   NtContinue  (1244328, 0, ...
 03389   420   NtContinue  (1244328, 0, ...
 03390   420   NtContinue  (1244328, 0, ...
 03391   420   NtContinue  (1244328, 0, ...
 03392   420   NtContinue  (1244328, 0, ...
 03393   420   NtContinue  (1244328, 0, ...
 03394   420   NtContinue  (1244328, 0, ...
 03395   420   NtContinue  (1244328, 0, ...
 03396   420   NtContinue  (1244328, 0, ...
 03397   420   NtContinue  (1244328, 0, ...
 03398   420   NtContinue  (1244328, 0, ...
 03399   420   NtContinue  (1244328, 0, ...
 03400   420   NtContinue  (1244328, 0, ...
 03401   420   NtContinue  (1244328, 0, ...
 03402   420   NtContinue  (1244328, 0, ...
 03403   420   NtContinue  (1244328, 0, ...
 03404   420   NtContinue  (1244328, 0, ...
 03405   420   NtContinue  (1244328, 0, ...
 03406   420   NtContinue  (1244328, 0, ...
 03407   420   NtContinue  (1244328, 0, ...
 03408   420   NtContinue  (1244328, 0, ...
 03409   420   NtContinue  (1244328, 0, ...
 03410   420   NtContinue  (1244328, 0, ...
 03411   420   NtContinue  (1244328, 0, ...
 03412   420   NtContinue  (1244328, 0, ...
 03413   420   NtContinue  (1244328, 0, ...
 03414   420   NtContinue  (1244328, 0, ...
 03415   420   NtContinue  (1244328, 0, ...
 03416   420   NtContinue  (1244328, 0, ...
 03417   420   NtContinue  (1244328, 0, ...
 03418   420   NtContinue  (1244328, 0, ...
 03419   420   NtContinue  (1244328, 0, ...
 03420   420   NtContinue  (1244328, 0, ...
 03421   420   NtContinue  (1244328, 0, ...
 03422   420   NtContinue  (1244328, 0, ...
 03423   420   NtContinue  (1244328, 0, ...
 03424   420   NtContinue  (1244328, 0, ...
 03425   420   NtContinue  (1244328, 0, ...
 03426   420   NtContinue  (1244328, 0, ...
 03427   420   NtContinue  (1244328, 0, ...
 03428   420   NtContinue  (1244328, 0, ...
 03429   420   NtContinue  (1244328, 0, ...
 03430   420   NtContinue  (1244328, 0, ...
 03431   420   NtContinue  (1244328, 0, ...
 03432   420   NtContinue  (1244328, 0, ...
 03433   420   NtContinue  (1244328, 0, ...
 03434   420   NtContinue  (1244328, 0, ...
 03435   420   NtContinue  (1244328, 0, ...
 03436   420   NtContinue  (1244328, 0, ...
 03437   420   NtContinue  (1244328, 0, ...
 03438   420   NtContinue  (1244328, 0, ...
 03439   420   NtContinue  (1244328, 0, ...
 03440   420   NtContinue  (1244328, 0, ...
 03441   420   NtContinue  (1244328, 0, ...
 03442   420   NtContinue  (1244328, 0, ...
 03443   420   NtContinue  (1244328, 0, ...
 03444   420   NtContinue  (1244328, 0, ...
 03445   420   NtContinue  (1244328, 0, ...
 03446   420   NtContinue  (1244328, 0, ...
 03447   420   NtContinue  (1244328, 0, ...
 03448   420   NtContinue  (1244328, 0, ...
 03449   420   NtContinue  (1244328, 0, ...
 03450   420   NtContinue  (1244328, 0, ...
 03451   420   NtContinue  (1244328, 0, ...
 03452   420   NtContinue  (1244328, 0, ...
 03453   420   NtContinue  (1244328, 0, ...
 03454   420   NtContinue  (1244328, 0, ...
 03455   420   NtContinue  (1244328, 0, ...
 03456   420   NtContinue  (1244328, 0, ...
 03457   420   NtContinue  (1244328, 0, ...
 03458   420   NtContinue  (1244328, 0, ...
 03459   420   NtContinue  (1244328, 0, ...
 03460   420   NtContinue  (1244328, 0, ...
 03461   420   NtContinue  (1244328, 0, ...
 03462   420   NtContinue  (1244328, 0, ...
 03463   420   NtContinue  (1244328, 0, ...
 03464   420   NtContinue  (1244328, 0, ...
 03465   420   NtContinue  (1244328, 0, ...
 03466   420   NtContinue  (1244328, 0, ...
 03467   420   NtContinue  (1244328, 0, ...
 03468   420   NtContinue  (1244328, 0, ...
 03469   420   NtContinue  (1244328, 0, ...
 03470   420   NtContinue  (1244328, 0, ...
 03471   420   NtContinue  (1244328, 0, ...
 03472   420   NtContinue  (1244328, 0, ...
 03473   420   NtContinue  (1244328, 0, ...
 03474   420   NtContinue  (1244328, 0, ...
 03475   420   NtContinue  (1244328, 0, ...
 03476   420   NtContinue  (1244328, 0, ...
 03477   420   NtContinue  (1244328, 0, ...
 03478   420   NtContinue  (1244328, 0, ...
 03479   420   NtContinue  (1244328, 0, ...
 03480   420   NtContinue  (1244328, 0, ...
 03481   420   NtContinue  (1244328, 0, ...
 03482   420   NtContinue  (1244328, 0, ...
 03483   420   NtContinue  (1244328, 0, ...
 03484   420   NtContinue  (1244328, 0, ...
 03485   420   NtContinue  (1244328, 0, ...
 03486   420   NtContinue  (1244328, 0, ...
 03487   420   NtContinue  (1244328, 0, ...
 03488   420   NtContinue  (1244328, 0, ...
 03489   420   NtContinue  (1244328, 0, ...
 03490   420   NtContinue  (1244328, 0, ...
 03491   420   NtContinue  (1244328, 0, ...
 03492   420   NtContinue  (1244328, 0, ...
 03493   420   NtContinue  (1244328, 0, ...
 03494   420   NtContinue  (1244328, 0, ...
 03495   420   NtContinue  (1244328, 0, ...
 03496   420   NtContinue  (1244328, 0, ...
 03497   420   NtContinue  (1244328, 0, ...
 03498   420   NtContinue  (1244328, 0, ...
 03499   420   NtContinue  (1244328, 0, ...
 03500   420   NtContinue  (1244328, 0, ...
 03501   420   NtContinue  (1244328, 0, ...
 03502   420   NtContinue  (1244328, 0, ...
 03503   420   NtContinue  (1244328, 0, ...
 03504   420   NtContinue  (1244328, 0, ...
 03505   420   NtContinue  (1244328, 0, ...
 03506   420   NtContinue  (1244328, 0, ...
 03507   420   NtContinue  (1244328, 0, ...
 03508   420   NtContinue  (1244328, 0, ...
 03509   420   NtContinue  (1244328, 0, ...
 03510   420   NtContinue  (1244328, 0, ...
 03511   420   NtContinue  (1244328, 0, ...
 03512   420   NtContinue  (1244328, 0, ...
 03513   420   NtContinue  (1244328, 0, ...
 03514   420   NtContinue  (1244328, 0, ...
 03515   420   NtContinue  (1244328, 0, ...
 03516   420   NtContinue  (1244328, 0, ...
 03517   420   NtContinue  (1244328, 0, ...
 03518   420   NtContinue  (1244328, 0, ...
 03519   420   NtContinue  (1244328, 0, ...
 03520   420   NtContinue  (1244328, 0, ...
 03521   420   NtContinue  (1244328, 0, ...
 03522   420   NtContinue  (1244328, 0, ...
 03523   420   NtContinue  (1244328, 0, ...
 03524   420   NtContinue  (1244328, 0, ...
 03525   420   NtContinue  (1244328, 0, ...
 03526   420   NtContinue  (1244328, 0, ...
 03527   420   NtContinue  (1244328, 0, ...
 03528   420   NtContinue  (1244328, 0, ...
 03529   420   NtContinue  (1244328, 0, ...
 03530   420   NtContinue  (1244328, 0, ...
 03531   420   NtContinue  (1244328, 0, ...
 03532   420   NtContinue  (1244328, 0, ...
 03533   420   NtContinue  (1244328, 0, ...
 03534   420   NtContinue  (1244328, 0, ...
 03535   420   NtContinue  (1244328, 0, ...
 03536   420   NtContinue  (1244328, 0, ...
 03537   420   NtContinue  (1244328, 0, ...
 03538   420   NtContinue  (1244328, 0, ...
 03539   420   NtContinue  (1244328, 0, ...
 03540   420   NtContinue  (1244328, 0, ...
 03541   420   NtContinue  (1244328, 0, ...
 03542   420   NtContinue  (1244328, 0, ...
 03543   420   NtContinue  (1244328, 0, ...
 03544   420   NtContinue  (1244328, 0, ...
 03545   420   NtContinue  (1244328, 0, ...
 03546   420   NtContinue  (1244328, 0, ...
 03547   420   NtContinue  (1244328, 0, ...
 03548   420   NtContinue  (1244328, 0, ...
 03549   420   NtContinue  (1244328, 0, ...
 03550   420   NtContinue  (1244328, 0, ...
 03551   420   NtContinue  (1244328, 0, ...
 03552   420   NtContinue  (1244328, 0, ...
 03553   420   NtContinue  (1244328, 0, ...
 03554   420   NtContinue  (1244328, 0, ...
 03555   420   NtContinue  (1244328, 0, ...
 03556   420   NtContinue  (1244328, 0, ...
 03557   420   NtContinue  (1244328, 0, ...
 03558   420   NtContinue  (1244328, 0, ...
 03559   420   NtContinue  (1244328, 0, ...
 03560   420   NtContinue  (1244328, 0, ...
 03561   420   NtContinue  (1244328, 0, ...
 03562   420   NtContinue  (1244328, 0, ...
 03563   420   NtContinue  (1244328, 0, ...
 03564   420   NtContinue  (1244328, 0, ...
 03565   420   NtContinue  (1244328, 0, ...
 03566   420   NtContinue  (1244328, 0, ...
 03567   420   NtContinue  (1244328, 0, ...
 03568   420   NtContinue  (1244328, 0, ...
 03569   420   NtContinue  (1244328, 0, ...
 03570   420   NtContinue  (1244328, 0, ...
 03571   420   NtContinue  (1244328, 0, ...
 03572   420   NtContinue  (1244328, 0, ...
 03573   420   NtContinue  (1244328, 0, ...
 03574   420   NtContinue  (1244328, 0, ...
 03575   420   NtContinue  (1244328, 0, ...
 03576   420   NtContinue  (1244328, 0, ...
 03577   420   NtContinue  (1244328, 0, ...
 03578   420   NtContinue  (1244328, 0, ...
 03579   420   NtContinue  (1244328, 0, ...
 03580   420   NtContinue  (1244328, 0, ...
 03581   420   NtContinue  (1244328, 0, ...
 03582   420   NtContinue  (1244328, 0, ...
 03583   420   NtContinue  (1244328, 0, ...
 03584   420   NtContinue  (1244328, 0, ...
 03585   420   NtContinue  (1244328, 0, ...
 03586   420   NtContinue  (1244328, 0, ...
 03587   420   NtContinue  (1244328, 0, ...
 03588   420   NtContinue  (1244328, 0, ...
 03589   420   NtContinue  (1244328, 0, ...
 03590   420   NtContinue  (1244328, 0, ...
 03591   420   NtContinue  (1244328, 0, ...
 03592   420   NtContinue  (1244328, 0, ...
 03593   420   NtContinue  (1244328, 0, ...
 03594   420   NtContinue  (1244328, 0, ...
 03595   420   NtContinue  (1244328, 0, ...
 03596   420   NtContinue  (1244328, 0, ...
 03597   420   NtContinue  (1244328, 0, ...
 03598   420   NtContinue  (1244328, 0, ...
 03599   420   NtContinue  (1244328, 0, ...
 03600   420   NtContinue  (1244328, 0, ...
 03601   420   NtContinue  (1244328, 0, ...
 03602   420   NtContinue  (1244328, 0, ...
 03603   420   NtContinue  (1244328, 0, ...
 03604   420   NtContinue  (1244328, 0, ...
 03605   420   NtContinue  (1244328, 0, ...
 03606   420   NtContinue  (1244328, 0, ...
 03607   420   NtContinue  (1244328, 0, ...
 03608   420   NtContinue  (1244328, 0, ...
 03609   420   NtContinue  (1244328, 0, ...
 03610   420   NtContinue  (1244328, 0, ...
 03611   420   NtContinue  (1244328, 0, ...
 03612   420   NtContinue  (1244328, 0, ...
 03613   420   NtContinue  (1244328, 0, ...
 03614   420   NtContinue  (1244328, 0, ...
 03615   420   NtContinue  (1244328, 0, ...
 03616   420   NtContinue  (1244328, 0, ...
 03617   420   NtContinue  (1244328, 0, ...
 03618   420   NtContinue  (1244328, 0, ...
 03619   420   NtContinue  (1244328, 0, ...
 03620   420   NtContinue  (1244328, 0, ...
 03621   420   NtContinue  (1244328, 0, ...
 03622   420   NtContinue  (1244328, 0, ...
 03623   420   NtContinue  (1244328, 0, ...
 03624   420   NtContinue  (1244328, 0, ...
 03625   420   NtContinue  (1244328, 0, ...
 03626   420   NtContinue  (1244328, 0, ...
 03627   420   NtContinue  (1244328, 0, ...
 03628   420   NtContinue  (1244328, 0, ...
 03629   420   NtContinue  (1244328, 0, ...
 03630   420   NtContinue  (1244328, 0, ...
 03631   420   NtContinue  (1244328, 0, ...
 03632   420   NtContinue  (1244328, 0, ...
 03633   420   NtContinue  (1244328, 0, ...
 03634   420   NtContinue  (1244328, 0, ...
 03635   420   NtContinue  (1244328, 0, ...
 03636   420   NtContinue  (1244328, 0, ...
 03637   420   NtContinue  (1244328, 0, ...
 03638   420   NtContinue  (1244328, 0, ...
 03639   420   NtContinue  (1244328, 0, ...
 03640   420   NtContinue  (1244328, 0, ...
 03641   420   NtContinue  (1244328, 0, ...
 03642   420   NtContinue  (1244328, 0, ...
 03643   420   NtContinue  (1244328, 0, ...
 03644   420   NtContinue  (1244328, 0, ...
 03645   420   NtContinue  (1244328, 0, ...
 03646   420   NtContinue  (1244328, 0, ...
 03647   420   NtContinue  (1244328, 0, ...
 03648   420   NtContinue  (1244328, 0, ...
 03649   420   NtContinue  (1244328, 0, ...
 03650   420   NtContinue  (1244328, 0, ...
 03651   420   NtContinue  (1244328, 0, ...
 03652   420   NtContinue  (1244328, 0, ...
 03653   420   NtContinue  (1244328, 0, ...
 03654   420   NtContinue  (1244328, 0, ...
 03655   420   NtContinue  (1244328, 0, ...
 03656   420   NtContinue  (1244328, 0, ...
 03657   420   NtContinue  (1244328, 0, ...
 03658   420   NtContinue  (1244328, 0, ...
 03659   420   NtContinue  (1244328, 0, ...
 03660   420   NtContinue  (1244328, 0, ...
 03661   420   NtContinue  (1244328, 0, ...
 03662   420   NtContinue  (1244328, 0, ...
 03663   420   NtContinue  (1244328, 0, ...
 03664   420   NtContinue  (1244328, 0, ...
 03665   420   NtContinue  (1244328, 0, ...
 03666   420   NtContinue  (1244328, 0, ...
 03667   420   NtContinue  (1244328, 0, ...
 03668   420   NtContinue  (1244328, 0, ...
 03669   420   NtContinue  (1244328, 0, ...
 03670   420   NtContinue  (1244328, 0, ...
 03671   420   NtContinue  (1244328, 0, ...
 03672   420   NtContinue  (1244328, 0, ...
 03673   420   NtContinue  (1244328, 0, ...
 03674   420   NtContinue  (1244328, 0, ...
 03675   420   NtContinue  (1244328, 0, ...
 03676   420   NtContinue  (1244328, 0, ...
 03677   420   NtContinue  (1244328, 0, ...
 03678   420   NtContinue  (1244328, 0, ...
 03679   420   NtContinue  (1244328, 0, ...
 03680   420   NtContinue  (1244328, 0, ...
 03681   420   NtContinue  (1244328, 0, ...
 03682   420   NtContinue  (1244328, 0, ...
 03683   420   NtContinue  (1244328, 0, ...
 03684   420   NtContinue  (1244328, 0, ...
 03685   420   NtContinue  (1244328, 0, ...
 03686   420   NtContinue  (1244328, 0, ...
 03687   420   NtContinue  (1244328, 0, ...
 03688   420   NtContinue  (1244328, 0, ...
 03689   420   NtContinue  (1244328, 0, ...
 03690   420   NtContinue  (1244328, 0, ...
 03691   420   NtContinue  (1244328, 0, ...
 03692   420   NtContinue  (1244328, 0, ...
 03693   420   NtContinue  (1244328, 0, ...
 03694   420   NtContinue  (1244328, 0, ...
 03695   420   NtContinue  (1244328, 0, ...
 03696   420   NtContinue  (1244328, 0, ...
 03697   420   NtContinue  (1244328, 0, ...
 03698   420   NtContinue  (1244328, 0, ...
 03699   420   NtContinue  (1244328, 0, ...
 03700   420   NtContinue  (1244328, 0, ...
 03701   420   NtContinue  (1244328, 0, ...
 03702   420   NtContinue  (1244328, 0, ...
 03703   420   NtContinue  (1244328, 0, ...
 03704   420   NtContinue  (1244328, 0, ...
 03705   420   NtContinue  (1244328, 0, ...
 03706   420   NtContinue  (1244328, 0, ...
 03707   420   NtContinue  (1244328, 0, ...
 03708   420   NtContinue  (1244328, 0, ...
 03709   420   NtContinue  (1244328, 0, ...
 03710   420   NtContinue  (1244328, 0, ...
 03711   420   NtContinue  (1244328, 0, ...
 03712   420   NtContinue  (1244328, 0, ...
 03713   420   NtContinue  (1244328, 0, ...
 03714   420   NtContinue  (1244328, 0, ...
 03715   420   NtContinue  (1244328, 0, ...
 03716   420   NtContinue  (1244328, 0, ...
 03717   420   NtContinue  (1244328, 0, ...
 03718   420   NtContinue  (1244328, 0, ...
 03719   420   NtContinue  (1244328, 0, ...
 03720   420   NtContinue  (1244328, 0, ...
 03721   420   NtContinue  (1244328, 0, ...
 03722   420   NtContinue  (1244328, 0, ...
 03723   420   NtContinue  (1244328, 0, ...
 03724   420   NtContinue  (1244328, 0, ...
 03725   420   NtContinue  (1244328, 0, ...
 03726   420   NtContinue  (1244328, 0, ...
 03727   420   NtContinue  (1244328, 0, ...
 03728   420   NtContinue  (1244328, 0, ...
 03729   420   NtContinue  (1244328, 0, ...
 03730   420   NtContinue  (1244328, 0, ...
 03731   420   NtContinue  (1244328, 0, ...
 03732   420   NtContinue  (1244328, 0, ...
 03733   420   NtContinue  (1244328, 0, ...
 03734   420   NtContinue  (1244328, 0, ...
 03735   420   NtContinue  (1244328, 0, ...
 03736   420   NtContinue  (1244328, 0, ...
 03737   420   NtContinue  (1244328, 0, ...
 03738   420   NtContinue  (1244328, 0, ...
 03739   420   NtContinue  (1244328, 0, ...
 03740   420   NtContinue  (1244328, 0, ...
 03741   420   NtContinue  (1244328, 0, ...
 03742   420   NtContinue  (1244328, 0, ...
 03743   420   NtContinue  (1244328, 0, ...
 03744   420   NtContinue  (1244328, 0, ...
 03745   420   NtContinue  (1244328, 0, ...
 03746   420   NtContinue  (1244328, 0, ...
 03747   420   NtContinue  (1244328, 0, ...
 03748   420   NtContinue  (1244328, 0, ...
 03749   420   NtContinue  (1244328, 0, ...
 03750   420   NtContinue  (1244328, 0, ...
 03751   420   NtContinue  (1244328, 0, ...
 03752   420   NtContinue  (1244328, 0, ...
 03753   420   NtContinue  (1244328, 0, ...
 03754   420   NtContinue  (1244328, 0, ...
 03755   420   NtContinue  (1244328, 0, ...
 03756   420   NtContinue  (1244328, 0, ...
 03757   420   NtContinue  (1244328, 0, ...
 03758   420   NtContinue  (1244328, 0, ...
 03759   420   NtContinue  (1244328, 0, ...
 03760   420   NtContinue  (1244328, 0, ...
 03761   420   NtContinue  (1244328, 0, ...
 03762   420   NtContinue  (1244328, 0, ...
 03763   420   NtContinue  (1244328, 0, ...
 03764   420   NtContinue  (1244328, 0, ...
 03765   420   NtContinue  (1244328, 0, ...
 03766   420   NtContinue  (1244328, 0, ...
 03767   420   NtContinue  (1244328, 0, ...
 03768   420   NtContinue  (1244328, 0, ...
 03769   420   NtContinue  (1244328, 0, ...
 03770   420   NtContinue  (1244328, 0, ...
 03771   420   NtContinue  (1244328, 0, ...
 03772   420   NtContinue  (1244328, 0, ...
 03773   420   NtContinue  (1244328, 0, ...
 03774   420   NtContinue  (1244328, 0, ...
 03775   420   NtContinue  (1244328, 0, ...
 03776   420   NtContinue  (1244328, 0, ...
 03777   420   NtContinue  (1244328, 0, ...
 03778   420   NtContinue  (1244328, 0, ...
 03779   420   NtContinue  (1244328, 0, ...
 03780   420   NtContinue  (1244328, 0, ...
 03781   420   NtContinue  (1244328, 0, ...
 03782   420   NtContinue  (1244328, 0, ...
 03783   420   NtContinue  (1244328, 0, ...
 03784   420   NtContinue  (1244328, 0, ...
 03785   420   NtContinue  (1244328, 0, ...
 03786   420   NtContinue  (1244328, 0, ...
 03787   420   NtContinue  (1244328, 0, ...
 03788   420   NtContinue  (1244328, 0, ...
 03789   420   NtContinue  (1244328, 0, ...
 03790   420   NtContinue  (1244328, 0, ...
 03791   420   NtContinue  (1244328, 0, ...
 03792   420   NtContinue  (1244328, 0, ...
 03793   420   NtContinue  (1244328, 0, ...
 03794   420   NtContinue  (1244328, 0, ...
 03795   420   NtContinue  (1244328, 0, ...
 03796   420   NtContinue  (1244328, 0, ...
 03797   420   NtContinue  (1244328, 0, ...
 03798   420   NtContinue  (1244328, 0, ...
 03799   420   NtContinue  (1244328, 0, ...
 03800   420   NtContinue  (1244328, 0, ...
 03801   420   NtContinue  (1244328, 0, ...
 03802   420   NtContinue  (1244328, 0, ...
 03803   420   NtContinue  (1244328, 0, ...
 03804   420   NtContinue  (1244328, 0, ...
 03805   420   NtContinue  (1244328, 0, ...
 03806   420   NtContinue  (1244328, 0, ...
 03807   420   NtContinue  (1244328, 0, ...
 03808   420   NtContinue  (1244328, 0, ...
 03809   420   NtContinue  (1244328, 0, ...
 03810   420   NtContinue  (1244328, 0, ...
 03811   420   NtContinue  (1244328, 0, ...
 03812   420   NtContinue  (1244328, 0, ...
 03813   420   NtContinue  (1244328, 0, ...
 03814   420   NtContinue  (1244328, 0, ...
 03815   420   NtContinue  (1244328, 0, ...
 03816   420   NtContinue  (1244328, 0, ...
 03817   420   NtContinue  (1244328, 0, ...
 03818   420   NtContinue  (1244328, 0, ...
 03819   420   NtContinue  (1244328, 0, ...
 03820   420   NtContinue  (1244328, 0, ...
 03821   420   NtContinue  (1244328, 0, ...
 03822   420   NtContinue  (1244328, 0, ...
 03823   420   NtContinue  (1244328, 0, ...
 03824   420   NtContinue  (1244328, 0, ...
 03825   420   NtContinue  (1244328, 0, ...
 03826   420   NtContinue  (1244328, 0, ...
 03827   420   NtContinue  (1244328, 0, ...
 03828   420   NtContinue  (1244328, 0, ...
 03829   420   NtContinue  (1244328, 0, ...
 03830   420   NtContinue  (1244328, 0, ...
 03831   420   NtContinue  (1244328, 0, ...
 03832   420   NtContinue  (1244328, 0, ...
 03833   420   NtContinue  (1244328, 0, ...
 03834   420   NtContinue  (1244328, 0, ...
 03835   420   NtContinue  (1244328, 0, ...
 03836   420   NtContinue  (1244328, 0, ...
 03837   420   NtContinue  (1244328, 0, ...
 03838   420   NtContinue  (1244328, 0, ...
 03839   420   NtContinue  (1244328, 0, ...
 03840   420   NtContinue  (1244328, 0, ...
 03841   420   NtContinue  (1244328, 0, ...
 03842   420   NtContinue  (1244328, 0, ...
 03843   420   NtContinue  (1244328, 0, ...
 03844   420   NtContinue  (1244328, 0, ...
 03845   420   NtContinue  (1244328, 0, ...
 03846   420   NtContinue  (1244328, 0, ...
 03847   420   NtContinue  (1244328, 0, ...
 03848   420   NtContinue  (1244328, 0, ...
 03849   420   NtContinue  (1244328, 0, ...
 03850   420   NtContinue  (1244328, 0, ...
 03851   420   NtContinue  (1244328, 0, ...
 03852   420   NtContinue  (1244328, 0, ...
 03853   420   NtContinue  (1244328, 0, ...
 03854   420   NtContinue  (1244328, 0, ...
 03855   420   NtContinue  (1244328, 0, ...
 03856   420   NtContinue  (1244328, 0, ...
 03857   420   NtContinue  (1244328, 0, ...
 03858   420   NtContinue  (1244328, 0, ...
 03859   420   NtContinue  (1244328, 0, ...
 03860   420   NtContinue  (1244328, 0, ...
 03861   420   NtContinue  (1244328, 0, ...
 03862   420   NtContinue  (1244328, 0, ...
 03863   420   NtContinue  (1244328, 0, ...
 03864   420   NtContinue  (1244328, 0, ...
 03865   420   NtContinue  (1244328, 0, ...
 03866   420   NtContinue  (1244328, 0, ...
 03867   420   NtContinue  (1244328, 0, ...
 03868   420   NtContinue  (1244328, 0, ...
 03869   420   NtContinue  (1244328, 0, ...
 03870   420   NtContinue  (1244328, 0, ...
 03871   420   NtContinue  (1244328, 0, ...
 03872   420   NtContinue  (1244328, 0, ...
 03873   420   NtContinue  (1244328, 0, ...
 03874   420   NtContinue  (1244328, 0, ...
 03875   420   NtContinue  (1244328, 0, ...
 03876   420   NtContinue  (1244328, 0, ...
 03877   420   NtContinue  (1244328, 0, ...
 03878   420   NtContinue  (1244328, 0, ...
 03879   420   NtContinue  (1244328, 0, ...
 03880   420   NtContinue  (1244328, 0, ...
 03881   420   NtContinue  (1244328, 0, ...
 03882   420   NtContinue  (1244328, 0, ...
 03883   420   NtContinue  (1244328, 0, ...
 03884   420   NtContinue  (1244328, 0, ...
 03885   420   NtContinue  (1244328, 0, ...
 03886   420   NtContinue  (1244328, 0, ...
 03887   420   NtContinue  (1244328, 0, ...
 03888   420   NtContinue  (1244328, 0, ...
 03889   420   NtContinue  (1244328, 0, ...
 03890   420   NtContinue  (1244328, 0, ...
 03891   420   NtContinue  (1244328, 0, ...
 03892   420   NtContinue  (1244328, 0, ...
 03893   420   NtContinue  (1244328, 0, ...
 03894   420   NtContinue  (1244328, 0, ...
 03895   420   NtContinue  (1244328, 0, ...
 03896   420   NtContinue  (1244328, 0, ...
 03897   420   NtContinue  (1244328, 0, ...
 03898   420   NtContinue  (1244328, 0, ...
 03899   420   NtContinue  (1244328, 0, ...
 03900   420   NtContinue  (1244328, 0, ...
 03901   420   NtContinue  (1244328, 0, ...
 03902   420   NtContinue  (1244328, 0, ...
 03903   420   NtContinue  (1244328, 0, ...
 03904   420   NtContinue  (1244328, 0, ...
 03905   420   NtContinue  (1244328, 0, ...
 03906   420   NtContinue  (1244328, 0, ...
 03907   420   NtContinue  (1244328, 0, ...
 03908   420   NtContinue  (1244328, 0, ...
 03909   420   NtContinue  (1244328, 0, ...
 03910   420   NtContinue  (1244328, 0, ...
 03911   420   NtContinue  (1244328, 0, ...
 03912   420   NtContinue  (1244328, 0, ...
 03913   420   NtContinue  (1244328, 0, ...
 03914   420   NtContinue  (1244328, 0, ...
 03915   420   NtContinue  (1244328, 0, ...
 03916   420   NtContinue  (1244328, 0, ...
 03917   420   NtContinue  (1244328, 0, ...
 03918   420   NtContinue  (1244328, 0, ...
 03919   420   NtContinue  (1244328, 0, ...
 03920   420   NtContinue  (1244328, 0, ...
 03921   420   NtContinue  (1244328, 0, ...
 03922   420   NtContinue  (1244328, 0, ...
 03923   420   NtContinue  (1244328, 0, ...
 03924   420   NtContinue  (1244328, 0, ...
 03925   420   NtContinue  (1244328, 0, ...
 03926   420   NtContinue  (1244328, 0, ...
 03927   420   NtContinue  (1244328, 0, ...
 03928   420   NtContinue  (1244328, 0, ...
 03929   420   NtContinue  (1244328, 0, ...
 03930   420   NtContinue  (1244328, 0, ...
 03931   420   NtContinue  (1244328, 0, ...
 03932   420   NtContinue  (1244328, 0, ...
 03933   420   NtContinue  (1244328, 0, ...
 03934   420   NtContinue  (1244328, 0, ...
 03935   420   NtContinue  (1244328, 0, ...
 03936   420   NtContinue  (1244328, 0, ...
 03937   420   NtContinue  (1244328, 0, ...
 03938   420   NtContinue  (1244328, 0, ...
 03939   420   NtContinue  (1244328, 0, ...
 03940   420   NtContinue  (1244328, 0, ...
 03941   420   NtContinue  (1244328, 0, ...
 03942   420   NtContinue  (1244328, 0, ...
 03943   420   NtContinue  (1244328, 0, ...
 03944   420   NtContinue  (1244328, 0, ...
 03945   420   NtContinue  (1244328, 0, ...
 03946   420   NtContinue  (1244328, 0, ...
 03947   420   NtContinue  (1244328, 0, ...
 03948   420   NtContinue  (1244328, 0, ...
 03949   420   NtContinue  (1244328, 0, ...
 03950   420   NtContinue  (1244328, 0, ...
 03951   420   NtContinue  (1244328, 0, ...
 03952   420   NtContinue  (1244328, 0, ...
 03953   420   NtContinue  (1244328, 0, ...
 03954   420   NtContinue  (1244328, 0, ...
 03955   420   NtContinue  (1244328, 0, ...
 03956   420   NtContinue  (1244328, 0, ...
 03957   420   NtContinue  (1244328, 0, ...
 03958   420   NtContinue  (1244328, 0, ...
 03959   420   NtContinue  (1244328, 0, ...
 03960   420   NtContinue  (1244328, 0, ...
 03961   420   NtContinue  (1244328, 0, ...
 03962   420   NtContinue  (1244328, 0, ...
 03963   420   NtContinue  (1244328, 0, ...
 03964   420   NtContinue  (1244328, 0, ...
 03965   420   NtContinue  (1244328, 0, ...
 03966   420   NtContinue  (1244328, 0, ...
 03967   420   NtContinue  (1244328, 0, ...
 03968   420   NtContinue  (1244328, 0, ...
 03969   420   NtContinue  (1244328, 0, ...
 03970   420   NtContinue  (1244328, 0, ...
 03971   420   NtContinue  (1244328, 0, ...
 03972   420   NtContinue  (1244328, 0, ...
 03973   420   NtContinue  (1244328, 0, ...
 03974   420   NtContinue  (1244328, 0, ...
 03975   420   NtContinue  (1244328, 0, ...
 03976   420   NtContinue  (1244328, 0, ...
 03977   420   NtContinue  (1244328, 0, ...
 03978   420   NtContinue  (1244328, 0, ...
 03979   420   NtContinue  (1244328, 0, ...
 03980   420   NtContinue  (1244328, 0, ...
 03981   420   NtContinue  (1244328, 0, ...
 03982   420   NtContinue  (1244328, 0, ...
 03983   420   NtContinue  (1244328, 0, ...
 03984   420   NtContinue  (1244328, 0, ...
 03985   420   NtContinue  (1244328, 0, ...
 03986   420   NtContinue  (1244328, 0, ...
 03987   420   NtContinue  (1244328, 0, ...
 03988   420   NtContinue  (1244328, 0, ...
 03989   420   NtContinue  (1244328, 0, ...
 03990   420   NtContinue  (1244328, 0, ...
 03991   420   NtContinue  (1244328, 0, ...
 03992   420   NtContinue  (1244328, 0, ...
 03993   420   NtContinue  (1244328, 0, ...
 03994   420   NtContinue  (1244328, 0, ...
 03995   420   NtContinue  (1244328, 0, ...
 03996   420   NtContinue  (1244328, 0, ...
 03997   420   NtContinue  (1244328, 0, ...
 03998   420   NtContinue  (1244328, 0, ...
 03999   420   NtContinue  (1244328, 0, ...
 04000   420   NtContinue  (1244328, 0, ...
 04001   420   NtContinue  (1244328, 0, ...
 04002   420   NtContinue  (1244328, 0, ...
 04003   420   NtContinue  (1244328, 0, ...
 04004   420   NtContinue  (1244328, 0, ...
 04005   420   NtContinue  (1244328, 0, ...
 04006   420   NtContinue  (1244328, 0, ...
 04007   420   NtContinue  (1244328, 0, ...
 04008   420   NtContinue  (1244328, 0, ...
 04009   420   NtContinue  (1244328, 0, ...
 04010   420   NtContinue  (1244328, 0, ...
 04011   420   NtContinue  (1244328, 0, ...
 04012   420   NtContinue  (1244328, 0, ...
 04013   420   NtContinue  (1244328, 0, ...
 04014   420   NtContinue  (1244328, 0, ...
 04015   420   NtContinue  (1244328, 0, ...
 04016   420   NtContinue  (1244328, 0, ...
 04017   420   NtContinue  (1244328, 0, ...
 04018   420   NtContinue  (1244328, 0, ...
 04019   420   NtContinue  (1244328, 0, ...
 04020   420   NtContinue  (1244328, 0, ...
 04021   420   NtContinue  (1244328, 0, ...
 04022   420   NtContinue  (1244328, 0, ...
 04023   420   NtContinue  (1244328, 0, ...
 04024   420   NtContinue  (1244328, 0, ...
 04025   420   NtContinue  (1244328, 0, ...
 04026   420   NtContinue  (1244328, 0, ...
 04027   420   NtContinue  (1244328, 0, ...
 04028   420   NtContinue  (1244328, 0, ...
 04029   420   NtContinue  (1244328, 0, ...
 04030   420   NtContinue  (1244328, 0, ...
 04031   420   NtContinue  (1244328, 0, ...
 04032   420   NtContinue  (1244328, 0, ...
 04033   420   NtContinue  (1244328, 0, ...
 04034   420   NtContinue  (1244328, 0, ...
 04035   420   NtContinue  (1244328, 0, ...
 04036   420   NtContinue  (1244328, 0, ...
 04037   420   NtContinue  (1244328, 0, ...
 04038   420   NtContinue  (1244328, 0, ...
 04039   420   NtContinue  (1244328, 0, ...
 04040   420   NtContinue  (1244328, 0, ...
 04041   420   NtContinue  (1244328, 0, ...
 04042   420   NtContinue  (1244328, 0, ...
 04043   420   NtContinue  (1244328, 0, ...
 04044   420   NtContinue  (1244328, 0, ...
 04045   420   NtContinue  (1244328, 0, ...
 04046   420   NtContinue  (1244328, 0, ...
 04047   420   NtContinue  (1244328, 0, ...
 04048   420   NtContinue  (1244328, 0, ...
 04049   420   NtContinue  (1244328, 0, ...
 04050   420   NtContinue  (1244328, 0, ...
 04051   420   NtContinue  (1244328, 0, ...
 04052   420   NtContinue  (1244328, 0, ...
 04053   420   NtContinue  (1244328, 0, ...
 04054   420   NtContinue  (1244328, 0, ...
 04055   420   NtContinue  (1244328, 0, ...
 04056   420   NtContinue  (1244328, 0, ...
 04057   420   NtContinue  (1244328, 0, ...
 04058   420   NtContinue  (1244328, 0, ...
 04059   420   NtContinue  (1244328, 0, ...
 04060   420   NtContinue  (1244328, 0, ...
 04061   420   NtContinue  (1244328, 0, ...
 04062   420   NtContinue  (1244328, 0, ...
 04063   420   NtContinue  (1244328, 0, ...
 04064   420   NtContinue  (1244328, 0, ...
 04065   420   NtContinue  (1244328, 0, ...
 04066   420   NtContinue  (1244328, 0, ...
 04067   420   NtContinue  (1244328, 0, ...
 04068   420   NtContinue  (1244328, 0, ...
 04069   420   NtContinue  (1244328, 0, ...
 04070   420   NtContinue  (1244328, 0, ...
 04071   420   NtContinue  (1244328, 0, ...
 04072   420   NtContinue  (1244328, 0, ...
 04073   420   NtContinue  (1244328, 0, ...
 04074   420   NtContinue  (1244328, 0, ...
 04075   420   NtContinue  (1244328, 0, ...
 04076   420   NtContinue  (1244328, 0, ...
 04077   420   NtContinue  (1244328, 0, ...
 04078   420   NtContinue  (1244328, 0, ...
 04079   420   NtContinue  (1244328, 0, ...
 04080   420   NtContinue  (1244328, 0, ...
 04081   420   NtContinue  (1244328, 0, ...
 04082   420   NtContinue  (1244328, 0, ...
 04083   420   NtContinue  (1244328, 0, ...
 04084   420   NtContinue  (1244328, 0, ...
 04085   420   NtContinue  (1244328, 0, ...
 04086   420   NtContinue  (1244328, 0, ...
 04087   420   NtContinue  (1244328, 0, ...
 04088   420   NtContinue  (1244328, 0, ...
 04089   420   NtContinue  (1244328, 0, ...
 04090   420   NtContinue  (1244328, 0, ...
 04091   420   NtContinue  (1244328, 0, ...
 04092   420   NtContinue  (1244328, 0, ...
 04093   420   NtContinue  (1244328, 0, ...
 04094   420   NtContinue  (1244328, 0, ...
 04095   420   NtContinue  (1244328, 0, ...
 04096   420   NtContinue  (1244328, 0, ...
 04097   420   NtContinue  (1244328, 0, ...
 04098   420   NtContinue  (1244328, 0, ...
 04099   420   NtContinue  (1244328, 0, ...
 04100   420   NtContinue  (1244328, 0, ...
 04101   420   NtContinue  (1244328, 0, ...
 04102   420   NtContinue  (1244328, 0, ...
 04103   420   NtContinue  (1244328, 0, ...
 04104   420   NtContinue  (1244328, 0, ...
 04105   420   NtContinue  (1244328, 0, ...
 04106   420   NtContinue  (1244328, 0, ...
 04107   420   NtContinue  (1244328, 0, ...
 04108   420   NtContinue  (1244328, 0, ...
 04109   420   NtContinue  (1244328, 0, ...
 04110   420   NtContinue  (1244328, 0, ...
 04111   420   NtContinue  (1244328, 0, ...
 04112   420   NtContinue  (1244328, 0, ...
 04113   420   NtContinue  (1244328, 0, ...
 04114   420   NtContinue  (1244328, 0, ...
 04115   420   NtContinue  (1244328, 0, ...
 04116   420   NtContinue  (1244328, 0, ...
 04117   420   NtContinue  (1244328, 0, ...
 04118   420   NtContinue  (1244328, 0, ...
 04119   420   NtContinue  (1244328, 0, ...
 04120   420   NtContinue  (1244328, 0, ...
 04121   420   NtContinue  (1244328, 0, ...
 04122   420   NtContinue  (1244328, 0, ...
 04123   420   NtContinue  (1244328, 0, ...
 04124   420   NtContinue  (1244328, 0, ...
 04125   420   NtContinue  (1244328, 0, ...
 04126   420   NtContinue  (1244328, 0, ...
 04127   420   NtContinue  (1244328, 0, ...
 04128   420   NtContinue  (1244328, 0, ...
 04129   420   NtContinue  (1244328, 0, ...
 04130   420   NtContinue  (1244328, 0, ...
 04131   420   NtContinue  (1244328, 0, ...
 04132   420   NtContinue  (1244328, 0, ...
 04133   420   NtContinue  (1244328, 0, ...
 04134   420   NtContinue  (1244328, 0, ...
 04135   420   NtContinue  (1244328, 0, ...
 04136   420   NtContinue  (1244328, 0, ...
 04137   420   NtContinue  (1244328, 0, ...
 04138   420   NtContinue  (1244328, 0, ...
 04139   420   NtContinue  (1244328, 0, ...
 04140   420   NtContinue  (1244328, 0, ...
 04141   420   NtContinue  (1244328, 0, ...
 04142   420   NtContinue  (1244328, 0, ...
 04143   420   NtContinue  (1244328, 0, ...
 04144   420   NtContinue  (1244328, 0, ...
 04145   420   NtContinue  (1244328, 0, ...
 04146   420   NtContinue  (1244328, 0, ...
 04147   420   NtContinue  (1244328, 0, ...
 04148   420   NtContinue  (1244328, 0, ...
 04149   420   NtContinue  (1244328, 0, ...
 04150   420   NtContinue  (1244328, 0, ...
 04151   420   NtContinue  (1244328, 0, ...
 04152   420   NtContinue  (1244328, 0, ...
 04153   420   NtContinue  (1244328, 0, ...
 04154   420   NtContinue  (1244328, 0, ...
 04155   420   NtContinue  (1244328, 0, ...
 04156   420   NtContinue  (1244328, 0, ...
 04157   420   NtContinue  (1244328, 0, ...
 04158   420   NtContinue  (1244328, 0, ...
 04159   420   NtContinue  (1244328, 0, ...
 04160   420   NtContinue  (1244328, 0, ...
 04161   420   NtContinue  (1244328, 0, ...
 04162   420   NtContinue  (1244328, 0, ...
 04163   420   NtContinue  (1244328, 0, ...
 04164   420   NtContinue  (1244328, 0, ...
 04165   420   NtContinue  (1244328, 0, ...
 04166   420   NtContinue  (1244328, 0, ...
 04167   420   NtContinue  (1244328, 0, ...
 04168   420   NtContinue  (1244328, 0, ...
 04169   420   NtContinue  (1244328, 0, ...
 04170   420   NtContinue  (1244328, 0, ...
 04171   420   NtContinue  (1244328, 0, ...
 04172   420   NtContinue  (1244328, 0, ...
 04173   420   NtContinue  (1244328, 0, ...
 04174   420   NtContinue  (1244328, 0, ...
 04175   420   NtContinue  (1244328, 0, ...
 04176   420   NtContinue  (1244328, 0, ...
 04177   420   NtContinue  (1244328, 0, ...
 04178   420   NtContinue  (1244328, 0, ...
 04179   420   NtContinue  (1244328, 0, ...
 04180   420   NtContinue  (1244328, 0, ...
 04181   420   NtContinue  (1244328, 0, ...
 04182   420   NtContinue  (1244328, 0, ...
 04183   420   NtContinue  (1244328, 0, ...
 04184   420   NtContinue  (1244328, 0, ...
 04185   420   NtContinue  (1244328, 0, ...
 04186   420   NtContinue  (1244328, 0, ...
 04187   420   NtContinue  (1244328, 0, ...
 04188   420   NtContinue  (1244328, 0, ...
 04189   420   NtContinue  (1244328, 0, ...
 04190   420   NtContinue  (1244328, 0, ...
 04191   420   NtContinue  (1244328, 0, ...
 04192   420   NtContinue  (1244328, 0, ...
 04193   420   NtContinue  (1244328, 0, ...
 04194   420   NtContinue  (1244328, 0, ...
 04195   420   NtContinue  (1244328, 0, ...
 04196   420   NtContinue  (1244328, 0, ...
 04197   420   NtContinue  (1244328, 0, ...
 04198   420   NtContinue  (1244328, 0, ...
 04199   420   NtContinue  (1244328, 0, ...
 04200   420   NtContinue  (1244328, 0, ...
 04201   420   NtContinue  (1244328, 0, ...
 04202   420   NtContinue  (1244328, 0, ...
 04203   420   NtContinue  (1244328, 0, ...
 04204   420   NtContinue  (1244328, 0, ...
 04205   420   NtContinue  (1244328, 0, ...
 04206   420   NtContinue  (1244328, 0, ...
 04207   420   NtContinue  (1244328, 0, ...
 04208   420   NtContinue  (1244328, 0, ...
 04209   420   NtContinue  (1244328, 0, ...
 04210   420   NtContinue  (1244328, 0, ...
 04211   420   NtContinue  (1244328, 0, ...
 04212   420   NtContinue  (1244328, 0, ...
 04213   420   NtContinue  (1244328, 0, ...
 04214   420   NtContinue  (1244328, 0, ...
 04215   420   NtContinue  (1244328, 0, ...
 04216   420   NtContinue  (1244328, 0, ...
 04217   420   NtContinue  (1244328, 0, ...
 04218   420   NtContinue  (1244328, 0, ...
 04219   420   NtContinue  (1244328, 0, ...
 04220   420   NtContinue  (1244328, 0, ...
 04221   420   NtContinue  (1244328, 0, ...
 04222   420   NtContinue  (1244328, 0, ...
 04223   420   NtContinue  (1244328, 0, ...
 04224   420   NtContinue  (1244328, 0, ...
 04225   420   NtContinue  (1244328, 0, ...
 04226   420   NtContinue  (1244328, 0, ...
 04227   420   NtContinue  (1244328, 0, ...
 04228   420   NtContinue  (1244328, 0, ...
 04229   420   NtContinue  (1244328, 0, ...
 04230   420   NtContinue  (1244328, 0, ...
 04231   420   NtContinue  (1244328, 0, ...
 04232   420   NtContinue  (1244328, 0, ...
 04233   420   NtContinue  (1244328, 0, ...
 04234   420   NtContinue  (1244328, 0, ...
 04235   420   NtContinue  (1244328, 0, ...
 04236   420   NtContinue  (1244328, 0, ...
 04237   420   NtContinue  (1244328, 0, ...
 04238   420   NtContinue  (1244328, 0, ...
 04239   420   NtContinue  (1244328, 0, ...
 04240   420   NtContinue  (1244328, 0, ...
 04241   420   NtContinue  (1244328, 0, ...
 04242   420   NtContinue  (1244328, 0, ...
 04243   420   NtContinue  (1244328, 0, ...
 04244   420   NtContinue  (1244328, 0, ...
 04245   420   NtContinue  (1244328, 0, ...
 04246   420   NtContinue  (1244328, 0, ...
 04247   420   NtContinue  (1244328, 0, ...
 04248   420   NtContinue  (1244328, 0, ...
 04249   420   NtContinue  (1244328, 0, ...
 04250   420   NtContinue  (1244328, 0, ...
 04251   420   NtContinue  (1244328, 0, ...
 04252   420   NtContinue  (1244328, 0, ...
 04253   420   NtContinue  (1244328, 0, ...
 04254   420   NtContinue  (1244328, 0, ...
 04255   420   NtContinue  (1244328, 0, ...
 04256   420   NtContinue  (1244328, 0, ...
 04257   420   NtContinue  (1244328, 0, ...
 04258   420   NtContinue  (1244328, 0, ...
 04259   420   NtContinue  (1244328, 0, ...
 04260   420   NtContinue  (1244328, 0, ...
 04261   420   NtContinue  (1244328, 0, ...
 04262   420   NtContinue  (1244328, 0, ...
 04263   420   NtContinue  (1244328, 0, ...
 04264   420   NtContinue  (1244328, 0, ...
 04265   420   NtContinue  (1244328, 0, ...
 04266   420   NtContinue  (1244328, 0, ...
 04267   420   NtContinue  (1244328, 0, ...
 04268   420   NtContinue  (1244328, 0, ...
 04269   420   NtContinue  (1244328, 0, ...
 04270   420   NtContinue  (1244328, 0, ...
 04271   420   NtContinue  (1244328, 0, ...
 04272   420   NtContinue  (1244328, 0, ...
 04273   420   NtContinue  (1244328, 0, ...
 04274   420   NtContinue  (1244328, 0, ...
 04275   420   NtContinue  (1244328, 0, ...
 04276   420   NtContinue  (1244328, 0, ...
 04277   420   NtContinue  (1244328, 0, ...
 04278   420   NtContinue  (1244328, 0, ...
 04279   420   NtContinue  (1244328, 0, ...
 04280   420   NtContinue  (1244328, 0, ...
 04281   420   NtContinue  (1244328, 0, ...
 04282   420   NtContinue  (1244328, 0, ...
 04283   420   NtContinue  (1244328, 0, ...
 04284   420   NtContinue  (1244328, 0, ...
 04285   420   NtContinue  (1244328, 0, ...
 04286   420   NtContinue  (1244328, 0, ...
 04287   420   NtContinue  (1244328, 0, ...
 04288   420   NtContinue  (1244328, 0, ...
 04289   420   NtContinue  (1244328, 0, ...
 04290   420   NtContinue  (1244328, 0, ...
 04291   420   NtContinue  (1244328, 0, ...
 04292   420   NtContinue  (1244328, 0, ...
 04293   420   NtContinue  (1244328, 0, ...
 04294   420   NtContinue  (1244328, 0, ...
 04295   420   NtContinue  (1244328, 0, ...
 04296   420   NtContinue  (1244328, 0, ...
 04297   420   NtContinue  (1244328, 0, ...
 04298   420   NtContinue  (1244328, 0, ...
 04299   420   NtContinue  (1244328, 0, ...
 04300   420   NtContinue  (1244328, 0, ...
 04301   420   NtContinue  (1244328, 0, ...
 04302   420   NtContinue  (1244328, 0, ...
 04303   420   NtContinue  (1244328, 0, ...
 04304   420   NtContinue  (1244328, 0, ...
 04305   420   NtContinue  (1244328, 0, ...
 04306   420   NtContinue  (1244328, 0, ...
 04307   420   NtContinue  (1244328, 0, ...
 04308   420   NtContinue  (1244328, 0, ...
 04309   420   NtContinue  (1244328, 0, ...
 04310   420   NtContinue  (1244328, 0, ...
 04311   420   NtContinue  (1244328, 0, ...
 04312   420   NtContinue  (1244328, 0, ...
 04313   420   NtContinue  (1244328, 0, ...
 04314   420   NtContinue  (1244328, 0, ...
 04315   420   NtContinue  (1244328, 0, ...
 04316   420   NtContinue  (1244328, 0, ...
 04317   420   NtContinue  (1244328, 0, ...
 04318   420   NtContinue  (1244328, 0, ...
 04319   420   NtContinue  (1244328, 0, ...
 04320   420   NtContinue  (1244328, 0, ...
 04321   420   NtContinue  (1244328, 0, ...
 04322   420   NtContinue  (1244328, 0, ...
 04323   420   NtContinue  (1244328, 0, ...
 04324   420   NtContinue  (1244328, 0, ...
 04325   420   NtContinue  (1244328, 0, ...
 04326   420   NtContinue  (1244328, 0, ...
 04327   420   NtContinue  (1244328, 0, ...
 04328   420   NtContinue  (1244328, 0, ...
 04329   420   NtContinue  (1244328, 0, ...
 04330   420   NtContinue  (1244328, 0, ...
 04331   420   NtContinue  (1244328, 0, ...
 04332   420   NtContinue  (1244328, 0, ...
 04333   420   NtContinue  (1244328, 0, ...
 04334   420   NtContinue  (1244328, 0, ...
 04335   420   NtContinue  (1244328, 0, ...
 04336   420   NtContinue  (1244328, 0, ...
 04337   420   NtContinue  (1244328, 0, ...
 04338   420   NtContinue  (1244328, 0, ...
 04339   420   NtContinue  (1244328, 0, ...
 04340   420   NtContinue  (1244328, 0, ...
 04341   420   NtContinue  (1244328, 0, ...
 04342   420   NtContinue  (1244328, 0, ...
 04343   420   NtContinue  (1244328, 0, ...
 04344   420   NtContinue  (1244328, 0, ...
 04345   420   NtContinue  (1244328, 0, ...
 04346   420   NtContinue  (1244328, 0, ...
 04347   420   NtContinue  (1244328, 0, ...
 04348   420   NtContinue  (1244328, 0, ...
 04349   420   NtContinue  (1244328, 0, ...
 04350   420   NtContinue  (1244328, 0, ...
 04351   420   NtContinue  (1244328, 0, ...
 04352   420   NtContinue  (1244328, 0, ...
 04353   420   NtContinue  (1244328, 0, ...
 04354   420   NtContinue  (1244328, 0, ...
 04355   420   NtContinue  (1244328, 0, ...
 04356   420   NtContinue  (1244328, 0, ...
 04357   420   NtContinue  (1244328, 0, ...
 04358   420   NtContinue  (1244328, 0, ...
 04359   420   NtContinue  (1244328, 0, ...
 04360   420   NtContinue  (1244328, 0, ...
 04361   420   NtContinue  (1244328, 0, ...
 04362   420   NtContinue  (1244328, 0, ...
 04363   420   NtContinue  (1244328, 0, ...
 04364   420   NtContinue  (1244328, 0, ...
 04365   420   NtContinue  (1244328, 0, ...
 04366   420   NtContinue  (1244328, 0, ...
 04367   420   NtContinue  (1244328, 0, ...
 04368   420   NtContinue  (1244328, 0, ...
 04369   420   NtContinue  (1244328, 0, ...
 04370   420   NtContinue  (1244328, 0, ...
 04371   420   NtContinue  (1244328, 0, ...
 04372   420   NtContinue  (1244328, 0, ...
 04373   420   NtContinue  (1244328, 0, ...
 04374   420   NtContinue  (1244328, 0, ...
 04375   420   NtContinue  (1244328, 0, ...
 04376   420   NtContinue  (1244328, 0, ...
 04377   420   NtContinue  (1244328, 0, ...
 04378   420   NtContinue  (1244328, 0, ...
 04379   420   NtContinue  (1244328, 0, ...
 04380   420   NtContinue  (1244328, 0, ...
 04381   420   NtContinue  (1244328, 0, ...
 04382   420   NtContinue  (1244328, 0, ...
 04383   420   NtContinue  (1244328, 0, ...
 04384   420   NtContinue  (1244328, 0, ...
 04385   420   NtContinue  (1244328, 0, ...
 04386   420   NtContinue  (1244328, 0, ...
 04387   420   NtContinue  (1244328, 0, ...
 04388   420   NtContinue  (1244328, 0, ...
 04389   420   NtContinue  (1244328, 0, ...
 04390   420   NtContinue  (1244328, 0, ...
 04391   420   NtContinue  (1244328, 0, ...
 04392   420   NtContinue  (1244328, 0, ...
 04393   420   NtContinue  (1244328, 0, ...
 04394   420   NtContinue  (1244328, 0, ...
 04395   420   NtContinue  (1244328, 0, ...
 04396   420   NtContinue  (1244328, 0, ...
 04397   420   NtContinue  (1244328, 0, ...
 04398   420   NtContinue  (1244328, 0, ...
 04399   420   NtContinue  (1244328, 0, ...
 04400   420   NtContinue  (1244328, 0, ...
 04401   420   NtContinue  (1244328, 0, ...
 04402   420   NtContinue  (1244328, 0, ...
 04403   420   NtContinue  (1244328, 0, ...
 04404   420   NtContinue  (1244328, 0, ...
 04405   420   NtContinue  (1244328, 0, ...
 04406   420   NtContinue  (1244328, 0, ...
 04407   420   NtContinue  (1244328, 0, ...
 04408   420   NtContinue  (1244328, 0, ...
 04409   420   NtContinue  (1244328, 0, ...
 04410   420   NtContinue  (1244328, 0, ...
 04411   420   NtContinue  (1244328, 0, ...
 04412   420   NtContinue  (1244328, 0, ...
 04413   420   NtContinue  (1244328, 0, ...
 04414   420   NtContinue  (1244328, 0, ...
 04415   420   NtContinue  (1244328, 0, ...
 04416   420   NtContinue  (1244328, 0, ...
 04417   420   NtContinue  (1244328, 0, ...
 04418   420   NtContinue  (1244328, 0, ...
 04419   420   NtContinue  (1244328, 0, ...
 04420   420   NtContinue  (1244328, 0, ...
 04421   420   NtContinue  (1244328, 0, ...
 04422   420   NtContinue  (1244328, 0, ...
 04423   420   NtContinue  (1244328, 0, ...
 04424   420   NtContinue  (1244328, 0, ...
 04425   420   NtContinue  (1244328, 0, ...
 04426   420   NtContinue  (1244328, 0, ...
 04427   420   NtContinue  (1244328, 0, ...
 04428   420   NtContinue  (1244328, 0, ...
 04429   420   NtContinue  (1244328, 0, ...
 04430   420   NtContinue  (1244328, 0, ...
 04431   420   NtContinue  (1244328, 0, ...
 04432   420   NtContinue  (1244328, 0, ...
 04433   420   NtContinue  (1244328, 0, ...
 04434   420   NtContinue  (1244328, 0, ...
 04435   420   NtContinue  (1244328, 0, ...
 04436   420   NtContinue  (1244328, 0, ...
 04437   420   NtContinue  (1244328, 0, ...
 04438   420   NtContinue  (1244328, 0, ...
 04439   420   NtContinue  (1244328, 0, ...
 04440   420   NtContinue  (1244328, 0, ...
 04441   420   NtContinue  (1244328, 0, ...
 04442   420   NtContinue  (1244328, 0, ...
 04443   420   NtContinue  (1244328, 0, ...
 04444   420   NtContinue  (1244328, 0, ...
 04445   420   NtContinue  (1244328, 0, ...
 04446   420   NtContinue  (1244328, 0, ...
 04447   420   NtContinue  (1244328, 0, ...
 04448   420   NtContinue  (1244328, 0, ...
 04449   420   NtContinue  (1244328, 0, ...
 04450   420   NtContinue  (1244328, 0, ...
 04451   420   NtContinue  (1244328, 0, ...
 04452   420   NtContinue  (1244328, 0, ...
 04453   420   NtContinue  (1244328, 0, ...
 04454   420   NtContinue  (1244328, 0, ...
 04455   420   NtContinue  (1244328, 0, ...
 04456   420   NtContinue  (1244328, 0, ...
 04457   420   NtContinue  (1244328, 0, ...
 04458   420   NtContinue  (1244328, 0, ...
 04459   420   NtContinue  (1244328, 0, ...
 04460   420   NtContinue  (1244328, 0, ...
 04461   420   NtContinue  (1244328, 0, ...
 04462   420   NtContinue  (1244328, 0, ...
 04463   420   NtContinue  (1244328, 0, ...
 04464   420   NtContinue  (1244328, 0, ...
 04465   420   NtContinue  (1244328, 0, ...
 04466   420   NtContinue  (1244328, 0, ...
 04467   420   NtContinue  (1244328, 0, ...
 04468   420   NtContinue  (1244328, 0, ...
 04469   420   NtContinue  (1244328, 0, ...
 04470   420   NtContinue  (1244328, 0, ...
 04471   420   NtContinue  (1244328, 0, ...
 04472   420   NtContinue  (1244328, 0, ...
 04473   420   NtContinue  (1244328, 0, ...
 04474   420   NtContinue  (1244328, 0, ...
 04475   420   NtContinue  (1244328, 0, ...
 04476   420   NtContinue  (1244328, 0, ...
 04477   420   NtContinue  (1244328, 0, ...
 04478   420   NtContinue  (1244328, 0, ...
 04479   420   NtContinue  (1244328, 0, ...
 04480   420   NtContinue  (1244328, 0, ...
 04481   420   NtContinue  (1244328, 0, ...
 04482   420   NtContinue  (1244328, 0, ...
 04483   420   NtContinue  (1244328, 0, ...
 04484   420   NtContinue  (1244328, 0, ...
 04485   420   NtContinue  (1244328, 0, ...
 04486   420   NtContinue  (1244328, 0, ...
 04487   420   NtContinue  (1244328, 0, ...
 04488   420   NtContinue  (1244328, 0, ...
 04489   420   NtContinue  (1244328, 0, ...
 04490   420   NtContinue  (1244328, 0, ...
 04491   420   NtContinue  (1244328, 0, ...
 04492   420   NtContinue  (1244328, 0, ...
 04493   420   NtContinue  (1244328, 0, ...
 04494   420   NtContinue  (1244328, 0, ...
 04495   420   NtContinue  (1244328, 0, ...
 04496   420   NtContinue  (1244328, 0, ...
 04497   420   NtContinue  (1244328, 0, ...
 04498   420   NtContinue  (1244328, 0, ...
 04499   420   NtContinue  (1244328, 0, ...
 04500   420   NtContinue  (1244328, 0, ...
 04501   420   NtContinue  (1244328, 0, ...
 04502   420   NtContinue  (1244328, 0, ...
 04503   420   NtContinue  (1244328, 0, ...
 04504   420   NtContinue  (1244328, 0, ...
 04505   420   NtContinue  (1244328, 0, ...
 04506   420   NtContinue  (1244328, 0, ...
 04507   420   NtContinue  (1244328, 0, ...
 04508   420   NtContinue  (1244328, 0, ...
 04509   420   NtContinue  (1244328, 0, ...
 04510   420   NtContinue  (1244328, 0, ...
 04511   420   NtContinue  (1244328, 0, ...
 04512   420   NtContinue  (1244328, 0, ...
 04513   420   NtContinue  (1244328, 0, ...
 04514   420   NtContinue  (1244328, 0, ...
 04515   420   NtContinue  (1244328, 0, ...
 04516   420   NtContinue  (1244328, 0, ...
 04517   420   NtContinue  (1244328, 0, ...
 04518   420   NtContinue  (1244328, 0, ...
 04519   420   NtContinue  (1244328, 0, ...
 04520   420   NtContinue  (1244328, 0, ...
 04521   420   NtContinue  (1244328, 0, ...
 04522   420   NtContinue  (1244328, 0, ...
 04523   420   NtContinue  (1244328, 0, ...
 04524   420   NtContinue  (1244328, 0, ...
 04525   420   NtContinue  (1244328, 0, ...
 04526   420   NtContinue  (1244328, 0, ...
 04527   420   NtContinue  (1244328, 0, ...
 04528   420   NtContinue  (1244328, 0, ...
 04529   420   NtContinue  (1244328, 0, ...
 04530   420   NtContinue  (1244328, 0, ...
 04531   420   NtContinue  (1244328, 0, ...
 04532   420   NtContinue  (1244328, 0, ...
 04533   420   NtContinue  (1244328, 0, ...
 04534   420   NtContinue  (1244328, 0, ...
 04535   420   NtContinue  (1244328, 0, ...
 04536   420   NtContinue  (1244328, 0, ...
 04537   420   NtContinue  (1244328, 0, ...
 04538   420   NtContinue  (1244328, 0, ...
 04539   420   NtContinue  (1244328, 0, ...
 04540   420   NtContinue  (1244328, 0, ...
 04541   420   NtContinue  (1244328, 0, ...
 04542   420   NtContinue  (1244328, 0, ...
 04543   420   NtContinue  (1244328, 0, ...
 04544   420   NtContinue  (1244328, 0, ...
 04545   420   NtContinue  (1244328, 0, ...
 04546   420   NtContinue  (1244328, 0, ...
 04547   420   NtContinue  (1244328, 0, ...
 04548   420   NtContinue  (1244328, 0, ...
 04549   420   NtContinue  (1244328, 0, ...
 04550   420   NtContinue  (1244328, 0, ...
 04551   420   NtContinue  (1244328, 0, ...
 04552   420   NtContinue  (1244328, 0, ...
 04553   420   NtContinue  (1244328, 0, ...
 04554   420   NtContinue  (1244328, 0, ...
 04555   420   NtContinue  (1244328, 0, ...
 04556   420   NtContinue  (1244328, 0, ...
 04557   420   NtContinue  (1244328, 0, ...
 04558   420   NtContinue  (1244328, 0, ...
 04559   420   NtContinue  (1244328, 0, ...
 04560   420   NtContinue  (1244328, 0, ...
 04561   420   NtContinue  (1244328, 0, ...
 04562   420   NtContinue  (1244328, 0, ...
 04563   420   NtContinue  (1244328, 0, ...
 04564   420   NtContinue  (1244328, 0, ...
 04565   420   NtContinue  (1244328, 0, ...
 04566   420   NtContinue  (1244328, 0, ...
 04567   420   NtContinue  (1244328, 0, ...
 04568   420   NtContinue  (1244328, 0, ...
 04569   420   NtContinue  (1244328, 0, ...
 04570   420   NtContinue  (1244328, 0, ...
 04571   420   NtContinue  (1244328, 0, ...
 04572   420   NtContinue  (1244328, 0, ...
 04573   420   NtContinue  (1244328, 0, ...
 04574   420   NtContinue  (1244328, 0, ...
 04575   420   NtContinue  (1244328, 0, ...
 04576   420   NtContinue  (1244328, 0, ...
 04577   420   NtContinue  (1244328, 0, ...
 04578   420   NtContinue  (1244328, 0, ...
 04579   420   NtContinue  (1244328, 0, ...
 04580   420   NtContinue  (1244328, 0, ...
 04581   420   NtContinue  (1244328, 0, ...
 04582   420   NtContinue  (1244328, 0, ...
 04583   420   NtContinue  (1244328, 0, ...
 04584   420   NtContinue  (1244328, 0, ...
 04585   420   NtContinue  (1244328, 0, ...
 04586   420   NtContinue  (1244328, 0, ...
 04587   420   NtContinue  (1244328, 0, ...
 04588   420   NtContinue  (1244328, 0, ...
 04589   420   NtContinue  (1244328, 0, ...
 04590   420   NtContinue  (1244328, 0, ...
 04591   420   NtContinue  (1244328, 0, ...
 04592   420   NtContinue  (1244328, 0, ...
 04593   420   NtContinue  (1244328, 0, ...
 04594   420   NtContinue  (1244328, 0, ...
 04595   420   NtContinue  (1244328, 0, ...
 04596   420   NtContinue  (1244328, 0, ...
 04597   420   NtContinue  (1244328, 0, ...
 04598   420   NtContinue  (1244328, 0, ...
 04599   420   NtContinue  (1244328, 0, ...
 04600   420   NtContinue  (1244328, 0, ...
 04601   420   NtContinue  (1244328, 0, ...
 04602   420   NtContinue  (1244328, 0, ...
 04603   420   NtContinue  (1244328, 0, ...
 04604   420   NtContinue  (1244328, 0, ...
 04605   420   NtContinue  (1244328, 0, ...
 04606   420   NtContinue  (1244328, 0, ...
 04607   420   NtContinue  (1244328, 0, ...
 04608   420   NtContinue  (1244328, 0, ...
 04609   420   NtContinue  (1244328, 0, ...
 04610   420   NtContinue  (1244328, 0, ...
 04611   420   NtContinue  (1244328, 0, ...
 04612   420   NtContinue  (1244328, 0, ...
 04613   420   NtContinue  (1244328, 0, ...
 04614   420   NtContinue  (1244328, 0, ...
 04615   420   NtContinue  (1244328, 0, ...
 04616   420   NtContinue  (1244328, 0, ...
 04617   420   NtContinue  (1244328, 0, ...
 04618   420   NtContinue  (1244328, 0, ...
 04619   420   NtContinue  (1244328, 0, ...
 04620   420   NtContinue  (1244328, 0, ...
 04621   420   NtContinue  (1244328, 0, ...
 04622   420   NtContinue  (1244328, 0, ...
 04623   420   NtContinue  (1244328, 0, ...
 04624   420   NtContinue  (1244328, 0, ...
 04625   420   NtContinue  (1244328, 0, ...
 04626   420   NtContinue  (1244328, 0, ...
 04627   420   NtContinue  (1244328, 0, ...
 04628   420   NtContinue  (1244328, 0, ...
 04629   420   NtContinue  (1244328, 0, ...
 04630   420   NtContinue  (1244328, 0, ...
 04631   420   NtContinue  (1244328, 0, ...
 04632   420   NtContinue  (1244328, 0, ...
 04633   420   NtContinue  (1244328, 0, ...
 04634   420   NtContinue  (1244328, 0, ...
 04635   420   NtContinue  (1244328, 0, ...
 04636   420   NtContinue  (1244328, 0, ...
 04637   420   NtContinue  (1244328, 0, ...
 04638   420   NtContinue  (1244328, 0, ...
 04639   420   NtContinue  (1244328, 0, ...
 04640   420   NtContinue  (1244328, 0, ...
 04641   420   NtContinue  (1244328, 0, ...
 04642   420   NtContinue  (1244328, 0, ...
 04643   420   NtContinue  (1244328, 0, ...
 04644   420   NtContinue  (1244328, 0, ...
 04645   420   NtContinue  (1244328, 0, ...
 04646   420   NtContinue  (1244328, 0, ...
 04647   420   NtContinue  (1244328, 0, ...
 04648   420   NtContinue  (1244328, 0, ...
 04649   420   NtContinue  (1244328, 0, ...
 04650   420   NtContinue  (1244328, 0, ...
 04651   420   NtContinue  (1244328, 0, ...
 04652   420   NtContinue  (1244328, 0, ...
 04653   420   NtContinue  (1244328, 0, ...
 04654   420   NtContinue  (1244328, 0, ...
 04655   420   NtContinue  (1244328, 0, ...
 04656   420   NtContinue  (1244328, 0, ...
 04657   420   NtContinue  (1244328, 0, ...
 04658   420   NtContinue  (1244328, 0, ...
 04659   420   NtContinue  (1244328, 0, ...
 04660   420   NtContinue  (1244328, 0, ...
 04661   420   NtContinue  (1244328, 0, ...
 04662   420   NtContinue  (1244328, 0, ...
 04663   420   NtContinue  (1244328, 0, ...
 04664   420   NtContinue  (1244328, 0, ...
 04665   420   NtContinue  (1244328, 0, ...
 04666   420   NtContinue  (1244328, 0, ...
 04667   420   NtContinue  (1244328, 0, ...
 04668   420   NtContinue  (1244328, 0, ...
 04669   420   NtContinue  (1244328, 0, ...
 04670   420   NtContinue  (1244328, 0, ...
 04671   420   NtContinue  (1244328, 0, ...
 04672   420   NtContinue  (1244328, 0, ...
 04673   420   NtContinue  (1244328, 0, ...
 04674   420   NtContinue  (1244328, 0, ...
 04675   420   NtContinue  (1244328, 0, ...
 04676   420   NtContinue  (1244328, 0, ...
 04677   420   NtContinue  (1244328, 0, ...
 04678   420   NtContinue  (1244328, 0, ...
 04679   420   NtContinue  (1244328, 0, ...
 04680   420   NtContinue  (1244328, 0, ...
 04681   420   NtContinue  (1244328, 0, ...
 04682   420   NtContinue  (1244328, 0, ...
 04683   420   NtContinue  (1244328, 0, ...
 04684   420   NtContinue  (1244328, 0, ...
 04685   420   NtContinue  (1244328, 0, ...
 04686   420   NtContinue  (1244328, 0, ...
 04687   420   NtContinue  (1244328, 0, ...
 04688   420   NtContinue  (1244328, 0, ...
 04689   420   NtContinue  (1244328, 0, ...
 04690   420   NtContinue  (1244328, 0, ...
 04691   420   NtContinue  (1244328, 0, ...
 04692   420   NtContinue  (1244328, 0, ...
 04693   420   NtContinue  (1244328, 0, ...
 04694   420   NtContinue  (1244328, 0, ...
 04695   420   NtContinue  (1244328, 0, ...
 04696   420   NtContinue  (1244328, 0, ...
 04697   420   NtContinue  (1244328, 0, ...
 04698   420   NtContinue  (1244328, 0, ...
 04699   420   NtContinue  (1244328, 0, ...
 04700   420   NtContinue  (1244328, 0, ...
 04701   420   NtContinue  (1244328, 0, ...
 04702   420   NtContinue  (1244328, 0, ...
 04703   420   NtContinue  (1244328, 0, ...
 04704   420   NtContinue  (1244328, 0, ...
 04705   420   NtContinue  (1244328, 0, ...
 04706   420   NtContinue  (1244328, 0, ...
 04707   420   NtContinue  (1244328, 0, ...
 04708   420   NtContinue  (1244328, 0, ...
 04709   420   NtContinue  (1244328, 0, ...
 04710   420   NtContinue  (1244328, 0, ...
 04711   420   NtContinue  (1244328, 0, ...
 04712   420   NtContinue  (1244328, 0, ...
 04713   420   NtContinue  (1244328, 0, ...
 04714   420   NtContinue  (1244328, 0, ...
 04715   420   NtContinue  (1244328, 0, ...
 04716   420   NtContinue  (1244328, 0, ...
 04717   420   NtContinue  (1244328, 0, ...
 04718   420   NtContinue  (1244328, 0, ...
 04719   420   NtContinue  (1244328, 0, ...
 04720   420   NtContinue  (1244328, 0, ...
 04721   420   NtContinue  (1244328, 0, ...
 04722   420   NtContinue  (1244328, 0, ...
 04723   420   NtContinue  (1244328, 0, ...
 04724   420   NtContinue  (1244328, 0, ...
 04725   420   NtContinue  (1244328, 0, ...
 04726   420   NtContinue  (1244328, 0, ...
 04727   420   NtContinue  (1244324, 0, ...
 04728   420   NtContinue  (1244324, 0, ...
 04729   420   NtContinue  (1244324, 0, ...
 04730   420   NtContinue  (1244324, 0, ...
 04731   420   NtContinue  (1244324, 0, ...
 04732   420   NtContinue  (1244324, 0, ...
 04733   420   NtContinue  (1244324, 0, ...
 04734   420   NtContinue  (1244324, 0, ...
 04735   420   NtContinue  (1244324, 0, ...
 04736   420   NtContinue  (1244324, 0, ...
 04737   420   NtContinue  (1244324, 0, ...
 04738   420   NtContinue  (1244324, 0, ...
 04739   420   NtContinue  (1244324, 0, ...
 04740   420   NtContinue  (1244324, 0, ...
 04741   420   NtContinue  (1244324, 0, ...
 04742   420   NtContinue  (1244324, 0, ...
 04743   420   NtContinue  (1244324, 0, ...
 04744   420   NtContinue  (1244324, 0, ...
 04745   420   NtContinue  (1244324, 0, ...
 04746   420   NtContinue  (1244324, 0, ...
 04747   420   NtContinue  (1244324, 0, ...
 04748   420   NtContinue  (1244324, 0, ...
 04749   420   NtContinue  (1244324, 0, ...
 04750   420   NtContinue  (1244324, 0, ...
 04751   420   NtContinue  (1244324, 0, ...
 04752   420   NtContinue  (1244324, 0, ...
 04753   420   NtContinue  (1244324, 0, ...
 04754   420   NtContinue  (1244324, 0, ...
 04755   420   NtContinue  (1244324, 0, ...
 04756   420   NtContinue  (1244324, 0, ...
 04757   420   NtContinue  (1244324, 0, ...
 04758   420   NtContinue  (1244324, 0, ...
 04759   420   NtContinue  (1244328, 0, ...
 04760   420   NtContinue  (1244324, 0, ...
 04761   420   NtContinue  (1244324, 0, ...
 04762   420   NtContinue  (1244324, 0, ...
 04763   420   NtContinue  (1244324, 0, ...
 04764   420   NtContinue  (1244328, 0, ...
 04765   420   NtContinue  (1244324, 0, ...
 04766   420   NtContinue  (1244324, 0, ...
 04767   420   NtContinue  (1244324, 0, ...
 04768   420   NtContinue  (1244328, 0, ...
 04769   420   NtContinue  (1244324, 0, ...
 04770   420   NtContinue  (1244324, 0, ...
 04771   420   NtContinue  (1244328, 0, ...
 04772   420   NtContinue  (1244324, 0, ...
 04773   420   NtContinue  (1244324, 0, ...
 04774   420   NtContinue  (1244324, 0, ...
 04775   420   NtContinue  (1244324, 0, ...
 04776   420   NtContinue  (1244324, 0, ...
 04777   420   NtContinue  (1244324, 0, ...
 04778   420   NtContinue  (1244328, 0, ...
 04779   420   NtContinue  (1244324, 0, ...
 04780   420   NtContinue  (1244324, 0, ...
 04781   420   NtContinue  (1244324, 0, ...
 04782   420   NtContinue  (1244324, 0, ...
 04783   420   NtContinue  (1244324, 0, ...
 04784   420   NtContinue  (1244324, 0, ...
 04785   420   NtContinue  (1244328, 0, ...
 04786   420   NtContinue  (1244324, 0, ...
 04787   420   NtContinue  (1244324, 0, ...
 04788   420   NtContinue  (1244324, 0, ...
 04789   420   NtContinue  (1244324, 0, ...
 04790   420   NtContinue  (1244324, 0, ...
 04791   420   NtContinue  (1244324, 0, ...
 04792   420   NtContinue  (1244324, 0, ...
 04793   420   NtContinue  (1244324, 0, ...
 04794   420   NtContinue  (1244324, 0, ...
 04795   420   NtContinue  (1244324, 0, ...
 04796   420   NtContinue  (1244324, 0, ...
 04797   420   NtContinue  (1244324, 0, ...
 04798   420   NtContinue  (1244324, 0, ...
 04799   420   NtContinue  (1244324, 0, ...
 04800   420   NtContinue  (1244324, 0, ...
 04801   420   NtContinue  (1244324, 0, ...
 04802   420   NtContinue  (1244324, 0, ...
 04803   420   NtContinue  (1244324, 0, ...
 04804   420   NtContinue  (1244324, 0, ...
 04805   420   NtContinue  (1244324, 0, ...
 04806   420   NtContinue  (1244324, 0, ...
 04807   420   NtContinue  (1244324, 0, ...
 04808   420   NtContinue  (1244324, 0, ...
 04809   420   NtContinue  (1244324, 0, ...
 04810   420   NtContinue  (1244324, 0, ...
 04811   420   NtContinue  (1244324, 0, ...
 04812   420   NtContinue  (1244324, 0, ...
 04813   420   NtContinue  (1244324, 0, ...
 04814   420   NtContinue  (1244324, 0, ...
 04815   420   NtContinue  (1244324, 0, ...
 04816   420   NtContinue  (1244324, 0, ...
 04817   420   NtContinue  (1244324, 0, ...
 04818   420   NtContinue  (1244324, 0, ...
 04819   420   NtContinue  (1244324, 0, ...
 04820   420   NtContinue  (1244324, 0, ...
 04821   420   NtContinue  (1244324, 0, ...
 04822   420   NtContinue  (1244324, 0, ...
 04823   420   NtContinue  (1244324, 0, ...
 04824   420   NtContinue  (1244324, 0, ...
 04825   420   NtContinue  (1244324, 0, ...
 04826   420   NtContinue  (1244324, 0, ...
 04827   420   NtContinue  (1244324, 0, ...
 04828   420   NtContinue  (1244324, 0, ...
 04829   420   NtContinue  (1244324, 0, ...
 04830   420   NtContinue  (1244324, 0, ...
 04831   420   NtContinue  (1244324, 0, ...
 04832   420   NtContinue  (1244324, 0, ...
 04833   420   NtContinue  (1244328, 0, ...
 04834   420   NtContinue  (1244324, 0, ...
 04835   420   NtContinue  (1244328, 0, ...
 04836   420   NtContinue  (1244324, 0, ...
 04837   420   NtContinue  (1244324, 0, ...
 04838   420   NtContinue  (1244324, 0, ...
 04839   420   NtContinue  (1244324, 0, ...
 04840   420   NtContinue  (1244324, 0, ...
 04841   420   NtContinue  (1244324, 0, ...
 04842   420   NtContinue  (1244324, 0, ...
 04843   420   NtContinue  (1244324, 0, ...
 04844   420   NtContinue  (1244324, 0, ...
 04845   420   NtContinue  (1244324, 0, ...
 04846   420   NtContinue  (1244324, 0, ...
 04847   420   NtContinue  (1244324, 0, ...
 04848   420   NtContinue  (1244324, 0, ...
 04849   420   NtContinue  (1244324, 0, ...
 04850   420   NtContinue  (1244324, 0, ...
 04851   420   NtContinue  (1244324, 0, ...
 04852   420   NtContinue  (1244324, 0, ...
 04853   420   NtContinue  (1244324, 0, ...
 04854   420   NtContinue  (1244324, 0, ...
 04855   420   NtContinue  (1244324, 0, ...
 04856   420   NtContinue  (1244324, 0, ...
 04857   420   NtContinue  (1244324, 0, ...
 04858   420   NtContinue  (1244324, 0, ...
 04859   420   NtContinue  (1244328, 0, ...
 04860   420   NtContinue  (1244324, 0, ...
 04861   420   NtContinue  (1244324, 0, ...
 04862   420   NtContinue  (1244324, 0, ...
 04863   420   NtContinue  (1244324, 0, ...
 04864   420   NtContinue  (1244324, 0, ...
 04865   420   NtContinue  (1244324, 0, ...
 04866   420   NtContinue  (1244324, 0, ...
 04867   420   NtContinue  (1244324, 0, ...
 04868   420   NtContinue  (1244324, 0, ...
 04869   420   NtContinue  (1244324, 0, ...
 04870   420   NtContinue  (1244328, 0, ...
 04871   420   NtContinue  (1244324, 0, ...
 04872   420   NtContinue  (1244324, 0, ...
 04873   420   NtContinue  (1244328, 0, ...
 04874   420   NtContinue  (1244324, 0, ...
 04875   420   NtContinue  (1244324, 0, ...
 04876   420   NtContinue  (1244324, 0, ...
 04877   420   NtContinue  (1244324, 0, ...
 04878   420   NtContinue  (1244324, 0, ...
 04879   420   NtContinue  (1244324, 0, ...
 04880   420   NtContinue  (1244324, 0, ...
 04881   420   NtContinue  (1244324, 0, ...
 04882   420   NtContinue  (1244324, 0, ...
 04883   420   NtContinue  (1244324, 0, ...
 04884   420   NtContinue  (1244324, 0, ...
 04885   420   NtContinue  (1244324, 0, ...
 04886   420   NtContinue  (1244324, 0, ...
 04887   420   NtContinue  (1244324, 0, ...
 04888   420   NtContinue  (1244324, 0, ...
 04889   420   NtContinue  (1244324, 0, ...
 04890   420   NtContinue  (1244324, 0, ...
 04891   420   NtContinue  (1244324, 0, ...
 04892   420   NtContinue  (1244324, 0, ...
 04893   420   NtContinue  (1244324, 0, ...
 04894   420   NtContinue  (1244324, 0, ...
 04895   420   NtContinue  (1244324, 0, ...
 04896   420   NtContinue  (1244324, 0, ...
 04897   420   NtContinue  (1244324, 0, ...
 04898   420   NtContinue  (1244324, 0, ...
 04899   420   NtContinue  (1244324, 0, ...
 04900   420   NtContinue  (1244324, 0, ...
 04901   420   NtContinue  (1244328, 0, ...
 04902   420   NtContinue  (1244324, 0, ...
 04903   420   NtContinue  (1244324, 0, ...
 04904   420   NtContinue  (1244328, 0, ...
 04905   420   NtContinue  (1244324, 0, ...
 04906   420   NtContinue  (1244324, 0, ...
 04907   420   NtContinue  (1244324, 0, ...
 04908   420   NtContinue  (1244324, 0, ...
 04909   420   NtContinue  (1244324, 0, ...
 04910   420   NtContinue  (1244324, 0, ...
 04911   420   NtContinue  (1244324, 0, ...
 04912   420   NtContinue  (1244324, 0, ...
 04913   420   NtContinue  (1244324, 0, ...
 04914   420   NtContinue  (1244324, 0, ...
 04915   420   NtContinue  (1244324, 0, ...
 04916   420   NtContinue  (1244324, 0, ...
 04917   420   NtContinue  (1244324, 0, ...
 04918   420   NtContinue  (1244324, 0, ...
 04919   420   NtContinue  (1244324, 0, ...
 04920   420   NtContinue  (1244324, 0, ...
 04921   420   NtContinue  (1244324, 0, ...
 04922   420   NtContinue  (1244324, 0, ...
 04923   420   NtContinue  (1244324, 0, ...
 04924   420   NtContinue  (1244324, 0, ...
 04925   420   NtContinue  (1244324, 0, ...
 04926   420   NtContinue  (1244324, 0, ...
 04927   420   NtContinue  (1244324, 0, ...
 04928   420   NtContinue  (1244324, 0, ...
 04929   420   NtContinue  (1244324, 0, ...
 04930   420   NtContinue  (1244324, 0, ...
 04931   420   NtContinue  (1244324, 0, ...
 04932   420   NtContinue  (1244324, 0, ...
 04933   420   NtContinue  (1244324, 0, ...
 04934   420   NtContinue  (1244324, 0, ...
 04935   420   NtContinue  (1244324, 0, ...
 04936   420   NtContinue  (1244324, 0, ...
 04937   420   NtContinue  (1244324, 0, ...
 04938   420   NtContinue  (1244324, 0, ...
 04939   420   NtContinue  (1244324, 0, ...
 04940   420   NtContinue  (1244328, 0, ...
 04941   420   NtContinue  (1244324, 0, ...
 04942   420   NtContinue  (1244324, 0, ...
 04943   420   NtContinue  (1244312, 0, ...
 04944   420   NtContinue  (1244292, 0, ...
 04945   420   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04946   420   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04947   420   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04948   420   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04950   420   NtReleaseMutant  (16, ...
 04951   420   NtContinue  (-131039096, 0, ...
 04950   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04952   420   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04953   420   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04954   420   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04955   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04956   420   NtReleaseMutant  (16, ...
 04957   420   NtContinue  (-131039096, 0, ...
 04956   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04958   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04959   420   NtReleaseMutant  (16, ...
 04960   420   NtContinue  (-131039096, 0, ...
 04959   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04961   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04962   420   NtReleaseMutant  (16, ...
 04963   420   NtContinue  (-131039096, 0, ...
 04962   420   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04964   420   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04965   420   NtReleaseMutant  (16, ...